Security Directory

S

Stichting Yuverta

platformurbangreening.eu

47

The European Platform for Urban Greening is a European educational and collaborative initiative focused on enhancing vocational skills and knowledge in urban greening, climate resilience, biodiversity, and well-being. It connects multiple Centres of Vocational Excellence across Europe, supported by Erasmus+ funding and coordinated by Stichting Yuverta in the Netherlands. The platform offers curricula development, training, and experience centers to promote sustainable urban landscaping practices. The target audience includes vocational education professionals, researchers, policy makers, and businesses involved in urban greening. Technically, the website is built on WordPress with modern web technologies, including lazy loading and Google Tag Manager for analytics with IP anonymization, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly with good content quality and navigation. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit security policies. Privacy compliance is supported by a cookie policy with consent mechanisms, though no dedicated privacy policy or terms of service pages were found. Overall, the domain registration aligns with the project timeline and shows no suspicious patterns, supporting legitimacy. The website is safe for general audiences and professionally presented.

První pozice s.r.o. is a Czech Republic based small technology company specializing in creating successful websites and e-shops, along with SEO and marketing services. The company targets local businesses seeking professional digital presence and marketing support. Their website demonstrates a professional design with clear navigation and relevant content focused on their core services. The technical infrastructure includes modern analytics and tracking tools such as Google Analytics, Facebook Pixel, and Smartlook, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data for the domain www.prvnipozice.com raises concerns about domain legitimacy and ownership, which impacts overall trust. Security posture is moderate with HTTPS usage implied but lacking visible security headers and explicit security policies. Privacy compliance is basic with a privacy policy and cookie consent mechanism present but no terms of service or incident response information publicly available. Overall, the website is functional and professional but would benefit from enhanced security practices and clearer domain registration transparency.

Č

ČSAD SVT Praha, s.r.o.

svt.cz

54

ČSAD SVT Praha, s.r.o. is a Czech IT/IS company specializing in the development, implementation, and maintenance of information and sales systems for the passenger transport sector. As a member of the ČD-Telematika group, it holds a strong market position with flagship projects such as the multi-modal journey planner IDOS and the AMSBus pre-sale and reservation system. The company targets transport operators and partners, providing B2B software solutions that facilitate ticketing and journey planning across multiple transport modes. Technically, the website employs a modern frontend stack including Bootstrap 4, jQuery, and Google Analytics for tracking. The site is mobile-optimized with good navigation and professional design, although some accessibility features could be improved. The presence of cookie consent indicates awareness of privacy regulations, but the absence of explicit privacy and terms of service pages suggests room for compliance enhancement. From a security perspective, the site lacks visible security headers and published security policies, which lowers its security posture score. No critical vulnerabilities or exposed sensitive data were detected, but the missing WHOIS data for the domain raises concerns about domain registration transparency. Overall, the website is professional and trustworthy in content but would benefit from improved security and privacy disclosures. Strategically, the company should prioritize publishing comprehensive privacy and security policies, implementing security headers, and resolving WHOIS data visibility issues to enhance trust and compliance. These steps will strengthen its security posture and align with GDPR and industry best practices.

N

NMS Market Research

nms.global

58

NMS Market Research is a Czech Republic based market research agency founded in 2019, offering comprehensive market research services that combine proprietary digital platforms and years of industry experience. Their services target businesses seeking customer experience management, brand growth, retail analytics, product success tools, and societal research. The company maintains a professional online presence with a well-structured website, active social media profiles, and client testimonials indicating a strong market position in their region. Technically, the website is built on WordPress with modern plugins and marketing tools such as Google Tag Manager, Facebook Pixel, and HubSpot, hosted on Websupport.cz. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks some security headers and published security policies. Privacy compliance is partial due to absence of a privacy policy page, though cookie consent is implemented. WHOIS data confirms legitimacy and consistency with the business claims. Overall, the website is professional, trustworthy, and technically sound with room for improvement in privacy and security transparency.

A

Asociace public relations, z. s. (APRA)

akceapra.cz

53

The website www.akceapra.cz represents Asociace public relations, z. s. (APRA), a Czech non-profit association focused on education, networking, and events in the public relations sector. The site targets PR professionals and organizations seeking educational opportunities and industry events. The business model is centered on providing value through events and community engagement rather than commercial sales. The website content is primarily in Czech and reflects a small-sized organization with a niche market position in the Czech Republic. Technically, the website is built on WordPress and employs modern web technologies including jQuery, Google reCAPTCHA for bot protection, and Microsoft Clarity for user behavior analytics. The site is served over HTTPS with a valid SSL certificate, ensuring secure communications. Performance and mobile optimization are moderate to good, with basic accessibility features implemented. SEO practices are adequate with proper meta tags and structured data. From a security perspective, the site demonstrates good baseline security with HTTPS and bot mitigation. However, it lacks important security headers and explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. No WHOIS data was retrievable, which reduces domain trustworthiness but the website content and contact information appear legitimate and professional. No forms or sensitive data exposure were detected, and no vulnerabilities were apparent from the content analysis. Overall, the website presents a moderate risk profile with good business credibility but gaps in privacy compliance and domain registration transparency. Strategic improvements in privacy policy publication, security headers, and WHOIS data transparency would enhance trust and compliance.

A

APRA - Asociace Public Relations

cenapr.cz

56

The website cenapr.cz represents the Czech Public Relations Award (Lemur), organized by APRA - Asociace Public Relations, a non-profit association focused on recognizing excellence in PR projects within the Czech Republic. The site provides information about the competition categories, judging process, results, and partners. It targets PR professionals, agencies, and organizations interested in public relations achievements. The business model revolves around organizing an annual event supported by sponsors and media partners, with a well-established market presence since 2006. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, hosted on Czech-based infrastructure. The site is mobile-optimized and uses tracking technologies such as Google Analytics and Facebook Pixel for marketing insights. However, it lacks some advanced accessibility features and comprehensive SEO structured data. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and published security or incident response policies. There is no privacy or cookie policy, which poses GDPR compliance risks. No forms were detected in the analyzed content, reducing immediate data input risks. The domain WHOIS data is consistent with the business claims, showing a long-established presence and legitimate registration. Overall, the website is professional and trustworthy but should improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

J

Jakub Křibík

jakubkribik.cz

39

Jakub Křibík operates as a freelance programmer and coder specializing in custom internet websites, e-shops, and tailored projects, with additional operation of an online glass piggy bank shop. The business is small-scale, based in the Czech Republic, and has been active since 2007 with programming experience dating back to 2000. The website presents a professional image with clear service offerings, client references, and contact information, targeting businesses and individuals seeking bespoke web development solutions. Technically, the website uses a custom CMS (PIXCMS) and e-commerce platform (PIXSHOP), hosted on PIXHOST. The technology stack includes PHP, MySQL, jQuery, and Google Analytics for tracking. The site is mobile optimized and SEO friendly, though some technical improvements are recommended, such as updating jQuery and adding security headers. Performance is moderate, and accessibility is basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA in its contact form, but lacks explicit security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is comprehensive, enhancing business credibility. Overall, the website is trustworthy and professional but would benefit from enhanced security practices and privacy compliance to reduce risk and improve user trust.

P

PIXHOST s.r.o.

pixhost.cz

40

PIXHOST s.r.o. is a Czech Republic-based professional webhosting service provider offering reliable hosting solutions with free domain registration (.CZ, .EU). The company targets small to medium businesses and individuals seeking dependable web presence with features such as certified servers, daily backups, and uptime guarantees. The website demonstrates a consistent brand identity and provides clear contact information, supporting its credibility in the local market. Technically, the site uses a custom CMS (PIXCMS) and common JavaScript libraries like jQuery and Fancybox, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, indicating room for compliance improvements. WHOIS data is unavailable, which slightly reduces trust but does not negate the legitimacy suggested by the website content and contact details. Overall, PIXHOST presents as a professional and trustworthy webhosting provider with a solid foundation but could enhance security and privacy transparency.

P

PIXMEDIA s.r.o.

pixmedia.cz

42

PIXMEDIA s.r.o. is a Czech Republic-based company specializing in professional web development, e-commerce solutions, custom programming projects, graphic and advertising services, and web hosting. The company targets businesses and individuals across the Czech Republic, offering tailored digital solutions with a focus on quality and customer satisfaction. Their market position is that of a well-established regional service provider with a comprehensive portfolio including proprietary platforms such as PIXCMS, PIXSHOP, and PIXHOST. Technically, the website demonstrates a mature digital infrastructure using modern JavaScript libraries like jQuery, Fancybox, and Swipe.js, integrated with Google Analytics and Google Tag Manager for analytics and marketing. The site is hosted on PIXHOST and runs on their proprietary CMS, PIXCMS. The website is mobile-optimized and SEO-friendly, with good accessibility features, though performance is moderate. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks visible security headers and published security or incident response policies, which are areas for improvement. The absence of privacy and cookie policies also indicates gaps in privacy compliance. Overall, the website is professional, trustworthy, and content-rich, but the lack of WHOIS data and privacy-related policies slightly reduces its trustworthiness. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance the company's digital trust and security posture.

E

Elite Solutions

elitesolutions.cz

42

Elite Solutions is a Czech-based creative agency specializing in content marketing, creative campaigns, and digital marketing services. With over 13 years of experience, the company serves a diverse client base including banks, energy companies, and media brands. Their service portfolio includes content creation, copywriting, video production, mobile app development, and social media management. The website reflects a mature and professional business with a strong market presence in the Czech Republic and Slovakia. Technically, the site is built on October CMS and leverages modern web technologies such as Google Analytics, Facebook Pixel, and Google Tag Manager, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. Overall, the site is well-designed, mobile-optimized, and provides clear contact information, supporting a trustworthy user experience.

E

Elite | Monday Lovers

elitesolutions.sk

40

Elite | Monday Lovers is a Slovak full-service advertising agency with approximately 15 years of experience, specializing in strategy, identity, campaigns, print, web design, social media, mobile applications, and PR. The company targets businesses seeking comprehensive marketing solutions and maintains a strong regional presence with notable clients and projects. Their website is professionally designed, multilingual, and showcases a portfolio of campaigns and client references. Technically, the site is built on OctoberCMS, uses modern web technologies including Google Tag Manager and Google Maps API, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are missing and no explicit security policy or vulnerability disclosure is present. Overall, the website is trustworthy, compliant with GDPR, and free of adult or questionable content.

B

Botas

botasauthentic.com

70

Botas is an e-commerce retailer specializing in traditional Czech handcrafted footwear for men and women. Founded in 2020, the company positions itself as a heritage brand offering both classic and modern shoe styles. The website is built on the Shopify platform, leveraging a modern tech stack including Google Analytics, Facebook Pixel, Microsoft Clarity, Mixpanel, and Cookiebot for consent management. The site demonstrates good digital maturity with fast performance, mobile optimization, and consistent branding. Security posture is strong with HTTPS enforced, domain transfer locks, and cookie consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is basic, lacking explicit privacy and terms of service pages, and no direct contact information is found in the analyzed content. Overall, the website is professional and trustworthy with moderate risk due to missing compliance documentation.

M

MullenLowe Global

mullenloweglobal.com

74

MullenLowe Global is a prominent marketing communications company headquartered in London and part of the Interpublic Group of Companies. The company operates a global network of agencies providing creative and advertising services to a diverse business audience. Their website reflects a mature digital presence with comprehensive content, multimedia integration, and consistent branding across multiple global offices. Technically, the site uses modern web technologies including jQuery, Matomo analytics, and OneTrust for cookie consent, hosted on a WordPress CMS platform. The site is mobile-optimized and accessible, with good SEO practices and privacy compliance mechanisms in place. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. The absence of WHOIS data is a notable anomaly, potentially indicating recent domain registration or privacy protection, but the overall business credibility remains high due to strong branding and association with a major parent company. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

K

Klub reklamných agentúr Slovenska

ferovytender.sk

58

Férový tender is a Slovak initiative led by the Klub reklamných agentúr Slovenska aimed at promoting fair and transparent tendering processes within the creative marketing and advertising industry. The website serves as a comprehensive guide offering ten key rules for fair tenders, supported by testimonials from industry representatives and associations. It represents a significant portion of the Slovak marketing agency market, with 85 agencies and a combined turnover of 464 million euros in 2023. The initiative is well-established with strong partnerships across multiple marketing and media associations in Slovakia. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Tag Manager and Google Analytics for tracking, and a cookie consent mechanism compliant with GDPR. Hosting is provided by WebSupport with DNSSEC enabled, indicating a secure DNS configuration. The site is well-optimized for mobile devices and SEO, with clear navigation and professional design. From a security perspective, the site uses HTTPS with good SSL configuration and DNSSEC, but lacks some advanced security headers such as Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism. Contact information is detailed and transparent, enhancing trustworthiness. Overall, the website presents a low-risk profile with a high level of professionalism and compliance. Strategic recommendations include enhancing security headers, adding explicit security policies or incident response contacts, and continuing regular security audits to maintain and improve the security posture.

MullenLowe Global operates as a global marketing communications network, with this website serving primarily as a login portal for internal or authorized users. The site is built on WordPress and incorporates hCaptcha for login security, indicating a basic level of protection against automated abuse. However, the public-facing content is minimal, focusing solely on user authentication without marketing or informational pages accessible at this URL. The presence of a corporate email contact for login issues suggests legitimate business operations, but the lack of WHOIS data raises concerns about domain registration transparency. Technically, the website uses standard WordPress infrastructure with external resources hosted on Amazon S3 and hCaptcha services. The site shows basic mobile optimization and accessibility but lacks advanced SEO and security headers, which could be improved to enhance security posture and compliance. No analytics or tracking scripts beyond hCaptcha were detected, indicating minimal user tracking. From a security perspective, the use of hCaptcha is a positive measure, but the absence of security headers and privacy policies reduces the overall security and privacy compliance score. The missing WHOIS data and lack of domain registration details introduce uncertainty regarding domain legitimacy. No evidence of WAF or blocking mechanisms was found, allowing full access to the login page. Overall, the site functions as a secure login portal with basic protections but lacks comprehensive security and privacy policies. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to strengthen trust and compliance.

VisionWorks is a small Czech Republic-based web development business with over 25 years of experience in creating websites, e-commerce platforms, and business systems. The website currently serves as a farewell message from the owner, indicating that no new projects are being accepted but existing clients will continue to receive support. The technical infrastructure is minimal, relying on legacy technologies such as jQuery 1.10.1 and Google Fonts, with no modern CMS or advanced frameworks detected. Security posture is weak, with no DNSSEC, no security headers, and use of outdated libraries. The website lacks privacy and cookie policies, and no contact forms or phone numbers are provided except for an email in the meta author tag. Hidden spammy adult links embedded in the HTML reduce trustworthiness and may negatively impact reputation. Overall, the site is functional but basic, with moderate business credibility but poor privacy and security compliance.

The website www.zaraguza-fb.cz is currently inaccessible, returning a 403 Forbidden error page which blocks access to any content. The lack of accessible content prevents any meaningful analysis of the business, its services, or its digital presence. The WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered, expired, or protected by privacy services. This absence of registration information combined with the access restriction severely limits the ability to assess the legitimacy or trustworthiness of the domain. Technically, the site lacks visible security headers or HTTPS enforcement, and no metadata or scripts were detected. Overall, the website appears inactive or restricted, resulting in a very low trust and security posture score.

M

MEDIAP ®, spol. s r.o.

mediap.cz

59

MEDIAP ®, spol. s r.o. is a Czech-based company specializing in contract pharmaceutical manufacturing and logistics, with a focus on primary and secondary packaging of medicines and food supplements. Established in 1996, the company serves clients primarily in Eastern Europe and emphasizes quality and compliance, holding certifications such as SVP and ISO. Their website reflects a professional and consistent brand image, providing clear contact information and multilingual support (Czech and English). The technical infrastructure is based on Joomla CMS and UIkit framework, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements in security headers and explicit policies are recommended. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious content or blocking mechanisms.

A

AGROFERT, a.s.

famyfakta.cz

49

The website famyfakta.cz serves as a corporate communication and media fact-checking platform for AGROFERT, a large Czech conglomerate. It aims to clarify misinformation and provide official company positions on various topics. The site is well-branded, consistent, and targets a general audience interested in media facts and corporate transparency. Technically, it is built on WordPress using Elementor and other modern plugins, hosted by Active24, and employs standard analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. No direct contact information or explicit security policies are published, which could be improved for transparency and trust. Overall, the site is professional, compliant with GDPR, and trustworthy, with a strong connection to its parent company AGROFERT.

A

AGROFERT, a.s.

pribehjmenemagrofert.cz

43

Agrofert, a major Czech conglomerate founded in 1993, operates across agriculture, chemical production, food processing, and media sectors. The website showcases a detailed 30-year corporate history, emphasizing its growth through acquisitions and diversification. The company holds a significant market position in Central and Eastern Europe, employing over 30,000 people and managing numerous subsidiaries. Technically, the website uses modern JavaScript libraries and Google Tag Manager for analytics and marketing, with a cookie consent mechanism ensuring GDPR compliance. Security posture is moderate, with HTTPS implied but lacking explicit security headers and published security policies. WHOIS data is missing, which impacts transparency but does not negate the evident legitimacy from the website content and social media presence. Overall, the site is professionally designed, content-rich, and user-friendly, targeting business partners, employees, and the public interested in Agrofert's corporate story.

S

Simplea pojišťovna, a.s.

simplea.cz

69

Simplea pojišťovna, a.s. is a Czech-based life insurance company specializing in providing straightforward, fast, and fair life, disability, long-term care, and income loss insurance products. The company positions itself as a customer-centric insurer that emphasizes transparency, rapid claims processing, and higher coverage compared to competitors. Their business model is primarily online, targeting individuals seeking reliable life insurance solutions with easy online access and quick service. The company holds a license from the Czech National Bank, reinforcing its legitimacy in the financial sector. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Google Analytics, Facebook Pixel, and lazy loading for images, ensuring good performance and mobile optimization. The site is well-structured with clear navigation, SEO-friendly metadata, and accessibility considerations. Privacy and cookie policies are prominently implemented with consent mechanisms, reflecting good compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and uses standard tracking and analytics tools. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected, and no public security policy or incident response contacts are published. The absence of WHOIS data for the domain reduces trustworthiness somewhat, but the overall business presence and licensing mitigate this concern. Overall, Simplea.cz presents a professional, trustworthy, and user-friendly online presence for a mid-sized financial services company. Strategic improvements in security header implementation and transparency around security policies would further enhance their security posture and customer trust.

F

Forum Media 2025

forummedia.cz

54

Forum Media 2025 is a marketing and communication event website targeting professionals in the marketing and communication sectors primarily in the Czech Republic. The site promotes an annual event featuring the global elite of marketing and communication. The business model centers on event organization and industry networking. The website content is minimal but consistent with the event branding and messaging. Technically, the site is built on the Zoho Backstage platform using Ember.js and Semantic UI frameworks, providing moderate performance and good mobile optimization. However, SEO is limited due to restrictive robots meta tags. From a security perspective, the website lacks visible security headers and privacy or cookie policies, which impacts its compliance posture negatively. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. No forms or contact information are present, limiting user engagement and support options. The site does not appear to be blocked by any WAF or security challenge, and no adult or explicit content is detected, making it safe for general audiences. Overall, the website demonstrates basic digital maturity with room for improvement in security, privacy compliance, and business credibility. The lack of WHOIS data and privacy policies are notable gaps. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, improving SEO, and enhancing contact and incident response information to build trust and compliance.

S

Sdružení agentur pro výzkum trhu a veřejného mínění SIMAR

simar.cz

48

SIMAR.cz is the official website of the Sdružení agentur pro výzkum trhu a veřejného mínění SIMAR, a Czech association representing market research and public opinion agencies. The site serves as a portal for industry news, standards, events, and resources targeted at market research professionals and clients. It holds a strong market position as a leading association in the Czech Republic, with partnerships including ESOMAR and multiple reputable member agencies. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, and integrates Google Analytics with user consent. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though it lacks explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and well-maintained, supporting the association's mission and business credibility.

K

KMVS, advokátní kancelář, s.r.o.

kmvs.cz

49

KMVS, advokátní kancelář, s.r.o. is a well-established Czech law firm operating since 2006, specializing in legal services across healthcare, pharmaceuticals, advertising, intellectual property, and data protection sectors. The firm serves primarily business clients and offers additional educational services such as workshops and webinars. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses jQuery, Google Fonts, and Google Analytics, and is built on the WebRedakce CMS platform. Cookie consent is actively managed via KookieCheck, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found. Security posture is moderate with HTTPS usage implied but lacking visible security headers and detailed incident response information. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective.

Event&promotion, s.r.o. operates a specialized Czech-language portal focused on event marketing and sales promotion. The website provides news, articles, a company catalog, and event agency services targeting marketing professionals and companies organizing corporate and private events. The business model combines content publication with advertising and service offerings. Technically, the site uses a custom CMS with legacy JavaScript libraries such as jQuery 1.11 and Bootstrap 3, along with common tracking tools like Google Analytics and Facebook Pixel. However, the site lacks HTTPS in the provided content, which is a significant security concern. The absence of WHOIS data limits domain trust assessment, but the website presents professional contact information and active social media presence. Privacy compliance is minimal, with no visible cookie consent mechanisms.

Z

Zaraguza

zaraguza.com

58

Zaraguza is a full-service communication and marketing agency operating primarily in Slovakia and the Czech Republic. The company boasts a strong market position supported by over 150 awards for creativity and effectiveness, including prestigious Facebook Awards and YouTube Works recognitions. Their services encompass digital marketing, creative campaigns, social media management, and television advertising, targeting businesses seeking impactful marketing solutions. The website showcases a professional portfolio of campaigns from 2020, emphasizing their creative capabilities and client successes. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, Google Fonts, and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no explicit CMS or hosting provider information is discernible. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS (implied by external scripts loaded over HTTPS), but lacks visible HTTP security headers and explicit security or incident response policies. No forms are present on the main page, reducing attack surface but also limiting direct user engagement. The cookie consent banner and linked GDPR PDF indicate privacy awareness, though no detailed privacy or security policies are found on the site. WHOIS data is notably absent, with the domain showing no match in the WHOIS database, which is inconsistent with the active website presence. This raises questions about domain registration legitimacy or privacy protection usage. Overall, the site is professional and trustworthy in content and design but would benefit from improved transparency in domain registration and enhanced security headers. Strategic recommendations include implementing comprehensive security headers, publishing detailed privacy and security policies, providing clear contact information for security incidents, and verifying domain registration details to improve trustworthiness.

W

Wiktor Leo Burnett

wlb.sk

66

Wiktor Leo Burnett is a well-established advertising agency based in Slovakia, specializing in brand building and creative marketing services. The company has a strong market position, evidenced by multiple industry awards including Agency of the Year titles and Cannes Lions. Their website reflects a professional and creative brand image, targeting businesses seeking high-quality advertising solutions. The technical infrastructure uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, hosted on a reputable provider with DNSSEC enabled for domain security. The site is mobile optimized and provides a good user experience with rich multimedia content. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. Overall, the website is trustworthy, professional, and compliant with relevant regulations.

T

THIS IS LOCCO

thisislocco.sk

51

THIS IS LOCCO is a Slovak-based crossline advertising agency specializing in creative campaigns that integrate culture, creativity, and technology to deliver engaging customer experiences and profitable outcomes for clients. The company holds a strong market position, evidenced by multiple prestigious awards including Agency of the Year and Digital Agency of the Year from 2021 through 2024. Their client portfolio includes reputable brands across various sectors such as retail, media, and transportation. The website reflects a professional and modern digital presence built on the Webflow platform, optimized for performance and mobile responsiveness.

S

Slovak&Friends

slovakandfriends.agency

55

Slovak&Friends is a small Slovak communication agency specializing in creating communication strategies and innovative campaigns with a focus on social responsibility. The website is professionally designed using the Wix platform and targets a Slovak-speaking audience interested in socially responsible marketing projects. The technical infrastructure is based on Wix's Thunderbolt framework, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and a cookie consent mechanism implemented, but lacks advanced security headers and visible privacy or terms of service pages. The absence of direct contact information and WHOIS data limits full trust assessment but the site appears legitimate and professional.

R

Respect APP s.r.o.

respectapp.com

42

Respect APP s.r.o. is a Slovak advertising agency specializing in comprehensive marketing strategies, television spots, logo design, and corporate identity services. The company positions itself as a creative agency that brings ideas to life, serving businesses seeking to enhance or maintain their brand image. The website content is professional and showcases a portfolio of works, awards, and client references, indicating a solid market presence in Slovakia. Technically, the website is built on WordPress with modern plugins and libraries, including jQuery, Slick Carousel, and Gravity Forms, and uses HTTPS with valid SSL certificates. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS and secure forms but lacks security headers and explicit privacy and terms policies. Overall, the site is safe, well-designed, and credible but would benefit from improved compliance and security transparency.

O

oh my DOT

ohmydotagency.com

61

oh my DOT is a full-service advertising agency operating primarily in Bratislava and Prague, offering comprehensive marketing solutions, creative ideas, and long-term strategic planning. The company positions itself as a regional player in the media and marketing sector, targeting businesses seeking professional advertising services. The website reflects a modern digital presence built on WordPress, leveraging popular tools such as Yoast SEO and Cookiebot for compliance and optimization. The technical infrastructure is solid, with HTTPS enabled and a moderate performance profile. Security posture is adequate with room for improvement in security headers and published policies. Privacy compliance is well addressed through a comprehensive cookie consent mechanism and a detailed privacy policy. However, contact information and terms of service are not prominently available, which could be enhanced to improve business credibility and user trust.

M

MullenLowe GGK Bratislava

mullenloweggk.sk

73

MullenLowe GGK Bratislava is a reputable advertising and creative agency operating as part of the global MullenLowe network. The company offers a range of marketing and communication services, targeting businesses seeking professional advertising solutions in Slovakia. Their website showcases a portfolio of client works and news updates, reflecting an active and engaged agency. Technically, the website is built on WordPress, leveraging modern technologies such as jQuery, Matomo Analytics, and OneTrust for cookie consent management. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices, although some accessibility improvements could be made. Security-wise, the website enforces HTTPS, uses cookie consent mechanisms, and does not expose sensitive data. However, it lacks explicit security policies and incident response information, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR, with a strong digital presence and active social media engagement.

M

Mannschaft agency

mannschaft.sk

57

Mannschaft is a Slovakian advertising agency established in 2019 by creative partners Adam Marčan and Matúš Kvas. The agency specializes in developing creative advertising campaigns, including TV and online campaigns, targeting businesses seeking innovative marketing solutions. Positioned as an award-winning agency, Mannschaft emphasizes passion and creativity in its services, supported by a professional portfolio and active social media presence. Technically, the website is built on WordPress with Yoast SEO optimization and integrates modern web technologies such as Google Fonts and Vimeo API. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, though it lacks advanced security headers and formal security policies. Overall, the site demonstrates a mature digital presence with minor areas for security enhancement.

M

MADE BY VACULIK

vaculik.com

61

MADE BY VACULIK is a creative intelligence agency focused on strategic thinking and creative marketing solutions. The company positions itself as a niche player offering strong strategic foundations combined with creative collaboration with clients. The website targets a general audience interested in marketing and creative services, primarily in Slovakia and the Czech Republic, with international reach. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Performance and mobile optimization are good, though some accessibility features could be improved. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and published privacy policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the website content and design appear professional and trustworthy. Overall, the site is functional and business-appropriate but would benefit from enhanced transparency and security practices.

I

Istropolitana Ogilvy

istropolitana.sk

56

Istropolitana Ogilvy is a Slovak marketing and advertising agency providing creative and strategic marketing services. The website presents a professional digital presence with a modern tech stack including Vue.js and Nuxt.js frameworks. The site is well-optimized for mobile and includes standard tracking tools such as Google Analytics and Facebook Pixel. Security posture is strong with HTTPS and security headers properly configured, though explicit security and privacy policies are absent. The absence of contact information and formal policies slightly reduces privacy compliance and business credibility scores. Overall, the website is trustworthy and professionally maintained, serving a business audience in the marketing sector.

Z

Zevraj s.r.o.

freeandy.agency

58

FreeAndy Agency is a small Slovak creative advertising agency operating under the legal entity Zevraj s.r.o., founded in 2020. The company focuses on delivering creative marketing and advertising services primarily to Slovak clients, emphasizing independence and creativity. Their website is professionally designed using WordPress with Elementor and Yoast SEO, supporting Slovak and English languages. The agency maintains an active social media presence on Facebook, Instagram, and TikTok, enhancing their market visibility. Technically, the website leverages modern CMS and plugins, with embedded video content hosted on YouTube and tracking implemented via Google Tag Manager. Hosting is provided by a Slovak hosting provider, and the domain registration aligns with the business location and entity, indicating legitimacy. However, the site lacks explicit privacy and terms of service pages, and no direct contact emails or phone numbers are visible, which may impact user trust and compliance. From a security perspective, the site uses HTTPS and has domain transfer protection enabled, but lacks security headers and DNSSEC, which are recommended for enhanced security. Cookie consent is implemented, indicating some level of privacy compliance, but GDPR-specific policies and data protection officer information are absent. Overall, the security posture is moderate with room for improvement. The overall risk assessment suggests a legitimate small business with a professional web presence but with gaps in privacy and security best practices. Strategic recommendations include adding comprehensive privacy and terms policies, implementing security headers, enabling DNSSEC, and providing clear contact information to improve trust and compliance.

E

Elite | Monday Lovers

eliteml.sk

40

Elite | Monday Lovers is a Slovak full-service advertising agency with approximately 15 years of experience, specializing in strategy, identity, campaigns, print, web design, social media, mobile applications, and PR. The company targets businesses seeking comprehensive marketing solutions and maintains a strong portfolio with notable clients. Their market position is that of an established regional player with a consistent brand presence and a medium-sized team. Technically, the website is built on OctoberCMS, leveraging modern web technologies such as Google Tag Manager and Google Maps API, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and secure forms, though explicit security and incident response policies are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR cookie consent requirements.

A

applepie

applepie.sk

36

applepie.sk is the website of applepie, a Slovak advertising agency established in 2004. The company focuses on creative development and empathy-driven advertising solutions, targeting a general audience primarily in Slovakia. The website showcases video content and highlights strategic, creative, and trend-driven approaches to advertising. Technically, the site is built on WordPress with modern plugins like Yoast SEO and uses Vimeo for video hosting. The site is mobile-optimized and has good SEO practices but lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

B

Botas

botas.cz

71

Botas.cz is a well-established Czech e-commerce retailer specializing in traditional and modern handmade footwear for men and women. The brand emphasizes quality craftsmanship and heritage, positioning itself as an iconic Czech footwear brand. The website is built on Shopify, leveraging modern e-commerce infrastructure and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Meta Pixel, Microsoft Clarity, Mixpanel, and Amplitude, all managed with a robust cookie consent mechanism via Cookiebot. The technical infrastructure is modern and performant, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and standard security headers likely managed by Shopify, though explicit security policies and incident response contacts are not published. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service documentation. Overall, the website is professional, trustworthy, and suitable for general audiences with no adult content. Strategic improvements include publishing comprehensive privacy and terms policies, adding incident response information, and enhancing accessibility features.

P

PROEBIZ s.r.o.

fsawards.com

54

The Fair Sourcing Awards website is a professionally maintained platform operated by PROEBIZ s.r.o., focused on recognizing excellence and innovation in procurement within corporate and public sectors primarily in the Czech and Slovak regions. The site provides detailed information about award categories, jury processes, and past winners, positioning itself as a niche leader in procurement awards. The technical infrastructure leverages common web technologies such as Bootstrap, jQuery, and tracking tools like Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal security policies. Privacy compliance is limited due to the absence of a dedicated privacy policy page. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

V

Vysoká škola logistiky o.p.s

vslg.cz

56

Vysoká škola logistiky o.p.s is a specialized higher education institution based in the Czech Republic, focusing on logistics education. Founded in 2004, it offers bachelor's, master's, and MBA programs with a strong emphasis on logistics and sustainable transport. The institution maintains a solid market position as a niche university with multiple campuses and active partnerships, including participation in logistics conferences. The website reflects a professional and consistent brand image targeting prospective and current students interested in logistics studies. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. It supports multilingual content and provides a cookie consent mechanism aligned with GDPR requirements. Security posture is good with HTTPS, reCAPTCHA, and cookie consent, though it lacks explicit security policies and advanced security headers. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, making it a reliable digital presence for the institution.

V

Vysoká škola hotelová a ekonomická

vshe.cz

52

Vysoká škola hotelová a ekonomická (VŠHE) is a specialized higher education institution in the Czech Republic focusing on hotel management, economics, and related fields. The website reflects a medium-sized educational entity with a clear market position and a transition to University College Prague (UCP) as its parent organization. The site offers bachelor's and master's programs, including English-language options, targeting prospective and current students. The content is professionally presented with good navigation and multilingual support. Technically, the website is built on WordPress with modern libraries and SEO tools, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though some security headers are missing and no explicit incident response or security policies are published. Overall, the site is trustworthy, compliant with GDPR, and well-maintained, with active social media engagement and clear business legitimacy.

U

University College Prague (UCP)

ucp.cz

65

University College Prague (UCP) is a modern higher education institution based in the Czech Republic, offering bachelor's and master's degree programs with flexible study options including in-person, combined, and online modes. The institution targets prospective students in the Czech Republic and Slovakia, emphasizing individual approach, practical skills, and innovative education. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses a commercial CMS (solidpixels.) and integrates multiple marketing and analytics tools such as Google Tag Manager, TikTok Pixel, and Facebook Pixel, indicating a mature digital marketing strategy. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective, but the website content and structure support legitimacy. Overall, the site is well-designed, GDPR compliant, and suitable for its educational purpose.

S

Statutární město Karviná

karvinainfo.cz

45

KarvináInfo is the official municipal information portal for the city of Karviná, Czech Republic, providing residents and visitors with comprehensive information about local events, culture, tourism, and city services. The website serves as a central hub for city news, event calendars, and tourist attractions, supported by official city contact details and social media channels. The business model is focused on public service and community engagement, positioning itself as a trusted source for local information. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Swiper slider, and Choices.js, hosted on a LiteSpeed Web Server. The site is moderately optimized for performance and mobile responsiveness, with a clean and consistent design. However, some scripts are commented out, and no CMS or backend platform is explicitly identified. SEO and accessibility features are basic but functional. From a security perspective, the site lacks explicit security headers and there is no confirmation of HTTPS usage from the provided data. The cookie consent mechanism is implemented with explicit accept and reject options, indicating some level of privacy compliance, but no privacy policy or terms of service pages were found. There is no evidence of a security policy, incident response contacts, or vulnerability disclosure mechanisms, which suggests room for improvement in security maturity. Overall, the website is a professional and trustworthy municipal portal with good content quality and business credibility. The main risks relate to security best practices and privacy compliance documentation. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and security policies, and enhancing compliance with GDPR and related regulations.

Zámek Fryštát is a cultural heritage site owned and operated by the statutory city of Karviná in the Czech Republic. The website serves as an informational portal for visitors, offering detailed descriptions of castle tours, exhibitions, and additional visitor services such as weddings, carriage rides, and photography. The site targets tourists and cultural enthusiasts interested in historical landmarks. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements can be made by adding security headers and publishing a privacy policy. The absence of WHOIS data limits domain trust verification, but the official city ownership and consistent branding support legitimacy. Overall, the website is professional, trustworthy, and serves its purpose effectively.

S

Sportoviště Karviná

sportovistekarvina.cz

38

Sportoviště Karviná is a local sports facility in Karviná, Czech Republic, offering a variety of recreational services including a football field with artificial turf, skatepark, streetball, pumptrack, workout areas, children's playground, and running and inline skating ovals. The website positions itself as a community sports venue with a focus on local users and sports enthusiasts. The business model revolves around facility management and providing sports and recreational services to the public. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the website uses a combination of common JavaScript libraries such as jQuery, Fancybox, Swipe.js, and Owl Carousel, hosted on PIXHOST and built on the PIXCMS platform. Google Analytics is implemented for visitor tracking. The site loads with moderate performance and good mobile responsiveness. However, accessibility features are basic and could be improved. SEO is adequately addressed with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No forms are present on the main pages, reducing attack surface, and no vulnerable libraries were detected. The absence of privacy and cookie policies is a compliance gap, especially under GDPR regulations. WHOIS data is missing, which limits domain trust verification and reduces overall legitimacy confidence. Overall, the website is safe, professional, and functional for its intended audience but would benefit from enhanced privacy compliance, improved security headers, and WHOIS transparency to increase trust and security posture.

P

petrucki.cz – PETR RUCKI – photo, web design, adventure, trips

petrucki.cz

43

The website petrucki.cz serves as a personal portfolio for Petr Rucki, showcasing his photography, web design, and travel adventures. The site targets a general audience interested in visual arts and creative web solutions. It operates as a small-scale personal branding platform without evident commercial or enterprise scale operations. Technically, the site is built on WordPress and utilizes common JavaScript libraries such as jQuery, Swiper.js, and Unite Gallery to deliver a visually appealing and responsive user experience. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS but does not implement additional security headers or policies, and no privacy or cookie policies are present, indicating limited compliance with data protection regulations. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content itself appears legitimate and professional. Overall, the site scores moderately on content quality and technical implementation but scores low on privacy compliance and business credibility due to missing policies and contact information.

S

Starostové a nezávislí (STAN)

starostove-nezavisli.cz

65

Starostové a nezávislí (STAN) is a Czech political movement rooted in local governance, representing mayors and local officials. The website serves as a platform to present their candidates, political programs, and news updates. It reflects an established political entity with governmental roles including ministers and deputies. The technical infrastructure is modern, leveraging Solidpixels CMS, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and professionally designed, providing a good user experience. Security posture is strong with HTTPS and security headers, though cookie consent mechanisms are absent, which is a GDPR compliance gap. WHOIS data is not publicly available, indicating privacy protection typical for political organizations. Overall, the site is trustworthy and well-maintained, suitable for its audience and purpose.

B

BurdaMedia Extra

burdamediaextra.cz

49

BurdaMedia Extra is a large Czech media company specializing in premium content creation, event organization, and advertising campaign management. Their digital presence targets a broad Czech-speaking audience interested in lifestyle, fashion, cooking, and related topics. The website demonstrates a professional design with good navigation and mobile optimization. Technically, it uses modern JavaScript and consent management platforms to ensure GDPR compliance. However, the absence of WHOIS data and explicit contact details slightly reduces trustworthiness from a domain registration perspective. Security posture is moderate with room for improvement in security headers and published policies. Overall, the site is compliant with privacy regulations and provides a good user experience.

ENSIS is a Czech Republic-based company established in 2003, specializing in providing managerial information systems, internet communication and marketing services, corporate web presentations, e-shops, and computer support primarily targeting small and medium-sized enterprises. The website content is professional and business-focused, with a moderate level of digital maturity including the use of JavaScript libraries and Google Analytics for tracking. However, the technology stack includes outdated components such as jQuery 1.8.3, which may pose security risks. The security posture is moderate with GDPR compliance evident through privacy and cookie policies and consent mechanisms, but lacks visible security headers and direct incident response information. Overall, the website is accessible, safe, and trustworthy but could benefit from technical and security improvements.