Security Directory

K

K+K Ski School s.r.o.

ski-school.cz

48

K+K Ski School s.r.o. is a well-established ski school operating primarily in the eastern Krkonoše region of the Czech Republic, with branches in Janské Lázně and Pec pod Sněžkou. The company offers a broad range of winter sports instruction including skiing, snowboarding, telemark, and ski mountaineering, complemented by summer activities such as a large rope park and equipment rentals. Their market position is that of a regional leader with a strong local presence and diversified service offerings targeting families, schools, and corporate clients. Technically, the website employs a modern but custom technology stack including jQuery, Owl Carousel, Google Analytics, Google Tag Manager, Facebook Pixel, and Adform tracking. The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and reCAPTCHA for form protection, but lacks visible security headers and published security policies or incident response information. The absence of explicit cookie consent mechanisms and incomplete WHOIS data reduce the overall trust and privacy compliance posture. Overall, the website is professional and trustworthy in content and business presentation but would benefit from enhanced transparency in domain registration, improved security headers, and stronger privacy compliance measures to reduce risk and increase user trust.

E

EURO REAL - BOHEMIA s.r.o.

euroreal.cz

57

EURO REAL - BOHEMIA s.r.o. is a Czech Republic based real estate agency specializing in property sales and purchases, primarily residential. The company has an established online presence since 2002, indicating a stable market position. Their website offers comprehensive services including property listings, client testimonials, and multiple contact channels, targeting individuals and families seeking real estate solutions. Technically, the website employs modern JavaScript frameworks such as Vue.js and jQuery, integrates Google Analytics and Tag Manager for tracking, and uses Leaflet.js for map functionalities. The site is hosted on cesky-hosting.eu and demonstrates good mobile optimization and user experience. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA on forms, and provides detailed cookie consent management, reflecting a strong privacy posture. However, explicit security policies and incident response information are absent, and security headers are not explicitly detected. Overall, the website is professional, trustworthy, and compliant with GDPR, with room for improvement in security transparency and technical headers.

Р

Регіональна Газова Компанія

rgc.ua

57

Регіональна Газова Компанія (РГК) є провідним українським підприємством у сфері газорозподілу, виробництва газового обладнання та інжинірингових послуг. Компанія обслуговує значну частину газової інфраструктури України, пропонуючи інноваційні рішення, включаючи проекти з чистої енергії, такі як водень та біометан. РГК має сильну позицію на ринку, підтримує кілька дочірніх сервісних доменів і активно комунікує через соціальні мережі. Технічно сайт використовує сучасні веб-технології, включаючи Google Analytics та Tag Manager, має адаптивний дизайн і базові SEO та доступності. З точки зору безпеки, сайт використовує HTTPS, але не має розширених захисних заголовків або публічних політик безпеки. Відсутні контактні дані для інцидентів безпеки. Загалом, сайт є професійним, безпечним і орієнтованим на бізнес аудиторію.

G

Gasgrid Finland Oy

gasgrid.fi

60

Gasgrid Finland Oy is a state-owned company operating as the system operator and gas transmission network manager in Finland. The company provides safe, reliable, and cost-effective gas transmission services, playing a critical role in the Finnish energy infrastructure. The website reflects a professional corporate presence with comprehensive information about services, market data, and development projects including hydrogen infrastructure. Technically, the site is built on WordPress with Elementor and Yoast SEO, featuring modern web technologies and good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although DNSSEC is not implemented and explicit security policies are absent. Privacy compliance is well addressed with GDPR-compliant cookie and privacy policies. Overall, the website and domain registration details are consistent and trustworthy, representing a legitimate and established energy sector entity in Finland.

O

OIK TV

oiktv.cz

45

OIK TV operates as a regional news portal serving the foothills of the Orlické hory in the Czech Republic. The website provides a variety of news content including local events, sports, culture, and crime reports, targeting residents and viewers interested in regional information. The business model centers on media content delivery through articles, videos, and live streaming, supported by advertising. The site maintains a consistent brand presence and regularly updates content, indicating an active media outlet with a small operational scale. Technically, the website is built on WordPress CMS with popular plugins such as Visual Composer and Events Manager, leveraging Bootstrap and FontAwesome for styling and icons. It integrates Google Analytics and Google Tag Manager for tracking and uses Google Adsense for advertising. The site is mobile-optimized and has a moderate performance profile. However, some accessibility and security best practices could be improved, such as implementing comprehensive security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML. Yet, it lacks several security headers that could enhance protection against common web threats. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, although the website content and social media presence suggest legitimate operations. Privacy compliance is partially addressed with a GDPR page, but no explicit cookie consent banner is present. Overall, OIK TV presents a functional and content-rich regional media website with room for improvement in security and privacy compliance. The lack of WHOIS data is a notable risk factor that should be addressed to enhance trustworthiness. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, and verifying domain registration details to strengthen the site's security posture and compliance standing.

S

Spolek milců čaje s.r.o.

tea.cz

40

The website www.tea.cz represents a specialized Czech e-commerce business focused on the sale and direct import of fine teas under the brand Dobrá čajovna, operated by Spolek milců čaje s.r.o. It targets tea enthusiasts and consumers interested in premium tea products, offering a curated selection of teas from various countries. The business model is retail e-commerce with community engagement and franchise opportunities. The site is well-branded and consistent, with clear contact information and social media presence, positioning it as a niche market player in the tea retail sector. Technically, the website is built on the PrestaShop platform, leveraging modern web technologies including jQuery, Bootstrap, Google Tag Manager, and PayPal integration. The site is mobile-optimized with good SEO practices and moderate performance. Security is enforced via HTTPS with secure forms, though some security headers are missing. Privacy compliance is partially addressed with a GDPR policy page, but lacks a visible cookie consent mechanism. Security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and incident response information suggests room for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is typical for small retail businesses. Overall, the website is professional, trustworthy, and safe for general audiences. Recommendations include implementing cookie consent banners, adding security headers, publishing a security policy and incident response contacts, and improving WHOIS transparency if possible to enhance trust and compliance.

C

Contipro a.s.

geloren.cz

54

Geloren.cz is the official e-commerce website for Geloren, a brand of joint health supplements produced by Contipro a.s., a Czech biotechnology company established in 1990. The company specializes in the production of hyaluronic acid and related products for both human and veterinary use. The website offers a range of dietary supplements and veterinary products, targeting consumers seeking joint care solutions. The business model is direct-to-consumer e-commerce, leveraging the Shoptet platform for online sales and marketing. Contipro holds a strong market position as a leading Czech manufacturer and a significant global player in hyaluronic acid production. Technically, the website employs a modern e-commerce stack including jQuery, Google Tag Manager, Facebook SDK, and Slick Carousel, hosted on the Shoptet platform. The site is mobile-optimized, accessible, and SEO-friendly with proper metadata and structured data. Performance is moderate with room for improvement. Security posture is good with HTTPS enforced and CSRF protections on forms, though explicit security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The security posture is solid but could be enhanced by adding security headers and explicit incident response contacts. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness. However, the website content and business information align with a legitimate and established company. Overall, the site is professional, trustworthy, and compliant with relevant regulations, serving its target audience effectively.

S

Spain Tourism Official Website

spain.info

45

The website www.spain.info is the official tourism portal for Spain, operated under government auspices to provide comprehensive travel information, destination guides, and booking resources for tourists. It targets a global audience with multilingual support and extensive content on culture, nature, gastronomy, and practical travel tips. The site employs a modern technical infrastructure including Bootstrap, jQuery, Leaflet maps, and integrates Google Analytics and Facebook SDK for marketing and analytics purposes. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. WHOIS data is not publicly available, likely due to privacy protection, but the domain's legitimacy is supported by consistent branding and government association. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

S

SportAccord

sustainability.sport

48

The Sustainability.sport portal is a specialized online platform developed by SportAccord and in collaboration with the IOC, dedicated to aggregating and disseminating resources related to sustainability initiatives in sport. It serves a niche audience interested in environmental and social sustainability within the sports sector, offering news, case studies, guidelines, and event information. The platform is positioned as a trusted resource with a clear focus and professional presentation. Technically, the website is built on WordPress with modern frontend technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is mobile-optimized and demonstrates good SEO practices, though some accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC, security headers, and a cookie consent mechanism, which are areas for improvement. No incident response or security policy information is provided, which could be enhanced to improve trust and compliance. Privacy policy exists but is basic and does not explicitly confirm GDPR compliance. Overall, the website is credible and professionally maintained, with a moderate security posture and some compliance gaps. Strategic improvements in security headers, DNSSEC, privacy compliance, and incident response transparency would strengthen the platform's trustworthiness and regulatory adherence.

S

Středisko společných činností AV ČR, v. v. i.

hotelyspribehem.cz

46

The website hotelyspribehem.cz represents a hospitality business operated under the auspices of the Academy of Sciences of the Czech Republic (Akademie věd ČR). It offers a portfolio of historical and stylistic hotels, conference and event spaces, gastronomic experiences, and wedding services. The business targets tourists, corporate clients, and event organizers seeking unique, historically rich accommodations combined with modern comfort. The domain is relatively new, registered in 2022, consistent with the business launch timeline. Technically, the website is built on the OpenCms platform, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for UI components, and integrates analytics tools including Google Analytics and Plausible Analytics. The site is hosted on servers managed by Gransy, as indicated by the nameservers. The website demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML. However, it lacks important security headers like Content-Security-Policy and X-Frame-Options, and does not provide a cookie consent mechanism, which is a GDPR compliance gap. No explicit security or incident response policies are published. The WHOIS data is transparent and consistent with the business identity, supporting legitimacy. Overall, the website is professional, trustworthy, and well-positioned in its niche market. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

S

Správa železnic, státní organizace

zeleznicenaletiste.cz

57

Správa železnic, státní organizace, operates the official website zeleznicenaletiste.cz to provide information about the modernization and construction of railway infrastructure connecting Prague, Václav Havel Airport, and Kladno. The website serves as a communication platform for residents, commuters, and travelers, offering project updates, news, and detailed descriptions of the railway sections. The organization holds a strong market position as a government entity responsible for transportation infrastructure in the Czech Republic. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and accessibility features, although some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers and a public security policy or vulnerability disclosure program are absent. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's profile. Overall, the website demonstrates a solid security posture and good privacy compliance, with room for enhancements in security policy transparency and accessibility. The site is trustworthy, professionally maintained, and serves its public sector mission effectively.

Fantova budova is a culturally significant Secessionist building in Prague, managed by Správa železnic, the Czech state railway organization. The website serves as an informational and promotional platform for the ongoing restoration project and event space rental. The site is well-structured, professionally designed, and provides relevant content primarily in Czech with English alternatives. Technically, it is built on the Liferay CMS platform and uses modern JavaScript libraries and tracking tools. Security posture is good with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published security policies. Overall, the site is trustworthy and serves its purpose effectively.

K

Klinker Centrum s.r.o.

klinkercentrum.cz

64

Klinker Centrum s.r.o. is a well-established Czech company specializing in the supply and realization of clay brick facades, including facing bricks, brick cladding, paving bricks, and fired roofing tiles. With over 25 years of experience, the company positions itself as a market leader in the Czech Republic, offering comprehensive services from product supply to facade realization. The website reflects a mature digital presence with professional design, clear navigation, and active content updates including news and a magazine section. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, alongside security measures like Google reCAPTCHA and cookie consent mechanisms. However, the absence of WHOIS data and lack of visible HTTP security headers suggest areas for improvement in domain transparency and security hardening. Overall, the site is safe, GDPR compliant, and provides multiple contact channels, supporting both B2B and B2C customer engagement.

M

Město Aš

info-as.cz

52

The website www.info-as.cz serves as an official tourism and local information portal for the city of Aš in the Czech Republic. It provides comprehensive details about local activities, events, cultural sites, accommodation, and gastronomy, targeting tourists, families, and local visitors. The site is well-structured with clear navigation and offers multilingual support. It integrates modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, with a cookie consent mechanism ensuring GDPR compliance. However, the absence of WHOIS data limits transparency regarding domain ownership, which slightly impacts trustworthiness. Technically, the website employs a modern tech stack including jQuery, Swiper.js, and LightGallery, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS enforced and consent management in place, but lacks explicit security headers and dedicated security or incident response policies. Contact information is available via a GDPR-compliant form, though no direct company emails or phone numbers are explicitly listed. Social media presence on Instagram and Facebook enhances engagement and trust. Overall, the site is professional, content-rich, and user-friendly, suitable for its purpose as a local tourism hub. The main risk lies in the lack of domain registration transparency and missing formal security policies. Strategic improvements in security headers, terms of service, and WHOIS transparency would enhance credibility and security posture.

S

Sencito

chytrejsiobec.cz

49

Sencito is a technology company specializing in smart IoT solutions for municipalities, offering a range of sensors, modules, and a mobile application to enable smarter community management. Their market position is focused on small to medium municipalities primarily in the Czech Republic and surrounding regions, providing affordable and easy-to-deploy IoT infrastructure. The website is professionally designed, multilingual, and provides detailed information about their products and services, targeting both municipal authorities and citizens. Technically, the website uses modern JavaScript libraries such as jQuery, Blueimp Gallery, Owl Carousel, and AOS for animations, alongside Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and includes cookie consent mechanisms, indicating a moderate level of digital maturity. However, no CMS or hosting provider details were identified. From a security perspective, the site enforces HTTPS and uses encrypted connections. Cookie consent and spam protection on forms are implemented. However, no explicit security headers were detected, and there is no published security policy or incident response information, which are areas for improvement. The absence of WHOIS data reduces transparency but does not indicate malicious intent. Overall, the website presents a trustworthy and professional front for a niche IoT technology provider, with moderate security posture and good privacy compliance. Strategic improvements in security policy transparency and technical security headers would enhance trust and compliance.

William H. Coleman, Inc. operates a member login portal primarily serving its clients, likely in the energy sector. The website provides essential member services such as login, sign-up, password recovery, and contact options. The company has an established presence since 2012, supported by a domain registration consistent with its business age and sector. The site is built on ASP.NET Web Forms technology with Bootstrap for styling and includes basic client-side validation and CAPTCHA to enhance security. The technical infrastructure suggests hosting on Microsoft Azure DNS with GoDaddy as the registrar. Security posture is moderate with HTTPS enforced and CAPTCHA implemented, but lacks modern security headers and uses an outdated Google Analytics script. Privacy compliance is basic with a privacy policy and terms of service linked but no cookie consent mechanism. Overall, the website is functional and professional but could benefit from security and privacy enhancements.

L

Los Kachlos s.r.o.

loskachlos.cz

49

Los Kachlos s.r.o. is a well-established Czech company specializing in the import and retail of premium design tiles and coverings from Spain and Italy since 1996. The company operates multiple physical showrooms across Czech Republic and Slovakia and offers a comprehensive product range including retro, vintage, large format, and technical tiles for various interior and exterior applications. Their business model combines retail, wholesale, e-commerce, and design consultancy services, positioning them as a market leader in their niche. Technically, the website is built on a mature platform (iCard.cz) using Bootstrap and Vue.js, with modern analytics and marketing integrations. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies are missing. The absence of WHOIS data limits domain trust analysis, but the website content and business information appear professional and credible. Privacy policy and terms of service pages are not found, indicating room for compliance improvement.

A

Asociace energetických specialistů, z.s.

asociacees.cz

9

Asociace energetických specialistů, z.s. is a Czech non-profit association dedicated to supporting and educating energy specialists. The organization offers accredited courses, seminars, and certification services to professionals in the energy sector, particularly focusing on energy consulting and building renovation. It collaborates with governmental bodies and environmental funds, positioning itself as a recognized entity within the Czech energy market. The website reflects a professional and consistent brand image, targeting energy specialists and related stakeholders. Technically, the site employs modern JavaScript libraries, Google Analytics, and Google Maps API, with a moderate performance and basic mobile optimization. Security posture is adequate but could be improved by implementing security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trust, though the website content and partnerships indicate legitimacy. Overall, the site is safe, professional, and relevant to its audience.

Biogen Slovakia s.r.o. operates as a subsidiary of the global biotechnology leader Biogen Inc., focusing on innovative therapies for neurological and rare diseases. The website serves healthcare professionals and patients in Slovakia, providing comprehensive information about therapeutic areas, corporate responsibility, and career opportunities. The digital infrastructure is built on Adobe Experience Manager, leveraging modern JavaScript libraries and cookie consent management tools to ensure compliance and user experience. Security posture is solid with HTTPS enforcement and cookie management, though some HTTP security headers could be improved. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, enhancing trust. Overall, the website reflects a professional and credible corporate presence with good technical implementation and user experience.

S

Sloneek

sloneek.com

66

Sloneek is a modern HR SaaS platform offering a comprehensive suite of employee management tools including core HR functions, time management, performance management, payroll, and AI-driven surveys. The company targets SMEs and startups, positioning itself as an all-in-one HR solution with a strong emphasis on user experience and data-driven decision making. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site leverages WordPress with multiple analytics and marketing integrations, ensuring robust tracking and user engagement insights. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain raises some legitimacy concerns, but the active social media presence and comprehensive content support the business's credibility. Overall, Sloneek presents as a trustworthy and professional HR software provider with room for improvement in transparency and security disclosures.

O

Ottobock

ottobock.com

74

Ottobock is a globally recognized healthcare company specializing in orthotics and prosthetics, providing innovative mobility solutions for patients with amputations, injuries, or neurological conditions. The company maintains a strong market position as a leader in its sector, offering a comprehensive range of products and patient care services. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, targeting patients, healthcare professionals, and clinics worldwide. Technically, the site leverages modern frameworks such as Next.js and StencilJS, integrates advanced analytics and consent management tools, and demonstrates good performance and accessibility standards. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance, although explicit security policy and incident response information are not publicly available. Overall, the site projects high trustworthiness and professionalism consistent with a large healthcare manufacturer.

T

Testuj.to s.r.o.

testuj.to

71

Testuj.to s.r.o. operates a Czech Republic-based marketing platform that leverages micro-influencer communities to provide authentic product testing and reviews. The platform enables users to test products for free or at discounted prices and share their experiences to assist other consumers and product manufacturers. The company positions itself as the largest tester community in the Czech market, focusing on user-generated content as a marketing tool. Technically, the website is built on a modern React and Next.js stack, integrating multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates good mobile optimization, SEO practices, and security posture with HTTPS and security headers properly configured. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information and social media presence enhancing trust. However, the site lacks a publicly available security policy and incident response information, which could improve transparency and security readiness. Overall, the website is professional, trustworthy, and well-positioned in its niche, with moderate to good technical maturity and security practices.

A

Amazing places for your holiday | Amazing Places

amazingplaces.cz

57

The website 'Amazing Places' offers curated travel content focused on handpicked holiday destinations within the Czech Republic. It targets general audiences interested in exploring unique and interesting places for vacations. The business model appears to be content curation and travel inspiration, likely monetized through advertising or affiliate partnerships, though no explicit monetization details are visible. The site uses modern web technologies including Vue.js and Vuetify, with integration of Google Analytics and Tag Manager for visitor tracking. The technical infrastructure is moderately mature, with good mobile optimization and SEO practices, but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data limits the ability to verify domain ownership and registration legitimacy, introducing moderate risk in trust assessment. Overall, the site is functional and professional but could improve in transparency and security compliance.

V

VS Consult

vsconsult.cz

64

VS Consult is a small Czech digital marketing consultancy specializing in PPC advertising, SEO optimization, social media management, and web design services tailored for small to large businesses. The website presents a professional and consistent brand image with clear service offerings and client testimonials, positioning itself as a niche player in the Czech digital marketing sector. Technically, the site is built on WordPress with modern plugins and frameworks such as Yoast SEO, Beaver Builder, and Bootstrap 4, ensuring good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though additional security headers and explicit security policies are absent. The lack of WHOIS data reduces domain trustworthiness, but the accessible content and professional presentation mitigate concerns. Overall, the site is well-structured, user-friendly, and trustworthy for its intended audience.

Ximilar is a technology company specializing in visual AI solutions, offering image recognition, visual search, and custom AI tailored to business needs. Their platform enables no-code computer vision model creation and deployment, targeting businesses and developers across industries such as fashion, home decor, stock photos, and collectibles. The company positions itself as a flexible, modular, and easy-to-integrate SaaS provider with a strong emphasis on automation and customization. Technically, the website is built on WordPress with modern JavaScript frameworks like Alpine.js, and integrates marketing and analytics tools such as Google Tag Manager and Intercom. The site is well-optimized for SEO and mobile devices, featuring structured data and rich metadata. Performance is moderate with good accessibility and navigation. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response information. WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces transparency but is common in the tech SaaS sector. Overall, the website demonstrates a professional and trustworthy digital presence with room for improvement in privacy policy transparency and security disclosures. The risk profile is moderate with no critical vulnerabilities detected in the visible content.

S

SCR design

scrdesign.sk

64

SCR design is a well-established digital studio specializing in UX/UI design, branding, and website development services. With over 13 years of experience, the company serves a diverse clientele including banking, real estate, and healthcare sectors. Their website demonstrates a strong market position with professional design, client testimonials, and a comprehensive service portfolio. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and user experience. Security posture is solid with HTTPS and reCAPTCHA implementations, though security headers could be improved. Privacy compliance is robust with detailed cookie and privacy policies and consent mechanisms. Overall, SCR design presents a credible and professional digital presence, though the lack of WHOIS data slightly impacts trust. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms.

B

Birdline

birdline.sk

50

Birdline is a Slovak digital marketing agency specializing in comprehensive marketing services including strategic marketing, branding, social media, SEO, web development, e-commerce solutions, innovation, digitalization, and education. The company targets entrepreneurs and businesses seeking to improve their digital presence and marketing effectiveness. The website is professionally designed using Drupal 7 CMS with modern JavaScript libraries and frameworks, providing a good user experience and mobile optimization. Social media integration is strong, supporting brand visibility and engagement. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks advanced security headers and explicit privacy and terms policies. WHOIS data confirms the legitimacy and consistency of the domain registration with the business profile. Overall, the website is trustworthy and well-positioned in its market niche.

K

KON Agency

packagingherald.cz

55

Packaging Herald is a Czech-based industry news platform focused on the packaging and logistics sectors. It provides daily news, trends, and innovations relevant to businesses in these industries. The website is professionally designed, uses WordPress CMS, and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and FullStory. It features a cookie consent mechanism and GDPR-compliant privacy policies, indicating a mature approach to privacy and compliance. Security posture is good with HTTPS and reCAPTCHA protections, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness, but the active and professional content supports legitimacy. Contact is primarily via web forms, with no direct company emails or phone numbers publicly listed.

M

MAFRA, a.s.

metro.cz

62

Metro.cz is a well-established Czech online news portal operated by MAFRA, a.s., providing comprehensive news coverage focused on Prague and regional areas. The site offers a variety of content including articles, podcasts, photo galleries, and user community features, supported primarily through advertising revenue. Technically, the website employs modern web technologies and integrates multiple analytics and advertising platforms, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and consent management, though additional security headers could enhance protection. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences, though the absence of WHOIS data limits domain registration trust analysis.

M

MAFRA, a.s.

lidovky.cz

63

Lidovky.cz is a prominent Czech news portal operated by MAFRA, a.s., offering a wide range of news, analyses, interviews, and premium content to a general audience interested in current affairs. The website demonstrates a mature digital infrastructure with integration of multiple advertising and analytics technologies, including Google Analytics, Gemius, and advanced consent management via Didomi. The site is well-designed with excellent content quality, clear navigation, and mobile optimization. Security posture is good with HTTPS enforced and consent mechanisms in place, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the strong business branding and content quality. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving accessibility features to further strengthen trust and compliance.

H

Handicare Trappeheiser

handicare-trappeheiser.no

68

Handicare Trappeheiser is a Norwegian company specializing in mobility solutions, particularly stairlifts, with a strong market position supported by over 650,000 global installations. The company offers tailored stairlift products for various types of staircases, backed by extensive experience and certifications. Their website reflects a professional and user-friendly digital presence with clear contact channels and compliance with privacy regulations. Technically, the site employs modern analytics and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the business demonstrates legitimacy and trustworthiness with room for improvement in security transparency.

D

Databox s.r.o.

zivefirmy.cz

62

Živéfirmy.cz is a prominent independent online business directory focused on Czech companies, operated by Databox s.r.o. The platform offers comprehensive listings across multiple sectors including real estate, hospitality, retail, finance, education, and government. It targets marketing professionals, sales representatives, students, and the general public seeking reliable company data. The business model centers on free listings supplemented by premium promotion packages and value-added services such as insolvency monitoring. The website enjoys a strong market position as one of the largest Czech business catalogs with over 375,000 companies listed. Technically, the site employs a modern web stack including Bootstrap, jQuery, FontAwesome, and Google Fonts, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, HTTPS is enforced and cookie consent mechanisms are robust, though HTTP security headers and formal security policies are absent. Login functionality supports OAuth providers and secure form inputs. The security posture is solid but could be improved by adding security headers, publishing incident response and vulnerability disclosure information, and performing regular audits of third-party scripts. The absence of WHOIS data limits domain trust assessment, but the website content and business presence indicate legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations. Strategically, Živéfirmy.cz should focus on enhancing transparency around security policies and domain registration details to strengthen trust. Technical modernization and accessibility improvements would further improve user experience and security resilience.

The website gdprautomat.eu offers an online GDPR compliance tool targeted primarily at small businesses and entrepreneurs in the Czech Republic. The service provides data mapping, risk analysis, GAP analysis, and legal document templates to help clients meet GDPR requirements efficiently. The business model is based on a one-time fee granting 18 months of access to the interactive application. The site positions itself as the most affordable comprehensive GDPR solution on the market, supported by client testimonials and cooperation with legal experts. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries, hosted by WEDOS Internet, a reputable Czech hosting provider. The site is mobile optimized and includes embedded instructional videos to enhance user experience. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, but explicit security policies and incident response contacts are absent. Overall, the site demonstrates a good security posture with room for improvement in privacy policy transparency and accessibility. The domain registration is consistent with the business claims and shows no suspicious patterns, supporting the legitimacy of the operation.

K

KOSMAS.cz

kosmas.cz

62

KOSMAS.cz is a well-established Czech online bookstore offering a wide range of products including physical books, e-books, audiobooks, music, and games. The company operates 35 physical stores and maintains a strong online presence with a user-friendly website. Their market position is solid within the Czech retail book sector, supported by customer reviews and recognized certifications such as 'Zelená firma' and 'Ověřeno Heurekou'. The website targets Czech-speaking book buyers and readers, providing comprehensive product information and a smooth shopping experience. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager, Google Analytics, Bing Ads, and Typekit fonts. The site is mobile-optimized and demonstrates good SEO practices. However, some security headers are missing, and no explicit security policy or incident response pages are published, which could be improved to enhance security posture. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, indicating compliance with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency but does not significantly impact the overall trustworthiness given the website's professional presentation and contact information. Overall, KOSMAS.cz presents a trustworthy and professional e-commerce platform with good content quality and business credibility. Strategic improvements in security headers and transparency policies would further strengthen their security posture and compliance.

Asociace Public Relations, z. s. (APRA) is a well-established Czech non-profit association representing public relations agencies. Founded in 1997, it provides certification, education, ethical standards, and industry advocacy for PR professionals and clients in the Czech Republic. The website serves as an information hub with news, events, membership details, and resources for the PR community. Technically, the site runs on WordPress with the Divi theme and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. However, the WordPress and jQuery versions are outdated, posing potential security risks. The site uses HTTPS but lacks visible security headers and does not provide privacy or cookie policies, indicating GDPR compliance gaps. Overall, the website is professional and trustworthy but would benefit from technical and compliance improvements.

C

Cech kachliarov

cechkachliarov.sk

61

Cech kachliarov is a Slovak professional association dedicated to supporting and representing stove and fireplace professionals. The organization provides consumer guidance, educational resources, and a platform to find qualified professionals, ensuring quality and safety in the industry. Their website reflects a well-structured, professional presence with clear branding and relevant content targeted at Slovak residents seeking expert services in this niche. Technically, the site is built on Contao CMS and uses modern web technologies including Google Analytics, Facebook Pixel, and Google Tag Manager for analytics and marketing. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though it lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, professional, and functional, serving its target audience effectively.

S

Střední odborné učiliště stavební, Plzeň, Borská 55

souplzen.cz

48

Střední odborné učiliště stavební, Plzeň, Borská 55 is a vocational secondary school specializing in construction trades and related fields, serving approximately 600 students. The institution offers a variety of educational programs including apprenticeship certificates and maturita exams, as well as adult education and retraining courses. The school has a strong partnership network with professional guilds and local companies, supporting practical training and student internships. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, featuring a responsive design and basic accessibility. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. WHOIS data is missing, which reduces trustworthiness but the website content and contact information are professional and consistent with a legitimate educational institution.

P

PRO VOBIS s.r.o.

drevoastavby.cz

42

The website www.drevoastavby.cz operates as a leading Czech portal dedicated to wooden houses, including montované dřevostavby, sruby, roubenky, and related construction projects. It serves as an information hub, magazine publisher, and marketplace connecting users with verified construction companies and project catalogs. The site is professionally designed with good content quality, targeting individuals and professionals interested in wooden housing solutions. Technically, it is built on Joomla CMS with a modern tech stack including jQuery, Google Analytics, and Facebook SDK, offering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and well-positioned in its niche but could improve privacy compliance and security best practices.

T

Topinfo s.r.o.

estav.cz

54

ESTAV.cz is a Czech online media portal specializing in construction, architecture, housing, and technical building equipment. Operated by Topinfo s.r.o., it provides news, expert articles, advertising services, and related digital content targeting professionals and enthusiasts in the construction and real estate sectors. The portal maintains a consistent brand presence and offers additional services such as an online TV channel and energy price calculators. Technically, the website uses a mature technology stack including jQuery, Bootstrap, and Google Tag Manager, supported by a proprietary CMS. It is well-optimized for mobile and SEO, with good user experience and navigation. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust analysis, but the professional presentation and content quality indicate a legitimate and established business. Privacy policies and GDPR compliance are clearly addressed, supporting user trust and regulatory adherence.

S

SilesNet Polska Sp. z o. o.

silesnet.pl

59

SilesNet Polska Sp. z o. o. is a small regional telecommunications provider based in Poland, specializing in high-quality fiber-optic and wireless internet services for residential and business customers. With over 21 years of market presence, the company emphasizes reliability, professional customer support, and tailored internet solutions. Their website reflects a professional and consistent brand image, targeting Polish-speaking customers primarily in the Cieszyn region. Technically, the website uses modern JavaScript libraries such as Swiper.js for UI elements and integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized and provides clear navigation and contact information, though it lacks explicit privacy and terms of service pages. Security posture is moderate, with HTTPS usage and cookie consent implemented, but missing DNSSEC and security headers reduce the overall security maturity. No signs of WAF or content blocking were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but could improve in privacy transparency and security best practices.

S

SilesNet s.r.o.

silesnet.cz

57

SilesNet s.r.o. is a regional telecommunications provider based in the Czech Republic, operating since 1998. The company specializes in delivering high-speed internet services via fiber optic and wireless technologies, targeting residential customers, businesses, and organizations. Their offerings include internet for apartments, houses, and enterprises, complemented by television services and dedicated technical support. The website reflects a stable market position with a focus on personalized customer service and regional expertise. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and popular libraries such as Swiper.js for UI components. Google Tag Manager and Google Analytics are used for tracking and analytics. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Hosting appears to be provided by rails.cz, indicating a reliable infrastructure. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, demonstrating awareness of privacy regulations. However, explicit security headers are missing, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms domain legitimacy with consistent registration details and a long operational history. Overall, the website presents a professional and trustworthy digital presence with room for improvement in privacy policy transparency and security header implementation. Strategic enhancements in these areas would strengthen compliance and security posture, supporting continued business growth and customer trust.

S

SUITU websites SE

suitu.cz

61

SUITU websites SE is a Czech-based company specializing in custom web design, online marketing, and digital strategy services. With over 15 years of experience and more than 1000 successful projects, they serve a diverse clientele ranging from small and medium businesses to large corporations. Their services emphasize bespoke design, fast website performance, Czech language administration, ongoing support, and reliable security. The website is professionally designed, mobile-optimized, and includes multiple client testimonials and logos that reinforce trust and credibility. Technically, the site uses a proprietary CMS (MySUITU CMS), modern web fonts, and integrates Google Analytics and marketing tags with a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and secure form handling, though some security headers are missing and no explicit security policy or incident response contacts are published. The domain is well aged and consistent with the business claims, enhancing legitimacy. Overall, the website presents a mature digital presence with strong business credibility and good privacy compliance.

The website 'Zemědělství žije' is a Czech Republic government-supported platform focused on promoting agricultural education and activities. It offers information on open days, exhibitions, lectures, agroenvironmental clubs, skill rides, internships, agricultural schools, and educational videos. The site targets students, educators, agricultural professionals, and the general public interested in agriculture. The platform is supported by the Ministry of Agriculture, indicating strong institutional backing and trustworthiness. Technically, the website is built on the MySUITU CMS platform, utilizing jQuery 1.11.0, Google Analytics, and Google Tag Manager for analytics and tracking. The site is mobile-optimized with good navigation and SEO practices. However, the use of an outdated jQuery version and lack of explicit security headers present moderate technical risks. The cookie consent mechanism and privacy policy comply with GDPR requirements, enhancing privacy compliance. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website presents a solid risk profile with good business credibility and privacy compliance. Recommendations include updating JavaScript libraries, implementing security headers, and adding explicit security policies to further strengthen the security posture.

A

AgroJobs s.r.o.

pracevzemedelstvi.cz

40

AgroJobs s.r.o. operates the website pracevzemedelstvi.cz, a specialized recruitment platform focused on agricultural jobs in the Czech Republic. The company is a subsidiary of the Zemědělský svaz ČR and provides job listings, internship offers, and employer services tailored to the agricultural sector. The website targets both job seekers and employers, offering a niche service with a clear market position. Technically, the site uses modern frontend technologies including Bootstrap and jQuery, integrates Google Tag Manager and analytics, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks some advanced HTTP security headers and published security policies. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness, but the business association and content quality mitigate this somewhat. Overall, the site is professional, compliant with GDPR, and provides a trustworthy user experience for its target audience.

Zemědělství žije is an educational project run by the Zemědělský svaz České republiky, supported by the Czech Ministry of Agriculture. The website aims to educate the general public, especially children, about agriculture, its diversity, and care for the environment and livestock. It provides information on agricultural events, competitions, educational materials, and activities. Technically, the site uses MySUITU CMS with jQuery and Google Analytics, and it is hosted on Czech infrastructure with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent, but lacks some advanced security headers and explicit incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR, though it could improve transparency by adding terms of service and contact details.

Česká technologická platforma pro zemědělství (ČTPZ) is a Czech non-profit organization focused on advancing agricultural technology and research. It acts as a coordinating platform for universities, agricultural enterprises, and research institutes to facilitate knowledge exchange and innovation in the agricultural sector. The platform is recognized by the Czech Ministry of Agriculture, which supports its activities. The website presents a professional image with clear information about its mission, target audience, and services, including organizing events and monitoring research priorities. From a technical perspective, the website employs modern frontend technologies such as Bootstrap, jQuery, and various JavaScript plugins for UI enhancements. It is mobile-optimized and includes Google Analytics for visitor tracking. However, there is no evidence of a CMS or hosting provider details. Performance is moderate, and SEO practices are adequately implemented with proper meta tags. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data is a concern for domain legitimacy verification, although the website content and contact details suggest a legitimate organization. Overall, the website is functional and professional but would benefit from improved security practices, privacy compliance, and transparency regarding domain registration details.

O

OK GROUP a.s.

okgroup.cz

45

OK GROUP a.s. is a well-established Czech insurance brokerage company with over 20 years of experience, offering a wide range of insurance and risk management services primarily targeting business clients and individual citizens within the Czech Republic. The company is part of the OK HOLDING group and provides services including industrial risk insurance, agricultural insurance, civil insurance, municipal property insurance, and related financial services. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the website is built on simploCMS and integrates modern analytics and tag management tools such as Google Analytics and Google Tag Manager. It employs HTTPS with a secure SSL configuration and includes a detailed cookie consent mechanism compliant with GDPR principles. However, the site lacks some security headers and a published privacy policy, which are areas for improvement. From a security perspective, the site demonstrates good practices like CSRF token usage and cookie consent but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data for the domain reduces trustworthiness and raises concerns about domain registration transparency. Overall, the site is secure and professional but would benefit from enhanced transparency and security documentation. Strategically, the company should focus on publishing comprehensive privacy and security policies, implementing security headers, and verifying domain registration details to improve trust and compliance. These steps will strengthen their security posture and business credibility in the competitive insurance market.

E

eLegal.cz

elegal.cz

72

eLegal.cz is a Czech-based legal services firm established in 2005, specializing in bridging law with business realities, particularly in corporate law, IT, GDPR compliance, eCommerce, intellectual property, real estate, and labor law. The firm targets businesses and startups requiring clear, practical legal advice with a modern understanding of technology and marketing. Their market position is supported by over 1,000 satisfied clients and a strong portfolio of testimonials and partner relationships. Technically, the website employs modern web technologies including jQuery, Bootstrap, Owl Carousel, Google Tag Manager, Google Analytics, and Cookiebot for GDPR-compliant cookie consent. The site is mobile-optimized, well-structured, and performs moderately well. However, no explicit CMS or hosting provider information is available. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent and spam protection on forms. However, it lacks visible security headers and publicly disclosed security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and strong business credibility. Recommendations include enhancing security headers, publishing incident response policies, and adding a vulnerability disclosure mechanism to further improve security posture.

WebPal Cloud Server, operated by Palomino System Innovations Inc., is a mature and established cloud-based content management and collaboration platform serving over 400,000 users worldwide. The company offers integrated solutions for website building, document management, file sharing, and business process applications, targeting enterprises and small businesses. The platform emphasizes secure, private hosting in selected top-tier data centers with dedicated support based in Toronto, Canada. The website presents a professional and consistent brand image with clear service offerings and client testimonials, reinforcing its market position as a trusted content management solution provider. Technically, the website uses a modern tech stack including HTML5, CSS3, JavaScript libraries such as jQuery and Bootstrap, and integrates Google Analytics and Google Ads for marketing and tracking. The site is moderately optimized for performance and mobile responsiveness, though accessibility features are basic. The hosting infrastructure allows clients to choose server locations across multiple global data centers, enhancing data sovereignty and reliability. From a security perspective, the domain is well-established with no privacy protection, indicating transparency. However, DNSSEC is not enabled, and no HTTP security headers were detected in the HTML content, which are areas for improvement. The site lacks a published security policy, incident response contacts, and cookie consent mechanisms, which are important for compliance and trust. The use of Google tracking scripts indicates moderate user tracking, but privacy compliance appears basic. Overall, WebPal.net is a credible and professional business website with a solid foundation but could enhance its security posture and privacy compliance to better align with modern standards and regulations.