Security Directory

Fantova budova is a culturally significant Secessionist building in Prague, managed by Správa železnic, the Czech state railway organization. The website serves as an informational and promotional platform for the ongoing restoration project and event space rental. The site is well-structured, professionally designed, and provides relevant content primarily in Czech with English alternatives. Technically, it is built on the Liferay CMS platform and uses modern JavaScript libraries and tracking tools. Security posture is good with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published security policies. Overall, the site is trustworthy and serves its purpose effectively.

S

Správa železnic, státní organizace

vrtky.cz

59

The website vrtky.cz serves as an official public information portal for the Czech Republic's high-speed rail infrastructure project, managed by Správa železnic, a state organization. It provides comprehensive information about the development, planning, and updates of high-speed rail lines (VRT) aimed at improving transportation efficiency and regional mobility. The site targets Czech residents, transport professionals, and government stakeholders, offering news, maps, and project details. Technically, the site is built on the Liferay CMS platform and employs modern web technologies including jQuery, Slick Carousel, and Google Tag Manager. It integrates analytics and marketing tools such as Google Analytics and Facebook Pixel, and implements cookie consent mechanisms in compliance with GDPR. The site is mobile-optimized and features a professional design with clear navigation. From a security perspective, the website uses HTTPS with good SSL configuration and basic security best practices. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no published security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, vrtky.cz is a trustworthy and professionally maintained government-related website with a strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve security posture and transparency.

K

Kangaroo group, a.s.

kangaroo.cz

46

Kangaroo group, a.s. is a well-established Czech advertising agency and polygraphic production company founded in 2004. The company offers a broad range of services including advertising campaigns, printing (digital, offset, large format), vehicle and public transport advertising, online marketing, event organization, packaging design, and interior design. Their client base includes reputable companies and government institutions, positioning them as a trusted regional player with a comprehensive service offering. Technically, the website uses legacy JavaScript libraries such as jQuery 1.11.1 and common web technologies like Font Awesome and Lightbox, hosted via Active24. The site is mobile-optimized and SEO-friendly but could benefit from modernizing its tech stack and improving accessibility. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible security headers and uses outdated libraries, which may expose it to vulnerabilities. No explicit security policies or incident response contacts are publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR, with room for technical and security improvements.

Č

Česká barmanská asociace, z.s.

cbanet.cz

54

Česká barmanská asociace, z.s. is a Czech non-profit organization dedicated to uniting bartenders, baristas, teatenders, beer specialists, and beverage gastronomy enthusiasts across the Czech Republic. The website serves as the official portal for the association, providing information on competitions, educational courses, events, and member services. It holds official membership in the International Bartenders Association, positioning it as a recognized authority in the hospitality sector within the region. The site features rich content including news, event calendars, partner information, and specialized sections for different beverage disciplines. Technically, the website employs a mix of legacy and modern web technologies including AngularJS and jQuery, along with FontAwesome for icons and Google Analytics for visitor tracking. While the site is mobile-optimized and well-structured for user navigation, some outdated libraries (notably jQuery 1.9.1) present potential security risks. The site implements GDPR-compliant cookie consent mechanisms and maintains a basic privacy policy, reflecting awareness of data protection requirements. From a security perspective, the site uses HTTPS and has secure login forms, but lacks visible security headers and uses outdated JavaScript libraries, which could expose it to vulnerabilities. The absence of WHOIS registration data limits domain trust assessment, though the professional presentation and partner affiliations support legitimacy. Overall, the site demonstrates a moderate security posture with room for improvement in modernizing its tech stack and enhancing security controls. The overall risk assessment indicates a trustworthy and professionally managed site with minor technical and security concerns. Strategic recommendations include updating legacy libraries, implementing comprehensive security headers, and conducting regular security audits to maintain compliance and protect user data.

Penzion Fiala is a small hospitality business located in Kubova Huť, Czech Republic, offering affordable accommodation in the Šumava region. The website provides detailed information about the lodging options, amenities such as sauna and parking, and nearby tourist attractions. The business targets general tourists seeking relaxation and outdoor activities in the region. The domain is well-established since 2011, consistent with the business age. Technically, the website uses common JavaScript libraries including jQuery, Flexslider, and Fancybox, with Google Fonts and Font Awesome for styling. Hosting is provided by ŠumavaNet.CZ. The site is moderately optimized for mobile and SEO, with a clear navigation structure and good content quality. However, it lacks a CMS indication and advanced accessibility features. From a security perspective, HTTPS usage is implied but not explicitly confirmed in the HTML content. No security headers such as CSP or HSTS are detected, and there is no privacy or cookie policy present, indicating compliance gaps with GDPR. The site uses Google Analytics and Google Tag Manager for tracking, with moderate user tracking levels but no cookie consent mechanism. Overall, the website is functional and professional for a small hospitality business but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

C

Chata Šumava

chatasumava.cz

45

Chata Šumava is a small hospitality business offering accommodation in the Šumava region of the Czech Republic, specifically in Hojsova Stráž near Železná Ruda. The website presents family-friendly lodging options with amenities such as garden space, children's corner, and parking. It targets general tourists and families seeking affordable stays in a scenic mountain area. The business leverages local partnerships and maintains a presence on social media and review platforms like Hotel.cz, which awards it a quality certificate. Technically, the website uses a traditional web stack with jQuery, Flexslider, Fancybox, and Google Fonts. It integrates Google Analytics, Google Tag Manager, and Facebook SDK for tracking and marketing purposes. The site is moderately optimized for mobile and SEO, with a clear navigation structure and professional design. Hosting appears to be provided by a local Czech provider, ŠumavaNet.CZ. From a security perspective, the site uses HTTPS for external resources but lacks explicit security headers and cookie consent mechanisms, which are important for GDPR compliance. The contact form includes validation, and no sensitive data is exposed in the HTML. However, the absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Overall, the website is functional and professional for a small hospitality business but would benefit from improved security practices, explicit cookie consent, and transparency in domain registration to enhance trust and compliance.

Z

Zemědělská akciová společnost Koloveč

zaskolovec.cz

48

Zemědělská akciová společnost Koloveč is a medium-sized regional agricultural company based in the Czech Republic, specializing in agricultural production and manufacturing, including the production and sale of traffic signs. The company operates an e-shop for traffic signs and provides additional services such as machinery sales, road transport, earthworks, and maintenance. The website reflects a professional and consistent brand image with clear contact information and a social media presence on Facebook. Technically, the site uses modern JavaScript libraries and includes cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of a privacy policy and visible security headers suggests areas for compliance and security improvement. The WHOIS data is not publicly available, likely due to privacy protection, but the website content and contact details support the legitimacy of the business. Overall, the site is well-structured, mobile-optimized, and provides relevant content for its target audience.

Dobrovolný svazek obcí Ostružná is a voluntary association of municipalities in the Czech Republic, serving as a cooperative body for local government entities including Velhartice, Kolinec, Mokrosuky, Chlistov, Hlavňovice, and Číhaň. The website provides basic information about the association, its member municipalities, and contact details. The site is modest in design and functionality, focusing on informational content rather than interactive features. Technically, the site uses legacy JavaScript libraries such as jQuery and includes Google Analytics for visitor tracking, but lacks modern security features such as HTTPS enforcement and security headers. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data for the domain is unavailable, which limits the ability to verify domain registration legitimacy and age. Overall, the site serves its purpose as a local government information portal but requires improvements in security, privacy compliance, and technical modernization.

P

People in Need

peopleinneed.net

76

People in Need is a Czech-based non-governmental, non-profit organization with over 20 years of experience providing humanitarian aid and emergency assistance worldwide. The website serves as a platform to engage donors, volunteers, and the general public with information about their mission and activities. The organization maintains a consistent brand presence and targets a global audience interested in humanitarian causes. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, reCAPTCHA v3, and Microsoft Clarity for analytics, reflecting a moderate level of digital maturity. Security measures such as HTTPS, CAPTCHA for forms, and cookie consent mechanisms are implemented, although some security headers and explicit policies are missing. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website is professional, secure, and privacy-conscious but could improve transparency by publishing privacy and security policies and providing direct contact information.

K

Komora samostatných likvidátorů pojistných událostí

kslpu.cz

39

Komora samostatných likvidátorů pojistných událostí (KSLPU) is a professional association based in the Czech Republic, founded in 2004. It serves as a chamber for independent insurance claims adjusters, damage assessors, and technical experts, aiming to support their professionalism, prestige, and education. The organization fosters collaboration among its members and with insurance companies both nationally and across Europe, including affiliation with the European Federation of Loss Adjusting Experts (FUEDI). The website provides information about membership, educational events, news, and contact details, targeting professionals in the insurance claims and risk assessment sectors. Technically, the website uses a custom CMS with common web technologies such as jQuery, Google Analytics, and responsive design elements. It is hosted likely via Forpsi (based on nameservers) and registered through REG-INTERNET-CZ since 2004, indicating a stable and established online presence. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. From a security perspective, the site uses HTTPS and includes standard analytics scripts but lacks explicit security headers and cookie consent mechanisms. No security policies or incident response contacts are published, which could be improved. There are no visible vulnerabilities or exposed sensitive data. GDPR compliance is indicated by a dedicated privacy page, but cookie consent is not evident. Overall, the website is professional, trustworthy, and serves its niche audience well. Strategic improvements in security headers, cookie consent, and published security policies would enhance its security posture and compliance maturity.

A

AOM CZ s.r.o.

aom.cz

43

AOM CZ s.r.o. operates an e-commerce platform specializing in industrial coatings, paints, lacquers, adhesives, and spraying technology primarily targeting professional and industrial customers in the Czech Republic. The website presents a professional catalog of products with clear navigation and customer account features, supporting both B2B and B2C sales models. The company maintains a consistent brand presence with comprehensive legal and privacy documentation in Czech language, indicating compliance with GDPR regulations. Technically, the site is built on Prestashop 1.7.6.1 with modern modules and includes a cookie consent mechanism and live chat support, reflecting a moderate level of digital maturity.

Č

Člověk v tísni

clovekvtisni.cz

76

Člověk v tísni is a well-established Czech non-profit organization providing immediate humanitarian aid and support to help people become self-sufficient both domestically and internationally. The website reflects a professional and consistent brand presence with clear messaging about their mission and services. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, reCAPTCHA v3, and Cookiebot for consent management, indicating a mature digital infrastructure. Security measures such as HTTPS and bot protection are in place, though some security headers and explicit policies are not visible in the provided data. Privacy compliance is supported by a detailed cookie consent mechanism, but a dedicated privacy policy page was not found in the analyzed content. Overall, the site demonstrates a strong security posture and business credibility consistent with a reputable humanitarian organization.

S

SumavaNet.CZ

toposumavi.cz

47

The website www.toposumavi.cz is a regional tourism portal dedicated to promoting the Pošumaví area in the Czech Republic. It provides comprehensive information for tourists including tips for trips, photo and video galleries, event calendars, accommodation listings, and regional product promotions. The site targets general tourists and families interested in cultural, natural, and recreational activities in the region. The business model is focused on regional tourism support and information dissemination, positioning itself as a key local resource for visitors. Technically, the website uses a traditional web stack with jQuery, Flexslider, and Font Awesome for UI components, along with Google Fonts for typography. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. The site is served over HTTPS, ensuring encrypted communication, and includes a cookie consent mechanism compliant with GDPR principles. However, it lacks advanced security headers and visible privacy or terms of service pages, which are areas for improvement. From a security perspective, the site shows moderate maturity. HTTPS is enforced, and no sensitive data is exposed in the HTML. The cookie consent banner indicates awareness of privacy regulations. However, the absence of security headers and WHOIS data raises concerns about domain legitimacy and security posture. No forms or personal data collection mechanisms were detected on the main page, reducing immediate risk. Overall, the site is functional and reasonably secure but would benefit from enhanced security policies and transparency. The domain WHOIS data is missing, which is unusual and could indicate registration issues or a technical problem with the WHOIS server. This lack of data impacts trust and legitimacy assessments. The website content and external partner links suggest a legitimate regional tourism initiative, but the missing WHOIS information warrants caution. Strategic recommendations include adding privacy and terms policies, implementing security headers, verifying domain registration, and maintaining up-to-date third-party libraries to improve security and compliance.

U

United Guides Holding Kft.

czechsuperbrands.com

41

Czech Superbrands, operated by United Guides Holding Kft., is a recognized media and branding platform focused on promoting leading brands within the Czech Republic. The website serves as a hub for brand awards, tribute events, yearbooks, and branding masterclasses, targeting both businesses and consumers interested in brand excellence. The platform has been active since 2012, demonstrating a stable market presence and consistent branding efforts. Technically, the website employs a combination of jQuery, Bootstrap, and various tracking technologies including Google Analytics and Adform, reflecting a moderate level of digital maturity. The site is accessible, mobile-optimized at a basic level, and features clear navigation and professional design.

Zájmové sdružení právnických osob Střední Pošumaví is a regional non-profit association located in the Plzeň region of the Czech Republic, serving municipalities between Klatovy and Sušice. The organization focuses on regional cooperation, tourism promotion, and administrative support for its member municipalities. The website reflects a community-oriented approach with detailed information about member municipalities, tourist attractions, and regional projects. The site is professionally designed with clear navigation and a focus on local audiences and tourists. Technically, the website employs common web technologies including jQuery, Flexslider, Font Awesome, and integrates Google Analytics and Facebook SDK for analytics and social media engagement. A cookie consent mechanism is implemented, indicating attention to privacy compliance. However, the absence of WHOIS data and lack of explicit contact emails or phone numbers on the site slightly reduce the overall trustworthiness from a domain registration perspective. Security best practices such as HTTPS enforcement and security headers are not verifiable from the provided data, suggesting room for improvement in security posture. Overall, the website is functional, informative, and serves its intended audience well, but could benefit from enhanced transparency and security measures.

Z

Základní škola a mateřská škola Vrhaveč, příspěvková organizace

skolavrhavec.cz

52

ZŠ a MŠ Vrhaveč is a small public educational institution in the Czech Republic providing basic and preschool education with a focus on a safe, friendly, and modern learning environment. The website reflects a local school with clear communication channels and community engagement. Technically, the site uses a custom ASP-based CMS with common web technologies such as jQuery, Flexslider, and Font Awesome, hosted by REG-ZONER. The site is mobile responsive and includes cookie consent mechanisms and analytics integration. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published security policies. Overall, the site is trustworthy and professionally maintained, suitable for its educational purpose.

Š

ŠumavaNet.CZ

lipno.pro

47

The website www.lipno.pro/lipno/ is a regional tourism information portal focused on the Lipno and Šumava areas in the Czech Republic. It provides accommodation listings, tourist tips, photo galleries, and webcams, targeting general audiences interested in travel and leisure in this region. The business behind the site appears to be ŠumavaNet.CZ, a small-sized entity specializing in hospitality and tourism information services. The site is well-branded and consistent with a clear focus on local tourism. Technically, the website uses a variety of modern web technologies including jQuery, Flexslider, Font Awesome, Google Fonts, Google Analytics, and Facebook SDK. It is served over HTTPS with good SSL configuration but lacks some recommended security headers. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured navigation. From a security perspective, the site has a basic posture with HTTPS enabled and no visible sensitive data exposure. However, it lacks privacy and cookie policies, security headers, and incident response information, which are important for compliance and trust. The WHOIS data is unavailable or malformed, which reduces domain registration transparency and trustworthiness, though the website content and contact information appear legitimate. Overall, the website is a functional and informative tourism portal with good content quality and technical implementation but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

M

MVM Next Energiakereskedelmi Zrt.

mvmbiztositas.hu

10

MVM Biztosítás is an online insurance service platform operated under the MVM group umbrella, specifically by MVM Next Energiakereskedelmi Zrt. The website offers a broad portfolio of insurance products including assistance, vehicle, pet, health, accident, and travel insurance, targeting primarily Hungarian energy customers. The business model integrates insurance billing with energy service invoices, providing convenience and streamlined customer experience. The site is professionally designed, mobile-optimized, and provides clear navigation and product information, supported by customer testimonials and social media presence, establishing a trustworthy market position in Hungary.

M

Modio.cz - vyhledávač módy a sportovního vybavení | Módní inspirace, novinky i slevy na jednom místě

modio.cz

46

Modio.cz operates as a Czech language online aggregator platform specializing in fashion and sports equipment. It aggregates products from hundreds of e-shops, providing users with a centralized search and browsing experience for clothing, shoes, accessories, and sports gear. The platform targets consumers interested in fashion and sports products, offering inspiration, news, and discount information. The website demonstrates a consistent brand presence with a professional design and clear navigation structure, supporting a medium-sized retail e-commerce business model focused on aggregation rather than direct sales. Technically, the website employs a traditional web stack including jQuery, jQuery UI, and various third-party analytics and advertising scripts such as Google Analytics and Facebook Pixel. The site uses HTTPS and lazy loading for images, contributing to moderate performance and good mobile optimization. However, the use of an outdated jQuery version and absence of explicit security headers indicate areas for technical improvement. SEO practices appear solid with proper meta tags and Open Graph data. From a security perspective, the site benefits from HTTPS encryption and standard tracking protections but lacks visible security headers and explicit privacy or cookie policies. No contact or incident response information is provided, which limits transparency and user trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the site itself appears operational and professional. Overall, Modio.cz presents a functional and user-friendly platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance trust and compliance. The business is well positioned in the Czech retail e-commerce aggregation market but should address technical and compliance gaps to reduce risk and improve user confidence.

N

NEWTON Media, a.s.

anopress.cz

58

NEWTON Media, a.s. operates the Anopress service, a sophisticated media monitoring platform focused on Czech media channels including print, TV, radio, internet, and social media. The company offers a cloud-based, real-time monitoring solution with a comprehensive historical archive dating back to 1996. Their client base spans businesses, PR agencies, government bodies, municipalities, and educational institutions, positioning them as a leading media intelligence provider in the Czech Republic. The website reflects a professional and consistent brand image with clear contact information and client references. Technically, the website employs modern JavaScript libraries such as jQuery, anime.js, and slick carousel, alongside Google Analytics and Intercom for analytics and customer engagement. The site is mobile responsive and well-structured, though some accessibility and SEO optimizations could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and cookie consent mechanisms required for full GDPR compliance. Overall, the security posture is good with no critical vulnerabilities detected. The absence of a cookie consent banner and security headers are notable gaps. WHOIS data confirms the legitimacy and consistency of the business registration, reinforcing trustworthiness. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility and SEO to strengthen compliance and user trust.

G

Generali penzijní společnost, a.s.

pfcp.cz

52

Generali penzijní společnost, a.s. is a leading Czech pension company offering state-supported pension savings and investment products. The website targets adults, children, and pensioners, providing comprehensive pension plans, investment funds, and employer contribution options. It holds a strong market position with nearly one million clients and is part of the larger Generali Group. The site is professionally designed with clear navigation and rich content focused on pension savings benefits and state support. Technically, the website employs modern JavaScript libraries, tracking tools, and cookie consent mechanisms, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though some security headers could be improved. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, compliant, and well-positioned in the finance sector.

Mobiliti is a Hungarian company specializing in electric and gas mobility services, positioning itself as the market leader in Hungary. The company offers a range of services including e-mobility charging, gas mobility (CNG), and additional services such as electronic vignettes and parking solutions. The website reflects a professional and consistent brand image aligned with the MVM Group, a major energy sector player in Hungary. The target audience includes Hungarian consumers and businesses interested in sustainable mobility solutions. The business model focuses on providing infrastructure and services for electric and gas-powered vehicles, supporting Hungary's transition to cleaner transportation.

MVM NUKA Nukleáris Karbantartó Zrt. is a Hungarian company specializing in nuclear maintenance services as part of the larger MVM Group, a key player in the energy sector. The company provides high-quality electrical, control technology, and mechanical maintenance services primarily for the MVM Paksi Atomerőmű Zrt. and affiliated group companies. The website reflects a professional corporate presence with clear contact information and compliance with GDPR through comprehensive privacy and cookie policies. The site is primarily in Hungarian and targets industry stakeholders and partners within the energy sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Google Charts, built on the Sitecore CMS platform. The site is mobile optimized with moderate performance and basic accessibility features. Analytics are implemented via Google Analytics with a cookie consent mechanism ensuring user privacy compliance. No blocking or WAF challenges were detected, allowing full content access. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, it lacks explicit published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration details align well with the business profile, indicating a legitimate and trustworthy entity. Overall, the website demonstrates a solid business credibility and technical maturity with room for improvement in security transparency and accessibility. The risk level is low, with recommendations to enhance security policy visibility and incident response readiness to further strengthen trust and compliance.

MVM OVIT Zrt. is a well-established Hungarian energy sector company, operating as a wholly owned subsidiary of MVM Energetika Zrt. With over 70 years of experience, it specializes in manufacturing steel structures, power plant machinery, heavy transportation, and electricity supply system operations across Hungary. The company is positioned as a key player within the MVM Group, serving the national energy infrastructure market. The website reflects a professional corporate presence with clear branding and comprehensive information about its services and group affiliations. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and is likely powered by the Sitecore CMS platform. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks a dedicated security policy page and explicit incident response contacts, which could be improved to enhance trust and compliance. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

MVM CEEnergy Zrt. is Hungary's largest natural gas trader, serving as a key partner to the national universal gas service provider to ensure reliable gas supply to residential consumers. The company operates as part of the MVM Group, a large energy conglomerate with numerous subsidiaries across production, storage, distribution, retail, and services sectors. The website reflects a professional corporate presence with comprehensive information about the company, its subsidiaries, and services. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, and is built on a Sitecore CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are provided. Overall, the site is well-structured, compliant with GDPR, and trustworthy.

MVM Otthon Plusz Zrt. is a Hungarian energy sector company, fully owned by MVM Zrt., focusing on energy efficiency services and insurance product brokerage for residential customers. The website reflects a professional corporate presence with clear business descriptions and links to partner insurance and energy efficiency sites. The technical infrastructure is based on ASP.NET WebForms and Sense/Net ECM CMS, with modern JavaScript libraries and frameworks ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. Overall, the site is trustworthy and well-aligned with its business objectives.

Ú

Ústav zemědělské ekonomiky a informací

nutridatabaze.cz

45

NutriDatabaze.cz is an official Czech Republic food composition database managed by the Center for Food Composition Database within the Institute of Agricultural Economics and Information (ÚZEI). It provides detailed nutritional data for over 1100 food items, supported by the Ministry of Agriculture. The website targets researchers, nutrition professionals, and registered users seeking reliable food composition data. The business model is primarily informational with free registration and controlled data export access. The site holds a strong market position as a government-backed authoritative source for Czech food data. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery and Google Analytics for visitor tracking with IP anonymization. Hosting is provided by a Czech hosting company. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility are adequately addressed, though improvements are possible. From a security perspective, HTTPS is implied but no explicit security headers were detected. The site includes secure login forms with user experience features like CAPS LOCK warnings. Privacy policies and cookie usage are declared, but no explicit consent mechanism is implemented. No incident response or vulnerability disclosure information is published, indicating room for maturity improvement. Overall, the website is professional, trustworthy, and content-rich, but the absence of WHOIS data and some security best practices slightly reduce its trust score. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and verifying domain registration details to improve credibility and compliance.

I

Informační server ŠumavaNet.CZ

stachy.net

53

The website www.stachy.net/stachy/ serves as a regional information and tourism portal for the town of Stachy and its surroundings in the Czech Republic. It provides visitors with comprehensive information on local attractions, events, accommodation, webcams, and cultural activities. The site is developed and hosted by SumavaNet.CZ in cooperation with the local municipal office, indicating a community-focused information service. The target audience is general public interested in tourism and local culture. Technically, the site uses standard web technologies including jQuery, Flexslider, and Google Analytics, with a cookie consent mechanism compliant with GDPR principles. The website is accessible, mobile-friendly, and well-structured with good SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active and consistent content suggests legitimate use. Security posture is moderate with HTTPS enabled but lacking advanced security headers. No contact emails or phone numbers are visible, which may affect user trust and business credibility.

P

Prácheňsko zájmové sdružení právnických osob

prachensko.org

50

Prácheňsko is a regional association of legal entities based in Horažďovice, Czech Republic, focused on promoting and developing the Prácheňsko region, including cultural heritage, tourism, and community activities. The website serves as an information portal for local municipalities and visitors, offering details on regional attractions, activities, and administrative matters. The organization operates as a non-profit entity with a clear local focus and a stable presence since 2009. Technically, the website employs a modern JavaScript stack including jQuery, Flexslider, and CookieScript for consent management, hosted by a reputable registrar and hosting provider. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers could be improved. Privacy compliance is well addressed with a clear cookie policy and GDPR-aligned consent mechanisms. Contact information is transparent and easily accessible, enhancing business credibility. Overall, the site is professional, trustworthy, and well-suited for its target audience.

A

Apartmány Šumava

apartmanysumava.info

46

Apartmány Šumava is a small hospitality business offering apartment accommodations in the Šumava region of the Czech Republic, specifically in Hojsova Stráž near Železná Ruda. The website presents a professional and user-friendly interface with clear navigation, detailed accommodation offers, and family-friendly services such as garden and children's play areas. The business holds a Hotel.cz quality certificate and maintains an active Facebook presence, indicating a moderate level of market trust and customer engagement. Technically, the website uses modern JavaScript libraries and tracking tools, hosted by ŠumavaNet.CZ, with responsive design suitable for mobile users. However, some security best practices such as security headers and cookie consent mechanisms are missing, and WHOIS data is unavailable, which slightly reduces trustworthiness. Overall, the site is functional and credible for its business scope.

A

Apartmány U Lípy

apartmanyulipy.eu

43

Apartmány U Lípy is a small hospitality business offering stylish apartment accommodations in the Šumava region of the Czech Republic. The website presents a well-maintained historic building with modern amenities including wellness facilities, electric vehicle charging, and a summer kitchen. The business targets tourists seeking nature, relaxation, and outdoor activities such as hiking and cycling. The website is professionally designed with clear navigation and booking functionality, supporting the business model of direct apartment rentals. Technically, the site uses common JavaScript libraries and responsive design but lacks some advanced security headers and privacy policies. Security posture is moderate with HTTPS enabled but missing some best practices. Overall, the domain is privacy protected, which is typical for small businesses, and no suspicious WHOIS data is available. The site is safe for general audiences and does not contain adult or questionable content.

Penzion Montana is a small family-run hospitality business located in the Šumava protected landscape area in the Czech Republic. The website presents the pension as a year-round accommodation option suitable for families, groups, seniors, and sports training stays. The business targets local and regional tourists seeking a quiet and private stay near nature. The website content is well-structured, with clear navigation and relevant information about the location and services offered. Social media presence on Facebook and Instagram supports customer engagement. Technically, the site uses common JavaScript libraries such as jQuery, Flexslider, and Fancybox, and is hosted by REG-ZONER, a known Czech hosting provider. Google Analytics is implemented for visitor tracking, but no advanced security headers or privacy policies are present, indicating room for improvement in compliance and security. The site is accessible without WAF or blocking mechanisms, and the domain registration data is consistent with the business history, supporting legitimacy.

R

Rekreační středisko Rybník

rybnik-ceskyles.cz

44

Rekreační středisko Rybník is a small hospitality business located in the Český les region of the Czech Republic, offering accommodation, wellness, sports facilities, and event hosting primarily targeting families, schools, sports clubs, and corporate groups. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses common JavaScript libraries such as jQuery and Flexslider, Google Fonts, and integrates social media and analytics tools. Hosting appears to be provided by ŠumavaNet.CZ. Security posture is moderate with HTTPS in use but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust assessment, though the site content and contact information appear legitimate. Overall, the website is functional and suitable for its business purpose but would benefit from enhanced security and privacy compliance measures.

P

Penzion Arnika

penzion-arnika.cz

44

Penzion Arnika is a small hospitality business operating a guesthouse and restaurant in the Šumava National Park region of the Czech Republic. The website presents a professional and well-structured digital presence, offering accommodation details, restaurant menus, photo galleries, and an online reservation form. The business targets tourists, cyclists, families, and seniors seeking a nature-focused stay in a family-friendly environment. Technically, the website uses modern JavaScript libraries such as jQuery, Flexslider, and Fancybox, and is mobile responsive with good navigation clarity. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS usage and form validation but lacks explicit security headers and published privacy or cookie policies. Tracking technologies like Google Analytics and Facebook SDK are present without visible consent mechanisms, indicating privacy compliance gaps. Overall, the website is functional and trustworthy from a user perspective but would benefit from improved transparency and security practices.

H

Hotel Čertův Mlýn

hotelcertuvmlyn.cz

45

Hotel Čertův Mlýn is a small hospitality business located in the Šumava region of the Czech Republic, offering accommodation, restaurant services, a swimming pool, and facilities for corporate and school events. The website presents a professional and content-rich experience with multimedia elements and social media integration, targeting tourists, families, schools, and corporate clients. Technically, the site uses modern JavaScript libraries and is mobile responsive, though some accessibility features could be improved. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

C

Chata U Tří sluk

chata-modrava.cz

44

Chata U Tří sluk is a small hospitality business operating a pension and restaurant in the Šumava National Park region of the Czech Republic. The website provides detailed information about accommodation options, pricing, restaurant services, and reservation capabilities, targeting tourists, cyclists, families, and groups seeking a nature-focused vacation. The business emphasizes ecological practices and local cultural heritage. Technically, the website uses common JavaScript libraries such as jQuery, Flexslider, and Fancybox, and is hosted by ŠumavaNet.CZ. It integrates Google Analytics and Facebook SDK for tracking and social media presence. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and published privacy or cookie policies, indicating compliance gaps. WHOIS data is unavailable, which reduces domain trustworthiness but the website content and contact information appear professional and consistent with a legitimate small hospitality business.

M

MVM Zrt.

mvm.hu

66

MVM Zrt. is a leading Hungarian energy group with a long-established presence since 1996. The company operates across multiple sectors of the energy industry including production, storage, transmission, retail, and related services. The website reflects a mature corporate digital presence with detailed information about the group and its subsidiaries, targeting a broad audience including customers, investors, and partners. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, and is well optimized for mobile devices. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response contact channels. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Správa jeskyní České republiky

jeskynecr.cz

63

Správa jeskyní České republiky operates as the official government entity responsible for managing caves across the Czech Republic. The organization provides comprehensive visitor services including ticketing, educational programs, and conservation efforts. Their website serves as a central portal for cave information, visitor updates, and online resources, targeting tourists, schools, and researchers. The site is well-branded and consistent with government and scientific partners, reinforcing its authoritative position in the market. Technically, the website is built on Drupal 10 with modern frameworks like Bootstrap and jQuery UI, ensuring a responsive and accessible user experience. The site demonstrates good SEO practices and mobile optimization, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks some advanced security headers and explicit incident response contacts. The absence of WHOIS data limits domain transparency and trust assessment, but the presence of official contact details, government affiliations, and partner endorsements mitigate concerns. Overall, the site is professional, secure, and compliant with privacy regulations, making it a reliable resource for its audience.

G

GRENA, a.s.

grenamat.cz

44

GRENA, a.s. is a Czech Republic-based medium-sized manufacturing company specializing in non-flammable and fire-resistant materials such as vermiculite boards and acoustic panels. Established in 2009, the company serves industrial clients and construction sectors with a broad product portfolio and maintains a professional web presence with multi-language support. The website is well-structured, providing clear navigation and contact options, including phone, email, and contact forms, alongside active social media channels. Technically, the site uses modern JavaScript libraries and frameworks like jQuery, Bootstrap, and Owl Carousel, hosted likely on Czech infrastructure consistent with the domain's WHOIS data. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and published security policies. Privacy compliance is partial due to the absence of a dedicated privacy policy page. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

S

Státní zemědělská a potravinářská inspekce

potravinynapranyri.cz

59

Potravinynapranyri.cz is an official Czech government website operated by the Státní zemědělská a potravinářská inspekce (State Agricultural and Food Inspection Authority). The platform provides transparent public information about non-compliant, adulterated, and unsafe food products identified through official inspections, as well as details on closed food establishments and risky websites. It serves consumers and regulatory bodies by offering searchable data and thematic reports to enhance food safety awareness and consumer protection in the Czech Republic. Technically, the website uses a custom CMS with jQuery and bxSlider libraries, and integrates a government-standard cookie consent mechanism. The site is mobile-optimized, accessible, and performs moderately well. Hosting is consistent with Czech domain registration and uses HTTPS securely. Privacy and cookie policies are comprehensive and GDPR compliant, with no detected tracking or advertising services. Security posture is solid with HTTPS and secure form handling, though HTTP security headers are not explicitly detected. No vulnerabilities or WAF blocking were found. The domain WHOIS data aligns with the website's government affiliation and long-standing operation since 2012, indicating high legitimacy and trustworthiness. Overall, the site is a credible, well-maintained government resource with good privacy and security practices, serving an important public safety function.

A

Asociace muzeí a galerií České republiky, z. s.

cz-museums.cz

48

Asociace muzeí a galerií České republiky (AMG) is a prominent non-profit professional association dedicated to museums and galleries in the Czech Republic. It serves as the largest professional body in the museology sector, providing services such as promotion, education, event organization, and publishing. The website reflects a well-maintained digital presence with clear navigation and regularly updated content, targeting museum professionals and cultural institutions. Technically, the site employs modern JavaScript libraries and frameworks including jQuery, Bootstrap, and JSF, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks explicit security headers and privacy policies, which are recommended for enhanced compliance and protection. Overall, the website is trustworthy and professional, though improvements in privacy disclosures and security hardening would strengthen its posture.

S

Správa jeskyní České republiky

caves.cz

63

Správa jeskyní České republiky is the official governmental entity responsible for managing and promoting caves in the Czech Republic. The website provides comprehensive visitor information, educational resources, online ticketing, and event services. It serves a broad audience including tourists, schools, and researchers, positioning itself as the authoritative source for cave-related activities and conservation in the country. The site is well-branded and consistent with government standards, featuring multiple language options and partner affiliations with recognized organizations. Technically, the website is built on Drupal 10 with modern frameworks like Bootstrap and jQuery UI, ensuring good mobile responsiveness and accessibility. The site loads at a moderate speed and includes SEO best practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual but may be due to CZ NIC policies. Despite this, the website's content, official contact information, and partner links strongly indicate legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant. No incident response or vulnerability disclosure information is published, which could be improved. Overall, the website is professional, trustworthy, and serves its governmental and public service role effectively. Strategic improvements in security headers and transparency around incident response would enhance its security posture further.

The website www.kacr.cz represents the Komora Auditorů České Republiky, a professional self-regulatory organization established by Czech law to oversee the auditing profession. It serves auditors, accounting professionals, and members of the auditing community in the Czech Republic by providing services such as auditor registries, professional education, publications, conferences, and quality control. The site is well-branded and consistent with its government and professional positioning. Technically, the website employs modern JavaScript libraries including jQuery, jQuery UI, and Slick Carousel, and integrates Google Tag Manager and Google Analytics with a privacy-conscious default denial of tracking until consent is given. The site is mobile responsive, accessible, and SEO optimized, though it lacks some advanced security headers and a published privacy policy. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but does not expose security policies or incident response contacts. No vulnerabilities or sensitive data exposures were detected. The absence of WHOIS data limits domain trust assessment, but the professional presentation and clear contact details support legitimacy. Overall, the site is a credible and professional resource for the auditing community in the Czech Republic, with moderate technical maturity and good security posture. Recommendations include publishing a privacy policy, adding security headers, and clarifying domain registration details to enhance trust and compliance.

S

Správa železnic, státní organizace

spravazeleznic.cz

60

Správa železnic is a Czech state organization responsible for managing the national railway infrastructure. The website serves multiple audiences including passengers, suppliers, contractors, and job seekers, providing comprehensive information about projects, services, and organizational structure. The site is well-structured with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the website is built on the Liferay CMS platform and utilizes modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a focus on user engagement and data-driven insights. The site is mobile-optimized and performs moderately well. From a security perspective, the site enforces HTTPS and includes privacy and cookie policies compliant with GDPR. However, no explicit security headers were detected in the provided data, and no vulnerability disclosure or security.txt files were found. The absence of WHOIS data limits domain trust verification, but the official nature and content quality suggest legitimacy. Overall, the website presents a professional and trustworthy digital front for a major government transportation entity, with room for improvement in security header implementation and domain registration transparency.

U

Unie zaměstnavatelských svazů ČR

uzs.cz

49

Unie zaměstnavatelských svazů ČR is a major Czech employers' association representing a broad spectrum of sectors including public services, healthcare, energy, education, and finance. The organization serves over 20,000 member organizations and nearly a million employees, positioning itself as a dominant voice in the Czech Republic's employer landscape. The website reflects this professional stature with clear navigation, sector-specific content, and partnership references. Technically, the site employs common web technologies such as jQuery, Google Tag Manager, and ShareThis for social sharing and analytics, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of explicit privacy and security policies suggest areas for improvement in transparency and compliance. Security posture is moderate with HTTPS implied but missing explicit security headers and vulnerability disclosures. Overall, the site is safe, professional, and targeted at a general audience of employers and stakeholders.

G

GEOFUN, s.r.o.

geofun.cz

57

GEOFUN, s.r.o. operates a Czech-language platform offering mobile geolocation games designed for educational and recreational purposes. The website targets a broad audience including children, families, and educational institutions, providing games that encourage outdoor exploration and learning. The company maintains a moderate market presence with active user engagement and social media integration. Technically, the website employs a modern tech stack including jQuery, Leaflet.js for mapping, and video playback technologies, supporting both web and mobile platforms. While the site is well-designed and content-rich, it lacks some advanced accessibility features and comprehensive cookie consent mechanisms. Security-wise, the site uses HTTPS and anonymizes IPs in analytics but lacks visible security headers and formal vulnerability disclosure policies. The absence of WHOIS data limits domain trust assessment, though the business information and content quality suggest a legitimate operation. Overall, the site is professional and trustworthy but could improve in privacy compliance and security transparency.

I

INET-SERVIS.CZ, s.r.o.

dobraprace.cz

54

Dobrá práce.cz is a Czech job portal operated by INET-SERVIS.CZ, s.r.o., providing a comprehensive platform for job seekers and employers. The site offers job listings categorized by region and industry, CV submission services, email job alerts, and employer advertising options. It targets primarily the Czech job market with some international listings. Technically, the site uses modern web technologies including Bootstrap, jQuery UI, Google Analytics, and Microsoft Clarity, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and secure cookie flags, though some security headers could be improved. The absence of WHOIS data due to privacy protection slightly impacts trust but is common for this business type. Overall, the site is professional, user-friendly, and trustworthy for its audience.

Č

Český plynárenský svaz

eshopcps.cz

56

Český plynárenský svaz operates an e-commerce platform focused on selling gas industry publications, subscriptions, and technical standards primarily for professionals in the Czech gas sector. The website is built on the PrestaShop CMS platform and provides a clear, professional user experience with good mobile optimization and navigation. Contact information and cookie consent mechanisms are properly implemented, supporting compliance with EU privacy regulations. However, the absence of WHOIS registration data reduces domain trustworthiness and warrants further verification. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information.

B

BDO

ethicshotline.eu

60

BDO Ethics Hotline is a specialized platform designed to facilitate whistleblower notifications in compliance with the EU Directive on whistleblower protection. The service is primarily targeted at organizations and individuals within the European Union seeking a secure and anonymous channel to report unethical or illegal activities. The website leverages the reputable BDO brand, a well-known international network of independent accounting and consulting firms, enhancing its credibility and trustworthiness in the compliance sector. Technically, the website employs modern web technologies including jQuery, Bootstrap, and CKEditor, ensuring a responsive and user-friendly interface. The presence of CSRF tokens in forms indicates attention to security in data submission processes. However, the site lacks visible security headers and cookie consent mechanisms, which are important for comprehensive security and privacy compliance. The hosting and domain registration are consistent with the Czech Republic location and BDO's regional presence. From a security perspective, the site enforces HTTPS and includes basic protections but could improve by implementing additional security headers and publishing clear security policies and incident response contacts. No vulnerabilities or malicious content were detected. Overall, the website presents a professional and trustworthy platform for whistleblower reporting, though enhancements in privacy compliance and security transparency are recommended.

Č

Česká unie sportu z.s.

lazadov.cz

52

Lyžařský areál Zadov is a regional ski and outdoor recreational area located in the Šumava region of the Czech Republic. The website provides information about ski lifts, bike rentals, accommodation options, webcams, and upcoming events. The business operates seasonally with a focus on winter sports and summer outdoor activities, targeting tourists and sports enthusiasts. The site is professionally designed with consistent branding and offers multilingual support (Czech and German). The parent organization is Česká unie sportu z.s., indicating a formal sports union affiliation. Technically, the website uses common JavaScript libraries such as jQuery, Flexslider, and Fancybox, along with Google Analytics and a cookie consent mechanism. The site is mobile-optimized and includes social media integration via Facebook, Twitter, and Instagram. However, no CMS or hosting provider details are explicitly identified. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks advanced security headers and a public vulnerability disclosure policy. WHOIS data is unavailable, which reduces transparency and trustworthiness. The expired certification shown on the site should be updated or removed to avoid confusion. Overall, the security posture is adequate but could be enhanced with additional best practices. The overall risk assessment is moderate. The site appears legitimate and serves a clear business purpose, but the lack of WHOIS transparency and some security best practices suggest areas for improvement. Strategic recommendations include implementing security headers, publishing a security.txt file, updating certifications, and enhancing privacy and accessibility compliance.