Security Directory

MTD Consulting is a Polish consulting firm specializing in assisting clients with acquiring European Union grants and funding. The company positions itself as an expert in the field, providing real data on funds obtained for clients, emphasizing transparency and trust. The website is professionally designed using WordPress and integrates common web technologies such as Bootstrap, jQuery, and Google Maps API. Security measures include HTTPS and Google reCAPTCHA to protect forms, but the site lacks advanced security headers and formal privacy or cookie policies, indicating areas for compliance improvement. Contact information is clearly presented, enhancing business credibility. Overall, the website is accessible, well-structured, and targets Polish businesses seeking EU funding.

n2eyes Agencja Interaktywna is a small interactive web agency based in Gniezno, Poland, specializing in creating unique websites. Their market position is that of a local service provider with a social media presence on Facebook, where they engage with a modest audience. The business model focuses on providing web design and interactive website creation services to businesses and individuals. Technically, the company leverages the Facebook platform for its online presence, utilizing modern web technologies such as React and JavaScript, with hosting and infrastructure managed by Facebook. The page is mobile optimized and performs well, though SEO is basic due to platform constraints. Security posture benefits from Facebook's robust HTTPS and platform security, with no direct vulnerabilities observed on the page. However, the absence of privacy, cookie, and terms of service policies on the page indicates a gap in compliance and transparency. Overall, the risk is low given the platform's protections, but the company should consider linking or publishing these policies to enhance trust and compliance.

E

European Cyclists’ Federation

ecf.com

72

The European Cyclists’ Federation (ECF) is a well-established Brussels-based non-profit organization founded in 1983, dedicated to promoting cycling as a sustainable and healthy mode of transport across Europe. The website serves as a comprehensive platform for advocacy, event promotion, member networking, and resource dissemination, positioning ECF as the leading cycling federation in Europe with a broad membership base. The digital infrastructure leverages modern web technologies including Bootstrap, jQuery, GSAP, and integrates analytics and user tracking tools such as Google Analytics and Hotjar, all managed with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforcement, clientTransferProhibited domain status, and Cloudflare protection, although DNSSEC is not enabled and no explicit security.txt or vulnerability disclosure is present. Overall, the website reflects a professional, trustworthy, and user-friendly digital presence aligned with the organization's mission and audience.

B

Biuro Rekordów

biurorekordow.pl

54

Biuro Rekordów is a specialized Polish company focused on certifying national records and providing consulting services for Guinness World Records. Established in 2014, it serves individuals and organizations aiming to set or verify records, offering official certification and advisory services. The website reflects a niche market position with a clear business model centered on record certification and event consulting. Technically, the site is built on WordPress with modern plugins and tracking tools, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance documentation. The domain registration is consistent and mature, supporting the legitimacy of the business. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

The website suwer.pl represents a modern urban bike rental system operating in Suwałki, Poland, managed by ROOVEE S.A. The service offers 160 bikes across 17 stations, including standard, electric, and tandem bikes. The platform supports multiple languages and integrates with a dedicated mobile app for seamless rental and payment experiences. The business is positioned as a local transportation solution with EU co-financing, indicating public sector support and legitimacy. Technically, the site uses standard web technologies including jQuery, Google Maps API, and FontAwesome, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in DNSSEC and security headers. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, providing clear contact information and user support channels.

Płocki Rower Miejski is a municipal bike rental service operated by ROOVEE S.A., offering a fleet of approximately 310 bikes across 31 stations in Płock, Poland. The service targets local residents and visitors, providing flexible bike rental options via a dedicated mobile application and SMS. The platform integrates with local city cards (PłocKArta) to offer benefits such as free initial ride time. The website is professionally designed with clear navigation, accessibility features, and multilingual support, reflecting a mature digital presence for a recently founded business (2023). Technically, the site uses modern web technologies including Google Maps API and FontAwesome, but relies on an outdated jQuery version and lacks some advanced security headers and DNSSEC, indicating room for technical improvement. Security posture is moderate with HTTPS enforced and cookie consent implemented, but no explicit security or incident response policies are published. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy, safe, and well-aligned with its business purpose.

N

Nextbike Polska S.A.

zielonogorskirowermiejski.pl

62

Zielonogórski Rower Miejski is a bike-sharing service operated under Nextbike Polska S.A., providing urban mobility solutions in Zielona Góra, Poland. The service offers bike rentals via a mobile app, supporting multiple languages and providing clear user guidance. The website is professionally designed with good content quality and clear navigation, targeting residents and visitors seeking alternative transportation. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. Privacy compliance is basic with visible privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and functional with room for security and compliance enhancements.

U

Urząd Miejski w Wągrowcu

wagrowiec.eu

43

The website wagrowiec.eu serves as the official online portal for the city government of Wągrowiec, Poland. It provides comprehensive information and services targeted at residents, tourists, and investors, including news updates, event calendars, municipal services, cultural and sports activities, and investment opportunities. The site is well-structured with clear navigation and multilingual support, reflecting a mature digital presence for a municipal government entity. Technically, the site employs modern JavaScript libraries such as jQuery and Flexslider, uses Google Fonts, and integrates Google Analytics for visitor tracking. Performance optimizations via PageSpeed are evident, and the site is served over HTTPS with good loading speed and mobile optimization. Security posture is solid with HTTPS and privacy mechanisms in place, though security headers could be enhanced and explicit incident response contacts are absent. Privacy and cookie policies are present and GDPR compliant, supporting user consent and transparency. Overall, the site demonstrates a professional and trustworthy government web presence with room for incremental security improvements.

Czeladzki Rower Miejski operates a local urban bike rental system in Czeladź, Poland, offering 50 modern bikes distributed across 4 stations. The service is integrated with the Roovee mobile application, enabling users to rent, pay, and manage rides conveniently. The business targets local commuters and visitors seeking flexible urban mobility solutions. The website demonstrates a solid digital presence with clear service descriptions, pricing, and user support contacts. Technically, the site uses modern web technologies including Google Maps API and FontAwesome, with responsive design and accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the domain registration and WHOIS data align with the business claims, indicating legitimacy and trustworthiness.

KROTOWER is a localized urban bike rental service operating in Krotoszyn, Poland, offering flexible bike rentals without fixed stations. The service is supported by a mobile application available on iOS and Android platforms, enabling users to rent, pay, and manage their rides conveniently. The business partners with Roovee for system management, Autopay for payment processing, and Orange as a technology partner, positioning itself as a modern and user-friendly transportation solution in its market niche. Technically, the website employs a moderate technology stack including Bootstrap, jQuery, FontAwesome, and Google Maps API to deliver a responsive and functional user experience. While the site is mobile-optimized and well-structured, it lacks some advanced SEO and accessibility features. Performance is moderate, with room for improvement in loading speed and modern framework adoption. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but it lacks important security headers and published security policies. There is no visible cookie consent mechanism, which may impact GDPR compliance. Incident response and vulnerability disclosure information are absent, indicating areas for maturity improvement. Overall, the website and business present a trustworthy and professional image with clear contact information and regulatory documentation. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security practices and privacy compliance would enhance the risk posture and user trust.

Żarskie Rowery is a localized urban bike rental service operating in Żary, Poland, managed by ROOVEE S.A. The service offers modern city bikes accessible via a dedicated mobile application and web panel, enabling users to rent and park bikes flexibly within designated zones. The business targets urban commuters and visitors seeking convenient, technology-enabled transportation solutions. The website reflects a consistent brand identity and provides clear user guidance, contact information, and partner affiliations, positioning it as a trustworthy local mobility provider. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Google Maps API for interactive mapping. Hosting is managed via home.pl with standard performance and mobile optimization. However, the site lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security hardening. The WHOIS data confirms domain legitimacy and alignment with the business entity, supporting trustworthiness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and incident response information reduces the overall security maturity. Privacy compliance is partial, with a privacy policy available but no cookie consent or explicit GDPR compliance indicators. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices. Strategically, the business should prioritize implementing security headers, cookie consent, and publishing security policies to improve compliance and user trust. Enhancing analytics and marketing transparency could also support growth. The current risk level is moderate with no critical issues detected.

Śremski Rower Miejski (ŚRM) is a localized urban bike rental service operating in Śrem, Poland, managed by ROOVEE S.A. The service offers modern city bikes accessible via a dedicated mobile application or SMS, providing flexible rental and parking options within a defined service zone. The business targets urban commuters and visitors seeking convenient, eco-friendly transportation. The website is professionally designed with clear navigation and multilingual support, reflecting a focused and user-friendly digital presence. Technically, the site uses standard web technologies including Bootstrap, jQuery, FontAwesome, and Google Maps API, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website and domain registration data align well, indicating a legitimate and operational business.

Toruński Rower Miejski, operated by ROOVEE S.A., is a medium-sized transportation service providing a bike-sharing system in Toruń, Poland. The service offers 360 standard bikes across 70 stations with options for short and long-term rentals, supported by a dedicated mobile application. The website is professionally designed, accessible, and provides comprehensive user information including pricing, FAQs, and legal documents. The business is well-positioned locally with partnerships including Orange and Autopay, enhancing its credibility and operational capabilities. Technically, the site employs modern web technologies such as Google Maps API and FontAwesome, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a trustworthy and professional business with a solid digital presence.

Polkowicki Rower Miejski (PRM) is a localized urban bike sharing service operating in Polkowice, Poland, managed by ROOVEE S.A. The service offers modern city bikes equipped with GPS and electronic locks, enabling users to rent bikes via a dedicated mobile app or SMS. The business model focuses on flexible, stationless bike rentals with clear pricing and deposit structures. The website is professionally designed, providing clear user guidance, contact information, and partner acknowledgments, positioning PRM as a trusted local transportation option. Technically, the website employs a modern but basic tech stack including Bootstrap, FontAwesome, jQuery, and Google Maps API. The site is mobile optimized and accessible with a cookie consent mechanism and privacy policy in place. However, some security best practices are missing such as DNSSEC and HTTP security headers, and the use of an outdated jQuery version poses potential risks. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks published security policies or incident response contacts. The WHOIS data is consistent and transparent, reinforcing legitimacy. Overall, the site scores well on business credibility and privacy compliance but has room for improvement in security hardening. Strategically, PRM should focus on enhancing security posture by enabling DNSSEC, adding security headers, updating libraries, and publishing security policies. These steps will improve trust and resilience while maintaining a user-friendly and privacy-respecting service.

R

Rosické TS, příspěvková organizace

rosickets.cz

48

Rosické TS is a municipal contributory organization established by the city of Rosice in 2007 to provide essential public services such as city cleaning, waste management, public lighting maintenance, and road upkeep. The organization serves the local community and operates under the governance of the city council. The website reflects this public service role with clear contact information and descriptions of services offered. Technically, the website uses legacy JavaScript libraries like jQuery and MooTools, with a moderate performance profile and basic mobile optimization. Security posture is moderate with HTTPS usage implied but lacks advanced security headers and published privacy policies. The absence of WHOIS data reduces domain trust, but the website content and contact details support legitimacy. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.

S

Správa zámku Rosice

zamek-rosice.cz

39

Zámek Rosice is the official website for the Rosice Castle, a national cultural monument located near Brno, Czech Republic. The site provides comprehensive visitor information including tour circuits, event hosting such as weddings, school trips, and exhibitions. The organization operates as a public contributory entity managing the castle and its cultural offerings. The website targets tourists, local visitors, schools, and event organizers, positioning itself as a regional cultural heritage site with active community engagement. Technically, the site is built on WordPress using the GeneratePress theme and several plugins for enhanced user experience such as infinite scroll and masonry layouts. It is mobile-optimized and uses modern web technologies including jQuery and Google Fonts. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and incident response disclosures. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, serving its audience effectively with room for improvement in privacy and security transparency.

S

Středisko volného času Rosice - RUBIKO

svcrubiko.cz

58

Středisko volného času Rosice - RUBIKO is a local leisure and educational center based in Rosice, Czech Republic, providing a variety of programs such as courses, camps, workshops, and community events primarily targeting children, youth, and families. The organization operates as a non-profit entity focused on youth education and leisure activities within the local community. The website reflects this mission with clear navigation and relevant content about their services and upcoming events. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Google Maps API, and Google Analytics, with a moderate performance profile and good mobile optimization. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements, although it lacks advanced security headers and explicit security policies. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, but the website content and contact information support its legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations, serving its community effectively.

O

Oblastní muzeum v Lounech

archeoskanzenbrezno.cz

57

Archeoskanzen Březno is an archaeological open-air museum affiliated with the regional museum in Louny, Czech Republic. It offers educational programs, prehistoric-themed events, and summer camps aimed at students and adults interested in archaeology and cultural heritage. The website provides detailed event calendars and program descriptions, targeting a general audience with an interest in education and culture. Technically, the site is built on the Webnode CMS platform, hosted via AWS Cloudfront CDN, and employs Google Tag Manager for analytics. The site is mobile-optimized and presents a clear navigation structure with good content quality. Security-wise, the site uses HTTPS with a good SSL configuration but lacks important security headers and privacy/cookie policies, which impacts compliance and security posture. WHOIS data is unavailable, likely due to privacy protection, which is common for small cultural institutions. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and privacy compliance measures.

M

Městská knihovna Louny

mkl.cz

45

Městská knihovna Louny is a public library and cultural center serving the Louny region in the Czech Republic. The website provides information about library services, events, educational programs, and social services targeting a broad audience including students, seniors, and the general public. The institution has a long-standing presence since 2002, supported by local government and cultural partners. The site offers online catalogs, event calendars, and contact information to facilitate community engagement. Technically, the website uses a traditional web stack with jQuery, Slick Carousel, and Google Analytics for tracking. The site is moderately optimized for performance and mobile devices, with basic accessibility features. The content is well structured and professionally presented, though the CMS or platform is not explicitly identified. Hosting is likely provided by the registrar REG-WEBGLOBE. From a security perspective, the site lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance and enhanced protection. The use of HTTPS is implied but not explicitly confirmed in the provided data. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and long-term registration consistent with the public institution's profile. Overall, the website is a trustworthy and professional digital presence for a public library, with room for improvement in security and privacy compliance to meet modern standards.

Z

ZEROLINE

zeroline.cz

44

ZEROLINE is a Czech Republic-based visual studio established in 2010, specializing in professional custom web design, e-commerce solutions, graphic and print work, photography, and virtual tours. The company targets local businesses and individuals seeking tailored digital and visual services. Their market position is that of a small, regionally focused service provider with a consistent brand presence and clear service offerings. Technically, the website employs legacy JavaScript libraries such as jQuery 1.8.2 alongside Google Analytics and OneSignal for analytics and push notifications. While the site is functional and moderately optimized for mobile and SEO, it lacks modern security headers and uses outdated libraries, which pose security risks. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, including named personnel and social media links, enhancing business credibility. Overall, the website is accessible without WAF or blocking mechanisms, but improvements in security and privacy compliance are recommended.

L

LOKART s.r.o.

lokart.cz

42

LOKART s.r.o. is a Czech family-owned manufacturing company specializing in cardboard packaging solutions, established in 1991. The company offers a range of products including corrugated and laminated cardboard packaging, supported by design consulting and just-in-time delivery services. It holds recognized certifications such as ISO 9001, ISO 14001, and FSC, positioning itself as a leading cardboard processor in the Zlín region. The website reflects a professional business presence with clear contact information and service descriptions. Technically, the website uses legacy JavaScript libraries like jQuery and Google Analytics for tracking. The site has moderate performance and basic mobile and accessibility features. However, there is no evidence of modern CMS or advanced frameworks. SEO and metadata are minimal but sufficient for basic discoverability. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. The absence of cookie consent mechanisms and detailed privacy policies indicates partial GDPR compliance. The WHOIS data is missing, which raises concerns about domain registration transparency, although the website content and certifications suggest a legitimate business. Overall, the website is functional and informative but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and user experience.

T

TAPEX EU s.r.o.

tapexeu.cz

48

TAPEX EU s.r.o. is a well-established Czech manufacturing company specializing in packaging materials, operating since 2003 with a strong market presence in the Czech and Slovak markets. The company offers a broad range of packaging products including adhesive tapes, protective edges, foils, and specialized packaging solutions, supported by significant warehouse capacity and EU-funded innovation projects. Their website reflects a professional business-to-business orientation with clear product offerings and contact channels. Technically, the site is built on Drupal 7 with legacy libraries, indicating a need for modernization but currently functional and moderately optimized for mobile and SEO. Security posture is adequate with HTTPS and cookie consent mechanisms, though the use of outdated CMS and libraries presents potential risks. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the company demonstrates credible business operations with transparent contact information and trust signals such as EU funding and quality assurances.

B

BIKA

bika.cz

59

BIKA is a Czech-based wholesale distributor specializing in office supplies, cleaning products, and refreshments, targeting primarily business customers within the Czech Republic. The company positions itself as a reliable supplier with a focus on B2B sales and delivery under substitute fulfillment regimes. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site leverages modern frontend technologies such as React and Ant Design, ensuring a responsive and user-friendly experience. The presence of privacy and cookie policies indicates attention to regulatory compliance, particularly GDPR. Security-wise, the site enforces HTTPS and includes essential security headers, though it lacks a dedicated security policy or vulnerability disclosure page. The absence of WHOIS data due to privacy protection slightly impacts trust but does not overshadow the overall legitimacy suggested by the website content and structure. Strategic recommendations include enhancing transparency around security policies and incident response, improving accessibility features, and maintaining vigilance on third-party scripts to mitigate vulnerabilities.

S

SOLLAU CZ s.r.o.

sollau-cz.cz

54

SOLLAU CZ s.r.o. is a Czech company specializing in supplying materials and products for the plastics industry, including plastic shredders, magnetic separators, and recycling technologies. The company positions itself as a trusted partner with 15 years of experience, offering comprehensive services from material supply to testing and equipment servicing. Their market focus is primarily on the Czech Republic and surrounding regions, targeting plastic processors and manufacturers. Technically, the website is well-structured, mobile-optimized, and uses modern web technologies such as jQuery and Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. The lack of WHOIS data reduces domain trust but the website content and business information appear professional and credible. Overall, the site scores well on content quality, privacy compliance, and business credibility, with room for improvement in security transparency and domain registration verification.

The domain quijote.cz currently hosts only a placeholder page indicating that the presentation of the domain is unavailable. There is no active website content, business description, or contact information provided. The domain is registered with REG-ZONER, a Czech registrar, since 2004, indicating a long-standing registration but no current active use. The website lacks any privacy, cookie, or security policies and does not implement HTTPS or security headers based on the provided data. No forms, scripts, or external links are present, and no analytics or advertising technologies are detected. Overall, the website is inactive and provides no business or security information.

M

Město Žatec

mesto-zatec.cz

42

Město Žatec operates an official municipal website serving residents and visitors with comprehensive information about city governance, events, institutions, and public services. The site positions itself as the authoritative source for local news, administrative details, and cultural activities in Žatec, Czech Republic. It targets a broad audience including citizens, tourists, and local organizations. The business model is typical for government entities, focusing on transparency and public engagement. Technically, the website employs a custom CMS platform with a modern frontend stack including jQuery, Bootstrap, Swiper, and PhotoSwipe for interactive content and media presentation. The site is mobile-optimized and accessible, with a clear navigation structure and SEO-friendly metadata. Cookie consent mechanisms are implemented to comply with privacy regulations, although no explicit privacy policy page was detected. From a security perspective, the site uses HTTPS and includes cookie consent scripts, but lacks visible security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces confidence in domain registration transparency but does not detract significantly from the site's legitimacy given its official nature and extensive content. Overall, the website presents a professional and trustworthy digital presence for the city of Žatec, with recommendations to enhance privacy disclosures and security headers to improve compliance and protection.

F

Federal Chief Information Officers Council

cio.gov

75

The website www.cio.gov serves as the official online presence of the Federal Chief Information Officers Council, a U.S. government entity focused on improving IT practices across federal agencies. It provides authoritative resources including policies, guides, and news relevant to federal IT leadership. The site targets government IT professionals and stakeholders, positioning itself as a trusted source for federal IT governance and management. Technically, the site employs modern web technologies such as the U.S. Web Design System (USWDS), jQuery, and integrates Google Analytics and the Digital Analytics Program for user tracking. The site is mobile-optimized, accessible, and uses HTTPS to secure communications. Security posture is strong with encrypted connections and anonymized analytics, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the site is highly trustworthy, consistent with official government branding and content, and shows no signs of malicious activity or suspicious behavior.

Plainlanguage.gov is an official U.S. government website managed by the Plain Language Action and Information Network (PLAIN), a community of federal employees promoting clear and accessible government communications. The site provides comprehensive resources including guidelines, training, examples, and events to support the use of plain language across federal agencies. It is affiliated with the U.S. General Services Administration (GSA), reinforcing its authoritative position in the government sector. Technically, the website leverages modern web standards and the U.S. Web Design System (USWDS) to ensure accessibility, mobile optimization, and fast performance. It integrates Google Analytics and DigitalGov analytics for user tracking and measurement, while maintaining a clean and professional design with clear navigation and structured content. From a security perspective, the site enforces HTTPS and follows good practices by not exposing sensitive data. However, it lacks some advanced security headers and a formal security policy or incident response contact, which could be areas for improvement. Privacy compliance is moderate, with a clear privacy policy but no cookie consent mechanism detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and usability, making it a reliable resource for its target audience. The domain's WHOIS data is limited due to .gov domain policies but the affiliation with GSA and consistent branding strongly support legitimacy and trust.

F

Fandi mámám z.s.

fandimat.cz

48

FandiMat is a Czech non-profit project operated by Fandi mámám z.s., focused on facilitating material aid between people in need and donors including individuals and companies. The platform offers a web and mobile app interface, enabling users to request or offer material goods such as clothing, food, and household items. The project also includes physical exchange points called FandiMatPOINTs. The website is professionally designed, content-rich, and well-structured, targeting socially vulnerable groups and charitable organizations in the Czech Republic. Technically, the site is built on WordPress with modern plugins and SEO tools, supported by Google Analytics and Tag Manager for analytics and marketing. Security posture is good with HTTPS and cookie consent mechanisms, though security headers could be improved. The domain registration is consistent and legitimate, supporting the trustworthiness of the project.

S

Středočeské inovační centrum

s-ic.cz

46

Středočeské inovační centrum is a regional innovation hub based in the Czech Republic, focused on supporting startups, SMEs, and corporations in the Central Bohemian region. The organization provides key services such as startup development, financial sourcing, consultations, and networking within an innovation ecosystem. The website reflects a mature digital presence with multilingual support, event management, and active content updates. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a medium-sized business with a decade of operation.

M

Muzeum města Brna

muzeumbrna.cz

45

Muzeum města Brna is a well-established cultural institution dedicated to preserving and showcasing the history and heritage of Brno, Czech Republic. The website reflects a medium-sized government/non-profit entity with a strong focus on exhibitions, educational programs, and cultural events. It serves a broad audience including tourists, local citizens, and educational institutions. The digital presence is supported by a modern tech stack including jQuery, Bootstrap, and Google services, with good mobile optimization and user experience. Privacy and cookie compliance are well implemented with clear consent mechanisms and GDPR adherence. Security posture is solid with HTTPS and reCAPTCHA integration, though improvements in security headers and explicit policies are recommended. The absence of WHOIS data limits domain trust assessment but the website's professional presentation and official partnerships indicate legitimacy.

The website brno1645.cz is an educational and cultural project presenting virtual 3D models of the city of Brno as it appeared during the 1645 Swedish siege. The project is small-scale and niche, targeting history enthusiasts and the general public interested in historical reconstructions. The site offers downloadable models for use with Google Earth and provides historical context and updates. The business model is non-commercial, focusing on cultural heritage dissemination. Technically, the website is simple, built with basic HTML and CSS without modern frameworks or CMS. It lacks advanced technical features such as responsive design, accessibility enhancements, or SEO optimizations. No analytics or tracking scripts are present, indicating minimal digital maturity. Performance is moderate given the static nature of the content. From a security perspective, the site lacks HTTPS enforcement and security headers, which lowers its security posture. There are no privacy or cookie policies, and no incident response or vulnerability disclosure information is provided. Contact information is limited to a single email address. No forms or user input mechanisms are present, reducing attack surface but also limiting user engagement. Overall, the website is safe and trustworthy for its intended educational purpose but would benefit from improvements in security, privacy compliance, and technical modernization to enhance user trust and protection.

W

Webškoly services s.r.o.

web-skoly.cz

47

Web Školy is a Czech company specializing in creating modern, customized websites for educational institutions including basic, middle, secondary schools, and gymnasiums. With over 15 years of experience and more than 66 school websites created, they offer a proprietary content management system designed for ease of use by teachers and school staff. Their services include full design, CMS integration, training, data import, and ongoing support, positioning them as a trusted niche provider in the education sector. Technically, the website employs modern web technologies such as the Nette Framework, jQuery, Bootstrap, and integrates analytics tools like Google Analytics and Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and secure form handling, though improvements are recommended in publishing security headers and explicit privacy policies. The absence of WHOIS data for the domain is a notable gap in trust verification, though the website content and business information appear professional and credible.

P

Pilotmedia s.r.o.

pilotmedia.cz

48

Pilotmedia s.r.o. is a Czech Republic-based media company specializing in video production, digital software development, and marketing services. Established in 2009, the company serves businesses seeking professional media content and digital solutions to enhance their market presence. Their website showcases a portfolio of notable clients and long-term collaborations, reflecting a stable market position. Technically, the website uses standard web technologies including jQuery and jwplayer, with analytics powered by Google Analytics and Piwik (Matomo). The site is served over HTTPS with asynchronous script loading, indicating moderate digital maturity. However, privacy and cookie policies are absent, and security headers are not detected, suggesting room for improvement in compliance and security posture. Overall, the website is professional, content-rich, and trustworthy, but would benefit from enhanced privacy compliance and security best practices.

M

Mediatex s.r.o.

mediatex.sk

56

Mediatex s.r.o. is a Slovak telecommunications service provider specializing in premium tariff services with direct contractual and technical connections to all major operators and integrators of mobile and fixed networks in Slovakia. Their key offerings include audiotex, premium SMS, SMS micro-payments, and SMS marketing services tailored to business customers and partners. The company has been established since 2007, indicating a stable presence in the telecommunications market. The website reflects a professional and consistent brand image with good content quality and clear service descriptions. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and Slider Revolution, with integration of Google Analytics and Google Tag Manager for tracking. The site is mobile optimized and demonstrates good SEO practices. Hosting details are not explicitly disclosed but DNS points to Microsoft Online servers. Performance is moderate with basic accessibility features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. No security headers were detected in the provided data. Privacy compliance is basic with cookie consent implemented but no detailed GDPR statements or data protection officer contact found. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website and domain registration data indicate a legitimate and credible business with a good market position in Slovakia's telecommunications sector. Strategic recommendations include enhancing security transparency, publishing privacy and incident response policies, and improving accessibility and GDPR compliance to strengthen trust and compliance posture.

V

Výskumný ústav vodného hospodárstva

vuvh.sk

55

Výskumný ústav vodného hospodárstva (VÚVH) is a well-established Slovak government research institute specializing in sustainable water management, environmental protection, and water quality improvement. With over 70 years of history, it offers a broad range of services including hydrological research, river morphology, water protection, laboratory services, and professional training. The website reflects a mature digital presence with comprehensive content targeting professionals, researchers, students, and the general public interested in water management. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering good performance and mobile responsiveness. Security posture is solid with HTTPS, cookie consent, and some security best practices, though explicit security headers could be improved. Privacy compliance is strong with clear cookie and privacy policies. Overall, the site projects high trustworthiness and professionalism.

Fleetcor Poland sp. z o. o. operates as an authorized distributor of fuel cards and telematics solutions, primarily serving businesses with vehicle fleets across Poland and Europe. Their offerings include Shell and MOL fuel cards, telematics via Carnet, and additional services like videotolling, providing clients with centralized and digital fleet expense management. The company leverages a broad network of over 26,000 fuel stations in Europe, positioning itself as a comprehensive mobility partner for various business sizes. Technically, the website is built on modern frameworks such as Next.js and React, integrating multiple marketing and analytics tools including Google Tag Manager, Microsoft Clarity, Hotjar, and Marketo. The site is mobile-optimized and employs cookie consent management via Cookiebot, reflecting a mature digital infrastructure. Hosting details are not explicit, but domain registration is managed by GoDaddy, a reputable registrar. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA v3 to protect forms. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are absent, representing areas for improvement. No vulnerabilities or suspicious content were detected, and privacy compliance is supported by clear privacy and cookie policies. Overall, the website presents a professional and trustworthy digital presence aligned with its business objectives. Strategic recommendations include publishing detailed security and incident response policies, implementing a vulnerability disclosure program, and enhancing accessibility features to further strengthen compliance and user trust.

Fleetcor Deutschland GmbH operates a professional website offering modern fleet management solutions tailored for German and European companies. The company provides a range of services including fuel cards, charging cards, telematics, and digital fleet management tools. The website positions Fleetcor as an authorized Shell partner with extensive acceptance networks across Europe, targeting businesses of all sizes. The technical infrastructure is modern, leveraging Next.js and React frameworks, and integrates multiple marketing and analytics tools with a cookie consent mechanism to comply with privacy regulations. Security posture is solid with HTTPS and bot protection, though some security headers could be enhanced. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

F

FLEETCOR Czech republic s.r.o.

fleetcor.cz

65

FLEETCOR Czech republic s.r.o. operates as a leading provider of international fuel card solutions, including the Shell Card, targeting business clients requiring fleet management and fuel payment services. The company is part of the global FLEETCOR Technologies group, listed on NYSE, with a strong market position in energy and transportation sectors. The website reflects a professional and business-focused approach, offering tailored solutions for corporate clients. Technically, the site is built on Drupal 8, leveraging modern web technologies such as Google Tag Manager and Cookiebot for consent management, ensuring compliance with GDPR and cookie regulations. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms but lacks explicit security policies or incident response contacts. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, the website is trustworthy, compliant, and professionally maintained, supporting the company's business credibility and digital maturity.

A

Artel

artel-solutions.biz

62

Artel is a French company founded in 2017 specializing in telematics solutions, likely targeting businesses in transportation and fleet management sectors. The website analyzed is primarily a login portal for their telematics platform, indicating a B2B service model focused on vehicle tracking and fleet management. The company's market position appears niche, serving specialized telematics needs. Technically, the website uses AngularJS and Angular Material frameworks and is hosted on AWS infrastructure, suggesting a modern but somewhat dated frontend technology stack. The site lacks public-facing content such as privacy policies, cookie consent mechanisms, or terms of service, which limits transparency and compliance visibility. Security posture is basic with no detected security headers or advanced protections, and no incident response or vulnerability disclosure information is available. Overall, the website is functional but lacks comprehensive security and privacy features, which could impact trust and compliance.

P

PREVENT s.r.o.

eskoleni.net

62

The website https://eskoleni.net/user/ represents an online training platform operated by PREVENT s.r.o., a Czech company specializing in online education, consulting, auditing, and certification services. The platform targets users seeking professional online training and certification, positioning itself as a niche educational service provider since 2020. The business model combines B2B and B2C elements, focusing on delivering contractual educational services and related consulting. The website content is primarily in Czech and includes a secure login form for users, with a comprehensive GDPR-compliant privacy policy presented in a modal dialog.

A

Arval

myarval.com

65

My Arval is a corporate login portal associated with Arval, a major player in vehicle leasing and fleet management services, part of the BNP Paribas group. The website serves existing customers across multiple countries, providing access to contract management and related services. The branding and content align with a professional transportation services business model targeting B2B and B2C clients. The platform is built using the OutSystems low-code framework, integrating common web technologies such as jQuery and Google Analytics for tracking and performance monitoring. Technically, the site demonstrates moderate digital maturity with HTTPS enforced and basic mobile optimization. However, it lacks visible security headers and comprehensive privacy or terms of service documentation, which are important for compliance and user trust. The absence of WHOIS registration data is a notable anomaly, potentially indicating privacy protection or technical issues with domain registration visibility. From a security perspective, the site uses secure forms with validation and cookie consent mechanisms, but it does not expose detailed security policies or incident response contacts. No vulnerabilities or malicious content were detected in the provided data. Overall, the security posture is moderate but could be improved by adding security headers, publishing privacy and terms policies, and providing clear contact information for security incidents. The overall risk is moderate due to the lack of WHOIS transparency and incomplete privacy documentation. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, adding vulnerability disclosure information, and improving accessibility and contact transparency to strengthen trust and compliance.

A

Arval BNP Paribas

arval.com

73

Arval BNP Paribas is a leading global provider of full-service vehicle leasing and innovative mobility solutions, operating as part of the BNP Paribas Group. The company targets businesses and fleet managers seeking sustainable and efficient vehicle leasing options, emphasizing corporate social responsibility and sustainable mobility. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its corporate identity. Technically, the site is built on Drupal 10, integrates Google Tag Manager for analytics, and uses OneTrust for cookie consent management, indicating a modern and privacy-aware infrastructure. Security posture is strong with HTTPS enforcement, Content Security Policy with nonce, and cookie consent mechanisms, although explicit security policies and incident response contacts are not prominently published. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the strong corporate signals and external references. Overall, the site is professional, secure, and compliant with privacy regulations, serving its business audience effectively.

A

ARVAL CZ s.r.o.

arvalauto.cz

54

ARVAL CZ s.r.o. operates a professional vehicle leasing and sales platform in the Czech Republic, specializing in operational leasing of new and used vehicles. The company targets both individual and business customers, offering a wide range of vehicle brands and flexible leasing options. The website is well-structured, with clear navigation and comprehensive content supporting the business model. Technically, the site employs modern JavaScript libraries and tracking tools, including Google Tag Manager and Adform, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers suggests room for improvement. The lack of publicly available WHOIS data for the domain slightly reduces trust but is likely due to registry policies rather than malicious intent. Overall, the site presents a credible and professional digital presence for a medium-sized transportation leasing business.

Roovee S.A. operates a modern city bike rental system primarily in Poland, leveraging IoT technology, solar panels, and a mobile app to provide eco-friendly transportation solutions. The company positions itself as the only fully Polish bike sharing provider with a growing presence in multiple cities, supported by partnerships with technology leaders like Orange. The website reflects a mature digital infrastructure built on WordPress with SEO and analytics integrations, offering a good user experience and clear business information. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the business demonstrates credibility and compliance with GDPR, including a named Data Protection Officer. The domain registration data aligns well with the company's claims, supporting legitimacy.

The website 4parents.pl is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks access to the actual site content. This prevents extraction of meaningful business, contact, or policy information. The domain is registered with home.pl S.A., a reputable Polish registrar, since 2016, indicating a potentially legitimate business presence. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies limit the ability to assess compliance and security posture fully. The site uses Cloudflare services for security and analytics, but no other technologies or CMS platforms are detectable. Overall, the website's digital maturity appears low due to the blocking mechanism and minimal visible content.

Konsultacje Społeczne is a Polish online platform and application designed to facilitate transparent public consultations and dialogue between local government authorities and residents. The service is primarily targeted at Polish local government units (JST) and their citizens, providing a unique tool to support social consultations. The business is operated by EuroInnowacje Software Sp. z o.o., a small-sized company founded in 2017, positioning itself as a pioneer in Poland for digital civic engagement solutions. The website reflects a professional and consistent brand image with clear business objectives and a focus on government sector clients. Technically, the website employs a straightforward tech stack including jQuery, Bootstrap grid, and Google Fonts, hosted by home.pl S.A. The site is mobile-optimized with good SEO practices but lacks advanced frameworks or CMS. Performance is moderate with basic accessibility features. No major technical debts or outdated technologies were detected, though updating jQuery and adding modern security headers would enhance the infrastructure. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No forms or user input fields are present on the main page, reducing attack surface. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. However, the absence of a published security policy or incident response contacts indicates room for maturity improvement. Overall, the website presents a moderate risk profile with good business credibility but some gaps in privacy compliance and security best practices. Strategic improvements in security headers, cookie consent, and incident response transparency would strengthen trust and compliance posture.

SatysfakcjaKlienta.pl is a Polish online platform specializing in customer satisfaction surveys, primarily targeting healthcare and hospitality sectors such as hotels, hospitals, medical points, and pharmacies. The service offers a professional survey creator with a user-friendly management panel, automated reporting, and features like personalized graphic surveys and emotion analysis of respondents. The business operates as a small-sized entity founded in 2018 and is managed by MTD Consulting Marcin Król, with clear contact details and GDPR-compliant privacy policies. The website is professionally designed with consistent branding and good content relevance, supporting its niche market position. Technically, the website uses a modern but straightforward tech stack including Bootstrap, jQuery, FontAwesome, and Google Fonts. It is mobile-optimized and SEO-friendly, though no CMS or advanced platforms are detected. Hosting is likely provided by home.pl S.A., the domain registrar. Performance is moderate with basic accessibility features. No analytics or advertising scripts are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (implied by URL), but lacks visible security headers and DNSSEC is not enabled. The privacy policy is comprehensive and GDPR-compliant, but no explicit security policy or incident response contacts are provided. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business profile, showing a domain age appropriate for the company’s founding date. Overall, the website presents a trustworthy and professional image with good privacy compliance and moderate security posture. Strategic improvements in security headers, DNSSEC, and incident response transparency would enhance its security maturity and trustworthiness.

The website inwestycjejst.pl serves as a modern portal designed to present investment offers for local government units (Gminy) in Poland. It provides a simple, intuitive, and graphically customizable platform available in multiple languages and compliant with PAIH standards. The business targets municipalities and investors, positioning itself as a niche service provider in the government technology sector. The domain is registered with a reputable Polish registrar and has been active since 2018, aligning well with the business's operational timeline. Technically, the website employs standard web technologies such as HTML5, CSS3, and Google Fonts, with no detected CMS or complex frameworks. The site is moderately optimized for performance and mobile devices, with good SEO practices evident from meta tags and structured content. However, accessibility features are basic, and no advanced technical frameworks or analytics tools are detected. From a security perspective, the site lacks visible security headers and does not provide privacy, cookie, or terms of service policies, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure mechanisms are present. The domain uses HTTPS (assumed from URL), but DNSSEC is not enabled, which could improve DNS security. Overall, the security posture is moderate but requires enhancements to meet best practices. The overall risk assessment suggests a legitimate and professionally presented business with minor compliance and security shortcomings. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing vulnerability disclosure and incident response protocols to enhance trust and compliance.

R

Rekord Mobile Sp. z o.o.

jstonline.pl

60

Rekord Mobile Sp. z o.o. operates the mMieszkaniec platform, a modular mobile application designed to facilitate communication and service delivery between Polish local governments and their residents. The company positions itself as a specialized technology provider for the public sector, offering a suite of integrated modules such as announcements, issue reporting, waste management, participatory budgeting, consultations, and resident cards. The website reflects a professional and consistent brand image, targeting municipal authorities and citizens with a clear value proposition. Technically, the site is built on WordPress with modern plugins and APIs, including Google Maps and reCAPTCHA, ensuring a functional and user-friendly experience. Security posture is solid with HTTPS, cookie consent, and anti-spam measures, though some enhancements like DNSSEC and security headers are recommended. Overall, the domain registration and business information align well, supporting legitimacy and trustworthiness.