Security Directory

A

AFS Intercultural Programs Philippines

afs.ph

60

AFS Intercultural Programs Philippines operates as a non-profit organization specializing in intercultural learning and study abroad programs primarily targeting secondary school students, families, and volunteers. The organization holds a strong market position as a leading provider of educational exchange opportunities in the Philippines, supported by scholarships, volunteer programs, and a global competence certificate. Their digital presence is professional, well-branded, and optimized for search engines, reflecting a mature and user-friendly website experience. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Google reCAPTCHA Enterprise, leveraging Amazon Cloudfront CDN for content delivery. The site demonstrates good mobile optimization, accessibility, and performance, although there is room for improvement in publishing explicit security policies and incident response information. From a security perspective, the site employs HTTPS with strong SSL configuration and security headers, uses reCAPTCHA to protect forms, and avoids exposing sensitive data. However, it lacks a dedicated security policy or vulnerability disclosure mechanism, which could enhance trust and compliance. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professionally managed, and secure, with minor gaps in security transparency. The domain registration data aligns well with the organization's identity, reinforcing legitimacy and credibility.

A

Aquapark Kravaře

aquapark-kravare.cz

53

Aquapark Kravaře is a modern recreational aquapark located in the Czech Republic, offering a variety of water attractions such as a 65-meter toboggan, wild river, whirlpool, and massage features. The facility also hosts a swimming school and provides additional wellness services like sauna and massages. The website is professionally designed with good content quality and clear navigation, targeting families and general visitors seeking leisure activities. Technically, the site uses a Webnode CMS platform, leverages AWS Cloudfront CDN for hosting, and integrates Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response contacts. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, impacting overall trust. Privacy policies are present and GDPR compliant, but terms of service and direct contact details are limited. Overall, the site is functional and safe for general audiences but would benefit from enhanced security practices and clearer business contact information.

Schneider Electric is a global leader in energy management and automation solutions, offering a broad range of products including the APC branded offers featured on this website. The company targets business customers requiring reliable and connected energy solutions. The website demonstrates a mature technical infrastructure leveraging modern web technologies such as SystemJS, Web Components, and cloud-based CDNs, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and use of sanitization libraries, although explicit security policies and incident response information are not visible on this page. Privacy compliance is limited on this page, with no visible privacy or cookie policies, which should be addressed to improve user trust and regulatory adherence. Overall, the website is professional and trustworthy, but the absence of WHOIS data and registrant information is unusual and warrants further verification.

A

Awen Amenca z.s.

awenamenca.cz

55

Awen Amenca is a small non-profit organization based in the Czech Republic focused on reducing school segregation by empowering Roma parents, advocating for equal access to education, and organizing community leadership. Their website clearly communicates their mission, activities, and impact, targeting Roma communities, parents, schools, and municipalities. The organization operates campaigns to enroll Romani children in quality mainstream schools and supports legal advocacy against discrimination. Technically, the website is built on the Webnode CMS platform, uses AWS Cloudfront CDN for hosting, and integrates Google Analytics and ShareThis for tracking and social sharing. The site is mobile optimized with good design and navigation, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies. WHOIS data is unavailable, which limits domain trust assessment. No privacy or cookie policies are found, indicating compliance gaps. Overall, the website is functional and professional but could improve transparency and security compliance.

F

Frank Bold Advisory

frankboldadvisory.cz

10

Frank Bold Advisory is a professional consulting firm specializing in ESG reporting, energy management, and strategic communication with a focus on sustainability and compliance with European standards such as CSRD and EU taxonomy. The company positions itself as a leader in ESG advisory with direct involvement in European ESG standard development and a decade of experience. Their services target businesses seeking to improve sustainability reporting and energy efficiency. Technically, the website is built on modern platforms like Webflow, uses multiple analytics tools including Google Analytics and Matomo, and implements cookie consent mechanisms, reflecting a mature digital presence. Security posture is generally good with HTTPS and consent management, but lacks visible security headers and published security policies. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, though the professional content and branding suggest a legitimate business. Overall, the website is well-designed, content-rich, and trustworthy, with recommendations to enhance security transparency and verify domain registration details.

T

Technické služby Velké Popovice, příspěvková organizace

tsvp.cz

57

Technické služby Velké Popovice is a municipal service organization providing essential technical and environmental services to the local community of Velké Popovice, Czech Republic. Their offerings include sewer cleaning, waste collection, water supply, and sewage management. The website serves as an information portal for residents, providing updates, service announcements, and contact details. The organization operates as a public entity, likely funded by local government and service fees, positioning itself as a key local utility provider. Technically, the website is built on the Webnode CMS platform, utilizing Cloudfront CDN for content delivery and Google Analytics for visitor tracking with IP anonymization enabled. The site is accessible, with a moderate performance profile and basic mobile optimization. However, it lacks advanced SEO and accessibility features. No blocking or WAF mechanisms were detected, indicating open access. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information suggest legitimacy. Overall, the security posture is moderate but could be improved with better compliance and security controls. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, and verify domain registration details. Enhancing compliance and security transparency will improve trust and reduce potential risks.

P

Pudeto

pudeto.cz

48

Pudeto is a Czech-based online marketing agency founded in 2019, specializing in outsourced marketing services for e-commerce and online businesses. They offer PPC, web analytics, social media marketing, audits, and email marketing, supported by proprietary tools such as Pobo.cz and Cenový automat. The website is professionally designed using WordPress with the Enfold theme and optimized for performance and mobile devices. Security posture is good with HTTPS and reCAPTCHA integration, but lacks explicit privacy and cookie policies. Contact is primarily via a contact form, with no direct emails or phone numbers publicly listed. The domain registration data aligns well with the business claims, indicating legitimacy.

O

optik studio Jana Čížková s.r.o.

optik.studio

58

Optik Studio Jana Čížková s.r.o. is a small retail optical business based in the Czech Republic, specializing in the sale of branded eyewear and providing expert optical services. The website presents a professional and consistent brand image, targeting consumers seeking quality eyeglasses and optical care in Prague. The company maintains an active blog and social media presence, enhancing customer engagement. Technically, the website is built on the Webnode CMS platform, hosted via Amazon Cloudfront CDN, and employs modern web technologies including Google Analytics and Tag Manager for tracking. The site is mobile-optimized and performs moderately well, with good SEO practices in place. Security-wise, the site uses HTTPS with a valid SSL certificate and implements a cookie consent banner, but lacks advanced security headers and explicit privacy or security policies. WHOIS data is unavailable due to privacy protection, which is common and justified for this business type. Overall, the website is trustworthy and functional but could improve in privacy transparency and security hardening.

C

Citybikes

citybikes.cz

58

Citybikes.cz is a Czech Republic-based e-commerce retailer specializing in urban bicycles, electric bikes, and related accessories. Established since 2006, the company targets urban cyclists, families, and seniors seeking sustainable and healthy transportation options. The website offers a broad catalog of products including folding bikes, children's bikes, and bike accessories, supported by repair and conversion services. Technically, the site is built on the Shoptet platform, leveraging common web technologies such as jQuery, Google Analytics, and Facebook Pixel for marketing and analytics. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy trust scores. Overall, the website is professional and trustworthy from a user perspective but would benefit from enhanced transparency on domain registration and security policies.

A

Medicare.pl - Kliknij po zdrowie (dawniej allecco.pl)

allecco.pl

62

Medicare.pl is a large Polish online pharmacy platform offering a wide range of approximately 18,000 products including medicines, cosmetics, supplements, and medical devices. The business model combines e-commerce with physical pickup points in over 800 pharmacies across 364 cities, targeting general consumers seeking convenient access to health-related products. The website is built on the AptusShop CMS platform and leverages modern technologies such as Google Tag Manager, Cookiebot for consent management, and various marketing tools like Prefixbox and Edrone. Hosting and content delivery are supported by Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and multiple security headers present, although explicit privacy policies and terms of service are not found in the provided content. WHOIS data is unavailable from the Polish NASK registry, which slightly reduces trust but is common for privacy-protected domains in this sector. Overall, the website demonstrates a professional and trustworthy e-commerce presence in the healthcare industry.

B

BIG EVIL CORPORATION

bigevilcorporation.co.uk

58

BIG EVIL CORPORATION is a small UK-based independent videogame studio specializing in creating new games for retro consoles, particularly the SEGA Mega Drive and Genesis. Their business model focuses on niche market segments of retro gaming enthusiasts, offering original games developed using authentic 1990s SEGA development tools. The company maintains an active online presence with social media channels and a dedicated development blog, supporting community engagement and marketing efforts. Technically, the website is built on the 123-reg Website Builder platform, leveraging common web technologies such as JavaScript, jQuery, and Google Analytics for tracking. The site is hosted securely with HTTPS and uses CDN services for content delivery, though mobile optimization and accessibility are basic and could be improved.

A

Asociace pracovníků pedagogicko-psychologických poraden, z.s.

apppp.cz

55

The website www.apppp.cz represents the Asociace pracovníků pedagogicko-psychologických poraden, z.s., a professional association dedicated to supporting and developing pedagogical-psychological counseling services in the Czech Republic. The site targets specialists and professionals in the educational counseling sector, providing information about the association, its mission, and contact avenues primarily through a contact form. The business model is non-profit and focused on professional development and collaboration within the education sector. The website is well-branded and content is relevant and professionally presented in Czech language. Technically, the website is built on the Webnode platform, leveraging AWS Cloudfront CDN for hosting static assets, and uses standard web technologies including HTML5, CSS, and JavaScript. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. HTTPS is enforced, ensuring secure communication. However, no advanced security headers were detected, and privacy compliance is limited by the absence of a dedicated privacy policy page. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent mechanisms in place. The lack of security headers and absence of direct contact emails or phone numbers for security or incident response reduces the overall security maturity. WHOIS data is unavailable, likely due to privacy protection or domain registration issues, which slightly impacts trustworthiness but does not contradict the professional nature of the site content. Overall, the website is a credible and professional platform for a small non-profit educational association, with room for improvement in privacy compliance, security headers, and transparency of contact information. Strategic recommendations include adding a privacy policy, implementing security headers, and providing direct contact details for enhanced trust and compliance.

T

TypoConsult A/S

typo3.dk

57

TYPO3.dk serves as the Danish community portal for the TYPO3 CMS, an established open source enterprise content management system with over 25 years of history. The website is managed and hosted by TypoConsult A/S, a Danish company specializing in TYPO3 CMS services. The portal provides information, news, and resources tailored to the Danish TYPO3 user base and promotes digital sovereignty through open source software. The site is well-positioned within the technology sector, targeting organizations and developers interested in TYPO3 CMS in Denmark. Technically, the website leverages TYPO3 CMS as its content management system, uses Cloudfront CDN for asset delivery, and integrates Simple Analytics for privacy-focused user tracking. The site demonstrates good performance, mobile optimization, and accessibility, with modern web standards and SEO best practices implemented. Hosting is provided by TypoConsult A/S, ensuring local and specialized support. From a security perspective, the site enforces HTTPS with strong SSL configuration and uses script integrity attributes. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. No privacy or cookie policies are published, representing a compliance gap with GDPR requirements. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, TYPO3.dk is a trustworthy and professional community portal with strong business credibility and technical maturity. To improve its security posture and compliance, the site should implement security headers, publish privacy and cookie policies, and provide clear incident response contacts. These steps will enhance user trust and align the site with best practices in security and privacy.

M

Místní akční skupina Bobrava

masbobrava.cz

43

Místní akční skupina Bobrava is a Czech regional non-profit organization focused on supporting local municipalities, schools, entrepreneurs, non-profits, and the general public within the Bobrava region. The organization provides information on funding opportunities, promotes regional products and services, and engages the community through news updates and events. Their website reflects a professional and community-oriented approach with clear navigation and relevant content. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap, and it employs Google reCAPTCHA for form security and a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust assessment, but the website's content and structure suggest legitimacy. Overall, the site is well-maintained, user-friendly, and compliant with privacy regulations.

D

Decile Group

decilegroup.com

64

Decile Group is a modern venture capital service provider specializing in accelerating VC firms, launching institutional-grade funds instantly, and providing AI-powered management platforms. Their offerings include training programs, fund management SaaS, back-office solutions, and a fund of funds investment vehicle. The company targets emerging and established venture capital managers, limited partners, and individuals seeking careers in VC. Technically, the website is built on a modern stack with Ruby on Rails backend, Stimulus JS, Turbo, and CDN hosting, delivering fast performance and excellent mobile optimization. Security posture is solid with HTTPS and CSRF protections, though improvements are recommended in DNSSEC, security headers, and explicit security policies. Privacy compliance is partially met with a clear privacy policy but lacks cookie consent mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

J

Jsmon

jsmon.sh

65

Jsmon is a newly founded technology startup (2024) offering a modern JavaScript security platform focused on continuous external application security and monitoring. The platform aims to provide developers and security teams with advanced scanning, monitoring, and automation capabilities to stay ahead of JavaScript-related threats. The website is professionally designed using Framer and hosted with Cloudfront CDN, indicating a modern technical infrastructure. Analytics and customer engagement tools like Google Analytics and Intercom are integrated, supporting digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

3

3D Sets

3dsets.com

62

3D Sets is a niche e-commerce business specializing in downloadable 3D printable RC car scale models. The company offers a range of products including trucks, buggies, boats, and accessories, supported by detailed build guides and an active community presence on social media platforms such as Facebook, YouTube, and Instagram. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, targeting hobbyists and 3D printing enthusiasts. Technically, the site is built on WordPress with WooCommerce, leveraging modern analytics and marketing tools like Google Analytics, Hotjar, and Google Tag Manager. Hosting appears to be Czech-based, consistent with domain registration data. Security posture is good with HTTPS enforced, though additional HTTP security headers could improve protection. Privacy compliance is basic, with cookie consent implemented but no explicit privacy or terms of service pages found. Overall, the site demonstrates high professionalism and trustworthiness with no signs of content blocking or WAF interference.

D

Deutsche Gesellschaft für Neurologie e. V.

dgn.org

56

The Deutsche Gesellschaft für Neurologie e. V. (DGN) operates the website www.dgn.org as the largest neurological professional society in Europe, serving over 13,000 members. The site provides comprehensive resources including guidelines, news, events, a media library, and a dedicated job market platform (DGN-Neurojobs). The organization targets neurologists and medical professionals, positioning itself as a key player in the healthcare sector in Germany. Technically, the website employs modern web technologies such as React, Bootstrap, and FontAwesome, hosted on Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are not explicitly published. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

C

Credspark

credspark.com

9

CredSpark is a technology company specializing in transforming content into personalized interactive experiences that generate unique data insights and increase audience engagement. Positioned as a niche provider in the interactive content space, CredSpark targets businesses seeking to enhance their digital marketing and customer engagement strategies. The website is built on WordPress using the Astra theme and Elementor plugins, leveraging modern web technologies and CDN services for content delivery. The technical infrastructure includes performance monitoring via New Relic and analytics through Google Tag Manager, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and some security headers present, though improvements are recommended in CSP and other headers. The absence of WHOIS registration data raises some concerns about domain transparency, but the website's professional content and policies mitigate trust issues. Overall, CredSpark presents a credible and professional online presence with room for security enhancements.

V

Veslice Liteboat v zastoupení ANVI TRADE s.r.o.

veslice.cz

45

The website veslice.cz represents Veslice Liteboat in the Czech Republic, operated by ANVI TRADE s.r.o., specializing in the distribution and sales of recreational and racing rowing boats, including coastal rowing and rowing boats with sails. The business targets a general audience interested in watersports and recreational rowing, offering a niche product line with a focus on innovation, stability, and ease of use. The company has a small but professional online presence with clear product listings and social media integration. Technically, the site is built on WordPress with WooCommerce and uses modern plugins such as Yoast SEO and Slider Revolution, hosted likely by WEDOS, a Czech hosting provider. The site is mobile optimized and SEO friendly but lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is good with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

V

Východoslovenské múzeum v Košiciach

vsmuzeum.sk

56

Východoslovenské múzeum v Košiciach is a regional cultural institution dedicated to preserving and showcasing Eastern Slovakia's heritage through exhibitions, events, and educational programs. The museum targets a broad audience including local residents, tourists, and cultural enthusiasts. It operates as a government-funded non-profit entity with a medium organizational size and a stable market position in the Slovak cultural sector. The website reflects this mission with clear information about exhibitions, volunteer opportunities, and visitor information. Technically, the site is built on the Webnode CMS platform, hosted on AWS Cloudfront, and employs modern web technologies such as responsive design and cookie consent mechanisms. While the site is generally well-structured and user-friendly, it lacks advanced security headers and explicit security or incident response policies. The security posture is adequate with HTTPS and cookie consent but could be improved by implementing additional security best practices. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR at a basic level, making it a reliable digital presence for the museum.

The Tampa Bay Times website, operated by Times Publishing Company, is a leading regional news media outlet serving the Tampa Bay area and broader Florida region. Established in 1884, the company offers a comprehensive portfolio of news content, including digital and print newspapers, magazines, and consumer events, reaching over one million people weekly. The website features a professional design with clear navigation and extensive content relevant to local news, sports, viewpoints, and culture. The business model relies on subscriptions, advertising, and community engagement. Technically, the site employs a modern technology stack including React, various analytics and advertising SDKs, and is hosted with Amazon Cloudfront CDN, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and cookie policies are not evident in the provided content. Overall, the site demonstrates high professionalism and trustworthiness, supported by multiple Pulitzer Prizes and structured data markup.

M

Marine Corps Times

marinecorpstimes.com

69

Marine Corps Times is a specialized media publication focused on delivering news and information about the U.S. Marine Corps, military affairs, and the Department of Defense. It holds a strong market position as a trusted source for Marines, veterans, and military stakeholders, offering news articles, subscription magazines, and special features. The website demonstrates a professional design with good content quality and consistent branding, targeting a niche military audience. Technically, the site employs modern web technologies including Google Tag Manager, Prebid.js for ads, and AWS Cloudfront for content delivery, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and use of performance/security monitoring scripts, though explicit security headers and privacy policies are not clearly visible in the provided content. The absence of WHOIS data for the domain is a notable anomaly, reducing trust slightly, but the website's content and external references support its legitimacy. Overall, the site is safe, professional, and relevant to its audience, but could improve transparency around privacy and security policies.

A

Air Force Times

airforcetimes.com

68

Air Force Times is a specialized media outlet providing independent news coverage focused on Air Force personnel and related military topics. The website offers a variety of content including news, benefits information, opinion pieces, and special projects, targeting airmen, veterans, and military families. The site is professionally designed with consistent branding and clear navigation, supporting a medium-sized media business model reliant on advertising and subscriptions. Technically, the site uses modern web technologies including Google Tag Manager, Prebid.js for ads, and Cloudfront CDN for hosting, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers are not explicitly detected. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content. The WHOIS data is missing or protected, which reduces domain trustworthiness, but the website content and structure align with a legitimate media brand. Overall, the site is a credible and professional military news source with room for improvement in privacy transparency and security header implementation.

T

The Marshall Project

themarshallproject.org

64

The Marshall Project is a nonprofit news organization specializing in investigative journalism and reporting on the U.S. criminal justice system. It operates multiple newsletters and local network projects, positioning itself as a trusted source for criminal justice news and analysis. The website demonstrates a mature digital presence with a modern tech stack including JavaScript ES modules, Ruby on Rails backend indications, and CDN hosting via Amazon Cloudfront. Analytics tools like Google Analytics and Parsely are used for user engagement tracking. Security posture is strong with HTTPS enforced and CSRF protections in place, though explicit security headers and cookie consent mechanisms could be improved. WHOIS data is unavailable due to query failure, but the website's professionalism and nonprofit status support its legitimacy. Overall, the site is well-designed, content-rich, and trustworthy for its audience.

W

WebMD

webmd.com

66

WebMD is a leading enterprise in the healthcare information sector, providing trustworthy and timely health and medical news, educational content, and community services. The website serves a broad general audience seeking credible health information and expert commentary. It holds a strong market position as a trusted source in the healthcare information industry. Technically, WebMD employs modern web technologies including Vue.js, Adobe Launch for analytics, Google reCAPTCHA Enterprise for security, and robust content delivery via Amazon Cloudfront CDN. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforcement, security headers, and consent management, although explicit security policies and vulnerability disclosures are not publicly available. Overall, the website is professional, secure, and compliant with privacy regulations such as GDPR. The lack of WHOIS data reduces transparency but does not detract from the site's credibility given its established brand presence.

M

Military Times

militarytimes.com

66

Military Times is a well-established independent media outlet providing comprehensive news coverage and resources related to military service members, veterans, and defense topics. The website offers a broad range of content including news, pay and benefits information, flashpoints, opinion pieces, and special projects, targeting military personnel and related communities. The business model is primarily media publishing supported by advertising and subscriptions, positioning Military Times as a trusted voice in its niche. Technically, the site employs modern web technologies such as Google Tag Manager, Prebid.js for ads, and performance monitoring tools, hosted likely on Akamai CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is basic with no visible privacy or cookie policies in the provided content. WHOIS data is unavailable, which slightly reduces transparency but does not detract from the site's professional appearance and trustworthiness. Overall, Military Times presents a professional, content-rich, and secure platform serving its audience effectively.

L

Lightigo

lightigo.com

57

Lightigo is a small technology company specializing in the development and production of analytical systems for rapid multi-elemental analysis using Laser-Induced Breakdown Spectroscopy (LIBS). The website presents a professional and focused business offering niche scientific instrumentation targeted at industrial and research customers requiring fast elemental analysis. The technical infrastructure is based on WordPress with the Divi theme, enhanced by SEO and analytics tools such as Yoast SEO and Google Analytics. Hosting is provided by WEDOS Internet, a reputable Czech hosting provider. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is partial with a cookie consent mechanism but no visible privacy policy or terms of service. Contact information and social media presence are not explicitly provided in the analyzed content, which may impact user trust and engagement. Overall, the website is functional, well-designed, and relevant to its target audience but would benefit from enhanced security practices and clearer privacy and contact disclosures.

Č

České centrum pro investigativní žurnalistiku o.p.s.

investigace.cz

68

Investigace.cz is a Czech investigative journalism platform operated by České centrum pro investigativní žurnalistiku o.p.s., focusing on organized crime, corruption, and money laundering impacting Czechia and Slovakia. The site offers investigative articles, podcasts, and newsletters, targeting a general audience interested in in-depth journalism. It maintains partnerships with reputable organizations such as OCCRP, Deník N, GIJN, and ICIJ, enhancing its credibility and reach. Technically, the website is built on WordPress with modern plugins like Yoast SEO and integrates multiple analytics and tracking tools including Google Tag Manager, Microsoft Clarity, and Piwik PRO, all managed with user consent mechanisms. The site is mobile-optimized and employs CDN services for content delivery. However, some security headers are missing, and no explicit incident response or security policy pages are found. Security posture is generally good with HTTPS enforced and privacy compliance evident through comprehensive cookie and privacy policies. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness from a domain registration perspective. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, Investigace.cz presents a professional and trustworthy investigative journalism platform with strong content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and domain registration verification are recommended to enhance trust and security posture.

C

Colourbox

colourbox.com

70

Colourbox is an online platform providing royalty free stock photos, videos, and vectors, targeting a broad audience including print, web, and social media users. The website positions itself as a provider of high quality and transparent licensing stock media content. Technically, the site uses modern JavaScript frameworks, CDNs like Amazon Cloudfront, and integrates third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is accessible, mobile-optimized, and demonstrates good content quality and branding consistency. Security-wise, the site enforces HTTPS and cookie consent but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and reduces trustworthiness. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

F

Facta Pro Futura

factaprofutura.com

58

Facta Pro Futura is a specialized strategic foresight platform focusing on understanding future trends and challenges, particularly in the energy sector and Central Europe. The website offers horizon scanning, data analysis, reports, and a geocalendar to support decision-makers in anticipating risks and opportunities. The platform collaborates with recognized partners such as the Adapt Institute, enhancing its credibility in the foresight domain. Technically, the website is built on the Webnode CMS, leveraging AWS Cloudfront CDN for content delivery, and demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism but lacks visible security headers and formal privacy or terms of service pages. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional nature of the site partially offsets this risk. Overall, the site presents a moderate security posture with room for improvement in compliance and transparency.

I

Investigatívne centrum Jána Kuciaka

icjk.sk

53

Investigatívne centrum Jána Kuciaka is a Slovak non-profit investigative journalism organization founded in 2018, continuing the legacy of Ján Kuciak. The organization focuses on independent investigative journalism, data analysis of corruption cases, and publishes articles and podcasts to inform the public. It maintains strong partnerships with international investigative journalism networks and receives grant support from various embassies. Technically, the website uses modern JavaScript frameworks (Vue.js and Vuetify), is hosted with CDN support, and integrates common analytics and tracking tools. The security posture is good with HTTPS, DNSSEC, and secure forms, though explicit security headers and incident response contacts are missing. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. Overall, the website is professional, trustworthy, and well-positioned in its niche.

Z

ZŠ A MŠ DOBŘÍKOV

zsdobrikov.cz

59

The website www.zsdobrikov.cz represents a small local educational institution, ZŠ a MŠ Dobříkov, offering basic and kindergarten education with a focus on a family-like atmosphere and innovative teaching methods. The school emphasizes individual attention, project-based learning, and digital competence development. The site is built on the Webnode platform and hosted via AWS Cloudfront, reflecting a moderate level of technical maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and a public privacy policy, which are areas for improvement. The absence of public WHOIS data suggests privacy protection, common for small entities, but limits transparency. Overall, the site is trustworthy and safe for general audiences, with room to enhance compliance and security practices.

A

Align Technology, Inc.

itero.com

67

iTero.com is the official website for iTero intraoral dental 3D scanners, a product line of Align Technology, Inc., a leading enterprise in the healthcare technology sector. The company specializes in advanced digital scanning solutions for restorative and orthodontic dental practices, integrating with Invisalign workflows to enhance clinical productivity and patient engagement. The website targets dental professionals including general practitioners and orthodontists, offering product information, customer testimonials, and support resources. The technical infrastructure is modern and robust, leveraging Next.js and React frameworks with Mantine UI components, hosted on AWS with Cloudfront CDN for performance and scalability. The site is well-optimized for mobile devices and accessibility, employing multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Optimizely to monitor user engagement and optimize experience. Security posture is strong with HTTPS enforced, domain transfer protections, and cookie consent mechanisms in place. However, DNSSEC is not enabled and no explicit security policy or vulnerability disclosure page is present. No direct company contact emails or phone numbers are publicly listed, with contact primarily via a detailed form. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR considerations. Overall, the website reflects a mature, enterprise-grade digital presence with high content quality, strong branding, and good security hygiene. Strategic recommendations include enabling DNSSEC, publishing a security policy and vulnerability disclosure, and providing explicit security contact information to further enhance trust and compliance.

A

ABCedu

abcedu.sk

53

ABCedu is a Slovak educational publishing company specializing in innovative textbooks and teaching materials for kindergarten through secondary school students. The company also supports teachers through innovative and update training programs and offers online learning applications. Established in 2019, ABCedu positions itself as a trusted educational partner in Slovakia with endorsements from the Ministry of Education and a strong digital presence. The website reflects a professional e-commerce platform with clear navigation and comprehensive content tailored to students, teachers, and parents. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Google Analytics, Facebook Pixel, and Sentry for error tracking. Cookie consent is managed via Cookiebot and Usercentrics, ensuring GDPR compliance. The site is hosted with CDN support and uses HTTPS, providing a secure browsing experience. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and CSRF tokens in forms but lacks explicit security headers and a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The privacy and cookie policies are comprehensive and GDPR compliant, enhancing user trust. Overall, ABCedu presents a low-risk profile with a solid business model in the education sector, good technical implementation, and strong privacy compliance. Strategic improvements include enhancing security headers, publishing a security policy, and improving accessibility compliance.

T

Tribune Group GmbH

biolaseacademy.com

58

Biolase Academy is an educational platform focused on providing continuing education for dental professionals, particularly in the use of dental laser technology. The platform offers live and on-demand webinars featuring expert speakers and provides CE credits to its members. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Bootstrap, and Amazon Cloudfront CDN. It integrates security features such as HTTPS and Google reCAPTCHA for form protection. However, explicit security headers are not detected, and no direct company contact emails or phone numbers are provided, which could impact user trust. The domain WHOIS data is missing, raising concerns about domain legitimacy and age, though the association with Tribune Group GmbH and ADA CERP recognition supports credibility. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place.

C

Creative Labs (Germany)

creative.com

74

Creative Labs (Germany) operates a professional e-commerce website focused on selling audio products such as wireless speakers, Bluetooth headphones, sound cards, and gaming headsets. The website targets German consumers interested in high-quality audio and gaming accessories. The site demonstrates a mature digital presence with modern technologies including WordPress CMS, Divi theme, jQuery, and analytics tools like Google Analytics and Matomo. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS enforced and some security headers present, though additional headers could improve protection. The absence of WHOIS registration data for the domain reduces trust from a domain legitimacy perspective, but the professional branding and presence of awards support business credibility. Overall, the website is a reliable and professional platform for Creative Labs' German market operations.

G

Gesellschaft für Maritime Technik e.V.

maritime-technik.de

65

Gesellschaft für Maritime Technik e.V. (GMT) is a German non-profit association focused on maritime technology, fostering cooperation between companies and research institutions to develop technologies for ocean research, protection, and sustainable use. The website positions GMT as a key network in the maritime technology sector, providing services such as networking, events, publications, and advocacy. The technical infrastructure is based on a modern CMS platform (Website-Editor.net) with standard web technologies including jQuery and CDN delivery, hosted by 1AND1. The site is well-structured, mobile-optimized, and uses HTTPS with appropriate security headers, reflecting a mature digital presence. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though explicit security policies and incident response information are absent. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and partner affiliations.

P

ProFarm Blatnice

pro-farm.cz

57

ProFarm Blatnice is a Czech agricultural company specializing in plant and animal production with a strong emphasis on precision agriculture and sustainable farming practices. The company has been active in implementing precision agriculture since 2014 and holds recognition as a demonstration farm by the Ministry of Agriculture since 2019. Their services include a range of agro-services such as transport, soil processing, sowing, crop protection, fertilization, and harvesting. The website reflects a professional and consistent brand image targeting agricultural professionals and stakeholders interested in innovative farming techniques. Technically, the website is built on the Webnode CMS platform, utilizing Cloudfront CDN for content delivery. It integrates Google Analytics and Facebook SDK for analytics and social media engagement. The site is served over HTTPS with good SSL configuration but lacks important security headers and mobile responsiveness, which impacts user experience on mobile devices. SEO and accessibility features are basic, and no structured data or metadata beyond minimal meta tags are present. From a security perspective, the site uses HTTPS and anonymizes IP addresses in Google Analytics, which are positive indicators. However, the absence of security headers, privacy and cookie policies, and contact information for incident response or data protection officers highlight compliance and security gaps. The WHOIS data is unavailable, which reduces trustworthiness but the website content and business information appear legitimate and professional. Overall, the website presents a credible agricultural business with room for improvement in security posture, privacy compliance, and technical modernization. Strategic enhancements in these areas would strengthen trust and regulatory compliance while improving user experience.

N

Nadácia Zastavme korupciu

zastavmekorupciu.sk

58

Nadácia Zastavme korupciu is a Slovak non-profit organization dedicated to combating corruption through investigative journalism, legal support for whistleblowers, and youth community engagement. Established around 2013-2014, it has built a recognized presence in Slovakia with a small but focused team. The website reflects a professional and consistent brand image, targeting a general audience interested in transparency and governance. Technically, the site is built on WordPress with modern plugins and CDN support, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though some advanced security headers and policies could be improved. Overall, the site is trustworthy and compliant with privacy regulations, though explicit privacy and security policies are not found. Contact information is limited on the site, which could be enhanced for better user engagement and trust.

Š

Šetina, Komendová & Partners s.r.o., Law Office

akskp.cz

65

Šetina, Komendová & Partners s.r.o. is a small law office based in Brno, Czech Republic, specializing in IT law, subsidies, and business corporation legal services. The firm emphasizes client-focused, innovative legal solutions and has international experience. Their website reflects a professional and trustworthy presence with clear contact information and a privacy-aware approach. Technically, the site is built on the Webnode CMS platform, uses Amazon Cloudfront CDN, and integrates common analytics and marketing tools such as Google Analytics and Hotjar. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing. WHOIS data is unavailable, likely due to privacy protection, which is common for small professional firms. Overall, the site is well-designed, accessible, and compliant with basic privacy regulations.

M

MS 97, s.r.o.

skolatreneru.cz

9

Trenérská škola Olympia, operated by MS 97, s.r.o., is an accredited educational institution specializing in fitness and bodybuilding trainer certifications authorized by the Czech Ministry of Education. The website presents a professional image with detailed course offerings, seminars, and a team of qualified lecturers. It targets individuals seeking recognized qualifications in personal training within the Czech Republic and the EU. The business model focuses on delivering accredited training programs and issuing certificates that enable graduates to operate professionally in the fitness industry. The site integrates modern web technologies hosted on AWS Cloudfront and built on the Webnode platform, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy and terms of service pages. The absence of WHOIS data due to privacy protection slightly reduces transparency but is common for small businesses. Overall, the website is trustworthy, safe, and professionally maintained, with room for improvement in compliance documentation and contact transparency.

D

DERTOUR

dertour.de

63

DERTOUR is a well-established German travel organizer and online travel agency offering a wide range of vacation products including hotels, package tours, cruises, and car rentals. The website targets general consumers interested in flexible and individual travel options, with a strong market position supported by its affiliation with the REWE Group. The digital infrastructure is modern, leveraging React and Next.js frameworks, and hosted on AWS Cloudfront CDN, ensuring good performance and mobile optimization. Privacy compliance is addressed through Usercentrics consent management and comprehensive privacy and cookie policies. Security posture is strong with HTTPS, security headers, and content security policies in place, although explicit security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

P

Persollo

persollo.com

56

Persollo is a technology company specializing in AI-powered influencer marketing analytics and instant checkout solutions. Their platform enables brands and agencies to analyze social media accounts across Instagram, TikTok, and YouTube, discover influencers with targeted audiences, and facilitate social media sales with a streamlined one-click checkout process. Positioned as a leading solution in influencer marketing, Persollo targets marketing professionals seeking transparency and efficiency in influencer campaigns. Technically, the website is built on modern frameworks such as React and Semantic UI, with integrations including Stripe for payments and Cloudfront for content delivery. The infrastructure is hosted with DigitalOcean DNS and leverages multiple external services for analytics and social media engagement. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections. However, it lacks DNSSEC and explicit security headers, and does not publicly disclose incident response or vulnerability handling policies. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but cookie consent mechanisms are absent. Overall, Persollo presents a professional and trustworthy online presence with a solid business model and technical foundation. Strategic enhancements in security policies, privacy compliance, and transparency would further strengthen their risk posture and customer trust.

E

Eifela

eifela.sk

53

Eifela is a newly established Slovak health-related business, as indicated by the domain registration date in early 2024 and the website title emphasizing health support. The website uses modern web technologies including Bootstrap 5 and integrates common marketing and cookie consent tools such as Google Tag Manager and CookieHub. The technical infrastructure is hosted on Websupport with DNSSEC enabled, indicating a baseline of security awareness. However, the website lacks visible privacy policies, terms of service, and contact information, which limits its compliance and trustworthiness from a user perspective. Security headers are not detected, suggesting room for improvement in hardening the web server configuration. Overall, the website is accessible without WAF or blocking mechanisms, and the content is safe and appropriate for a general audience.

D

Deutscher Landwirtschaftsverlag GmbH

digitalmagazin.de

66

The website kiosk.digitalmagazin.de is a digital magazine kiosk platform operated by Deutscher Landwirtschaftsverlag GmbH, targeting German-speaking audiences interested in agriculture, forestry, hunting, gardening, and beekeeping. It offers subscription and purchase services for specialized publications. The platform is built on a modern Angular framework with a consistent and professional design, providing a good user experience and clear navigation. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not found. Overall, the site presents a trustworthy and professional digital media service with moderate technical maturity and good compliance.

A

Ackermann-Gemeinde

ackermann-gemeinde.cz

10

The Ackermann-Gemeinde website serves as a digital platform for a non-profit organization focused on fostering cultural and social ties between Germans and Czechs. It provides information on events, youth activities, and educational projects, targeting young people and culturally interested audiences. The site is built on the Webnode CMS platform, leveraging modern web technologies and CDN services to deliver content efficiently. The presence of cookie consent and privacy policies indicates a baseline compliance with privacy regulations. Security posture is adequate with HTTPS enforced, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, trustworthy, and well-aligned with its mission, though the absence of public contact details may limit direct engagement.

W

Webnode AG

webnode.sk

71

Webnode AG operates a mature and well-established SaaS platform specializing in easy-to-use website creation tools, including AI-assisted website building, templates, and e-commerce solutions. The company targets small businesses, individual users, and hobbyists primarily in European markets, offering a freemium business model with premium upgrades. The website demonstrates a professional digital presence with consistent branding, multilingual support, and comprehensive user guidance. Technically, the platform leverages modern web technologies, including Google Analytics, Tag Manager, reCAPTCHA, and a CDN for performance and security. Accessibility is addressed via integration with AccessiWay, and the site is mobile-optimized with good SEO practices. Security posture is strong with HTTPS, security headers, and bot protection, though explicit security policies and incident response contacts are not published. WHOIS data is not publicly available, likely due to privacy protection, which is common for commercial entities. Overall, the website is trustworthy, secure, and professionally maintained, supporting a positive user experience and business credibility.

Slovak Telekom is a leading telecommunications provider in Slovakia offering a wide range of services including mobile phones, mobile plans, internet, and television services. The company targets both individual consumers and business customers, providing modern digital solutions such as the Magenta AI assistant and security services like Click Security. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the website is built using modern frameworks such as Next.js and leverages Amazon Cloudfront CDN for performance. It employs Google Tag Manager and Sentry for analytics and error tracking, indicating a robust infrastructure. Security is well-implemented with HTTPS, multiple security headers, and no visible vulnerabilities or exposed sensitive data. However, the website lacks explicit privacy and cookie policies and does not provide clear incident response or vulnerability disclosure information, which are important for compliance and user trust. Contact information is limited to a customer support phone number and social media links, with no email or physical address explicitly found in the provided content. Overall, Slovak Telekom's website demonstrates strong business credibility and technical maturity but should enhance privacy compliance and transparency to improve user trust and regulatory adherence.

OpenDNS is a cloud-delivered enterprise and consumer internet security service now fully integrated under Cisco. The website positions OpenDNS as a trusted provider of faster, safer internet access with a focus on threat prevention and content filtering. The site is professionally designed, mobile optimized, and includes comprehensive privacy and cookie consent mechanisms, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, CDN hosting, and integrates Cisco Umbrella tracking tags, indicating a robust infrastructure. Security posture is strong with HTTPS and cookie consent, though explicit security headers and incident response contacts are not evident. WHOIS data is unavailable, likely due to privacy protection, but Cisco branding and domain usage strongly support legitimacy. Overall, the site is trustworthy, well-maintained, and aligned with enterprise security standards.