Security Directory

S

Schleswiger Unternehmertag

schleswiger-unternehmertag.de

53

The Schleswiger Unternehmertag website serves as a digital platform promoting a regional entrepreneurial event held in Schleswig, Germany. The event focuses on leadership, crisis management, and networking among local businesses, targeting entrepreneurs and business leaders in the Schleswig and Schleswig-Flensburg regions. The website features multimedia content including videos and images from past events, providing attendees and interested parties with insights and event highlights. The business model centers on event organization and regional business community engagement, positioning itself as a recurring and established event in the local market. Technically, the website is built on WordPress using the Elementor page builder, enhanced with Borlabs Cookie for GDPR-compliant cookie management. It integrates YouTube videos with privacy-enhanced embedding and uses modern web technologies such as jQuery. Hosting is provided by RZone, indicated by the nameservers. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features, though there is room for improvement in accessibility compliance. From a security perspective, the website enforces HTTPS with a good SSL configuration and includes several security headers such as Content-Security-Policy and X-Frame-Options. The presence of a cookie consent mechanism and a comprehensive privacy policy indicates a strong commitment to privacy compliance. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced security posture. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. It does not exhibit any signs of malicious activity or content blocking. Strategic recommendations include publishing a dedicated security policy, adding incident response contact details, and considering a vulnerability disclosure policy to further strengthen trust and security transparency.

W

Wirtschaftsförderungs- und Regionalentwicklungsgesellschaft Flensburg/Schleswig mbH

oeconomia-flensburg.de

40

The website oeconomia-flensburg.de represents a regional economic event organized by the Wirtschaftsförderungs- und Regionalentwicklungsgesellschaft Flensburg/Schleswig mbH. It focuses on sustainability and transformation topics relevant to the regional economy of Flensburg, Germany. The platform serves as a networking and knowledge-sharing event for entrepreneurs, decision-makers, and experts, positioning itself as a key regional economic forum with a professional and consistent brand presence. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and a specialized video player for event media. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with no major technical issues detected. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. No incident response or vulnerability disclosure information is provided, indicating room for improvement in transparency and security readiness. Overall, the website is trustworthy and professional, with a clear business focus and good content quality. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance user trust and regulatory adherence.

Barcamp Flensburg organizes an annual unconference event focused on open knowledge exchange and community discussions, with the upcoming 8th edition themed 'Veränderung' (Change). The event targets open participants interested in regional and societal topics, fostering a collaborative environment with multiple sessions and an evening program. The website is built on TYPO3 CMS and uses modern web technologies such as Leaflet.js for mapping. The site is well-structured, mobile-optimized, and provides clear navigation and sponsor information, reflecting a small but professionally managed community event. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and cookie consent mechanisms. No explicit contact emails or phone numbers are provided on the analyzed page, which limits direct communication channels. Overall, the website is trustworthy and serves its purpose effectively but could improve in privacy compliance and security best practices.

3

3d-berlin vr solutions GmbH

guide3d.com

59

3d-berlin vr solutions GmbH is a German technology company specializing in digital wayfinding and information systems for complex buildings, operating since 2010. Their product portfolio includes solutions such as easyGuide, easyMaps, carFinder, and mapsEngine, targeting organizations requiring efficient navigation and information management within large facilities. The company maintains a professional online presence with a well-designed website hosted on Squarespace, integrating modern web technologies and multilingual support via Weglot. Security posture is solid with HTTPS and HSTS enabled, alongside a GDPR-compliant cookie consent mechanism. However, the absence of published privacy policies, terms of service, and explicit contact information limits transparency. WHOIS data is unavailable, raising concerns about domain registration legitimacy despite the company's apparent established market presence. Overall, the website reflects a mature digital infrastructure with room for improvement in compliance documentation and trust signals.

infomax websolutions GmbH is a small German company specializing in digital solutions for the tourism sector. The website primarily serves as a minimal landing page with a prominent link redirecting users to another domain (infomax-online.de), indicating limited direct content or engagement on this site. The business model appears focused on providing B2B digital services tailored to tourism industry clients. Technical infrastructure is basic, hosted on Hetzner servers, with no detected CMS or advanced technologies. The site lacks critical security and privacy features such as HTTPS, security headers, privacy policies, and contact information, which significantly impacts its security posture and trustworthiness. Overall, the website is minimalistic with poor content quality and limited user engagement features.

D

DiscoverCars.com

discovercars.com

74

DiscoverCars.com is a global online car rental comparison and booking platform offering users the ability to save up to 70% by comparing deals from over 1000 suppliers across more than 10,000 locations worldwide. The website emphasizes free cancellation and 24/7 multilingual customer support, positioning itself as a trusted intermediary in the transportation sector. The platform targets travelers seeking convenient and cost-effective car rental options globally. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics, Bing Ads, reCAPTCHA Enterprise, and CookiePro for consent management. The site is well-optimized for desktop and mobile, with good SEO and accessibility features. Performance is moderate, with a professional and consistent design that enhances user experience. From a security perspective, the site uses HTTPS with strong SSL configuration and implements security best practices such as reCAPTCHA and cookie consent banners. However, explicit security policies, incident response contacts, and vulnerability disclosure programs are not publicly available, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a high level of professionalism and trustworthiness, though the absence of WHOIS data and domain registration details slightly reduces the confidence in domain legitimacy. Strategic recommendations include publishing detailed security policies, establishing incident response contacts, and enhancing transparency around vulnerability disclosures to further strengthen security posture and user trust.

B

bookingkit

bookingkit.net

69

bookingkit is a mature, medium-sized SaaS company specializing in booking, marketing, and administration software for the European tours, activities, and attractions industry. The company positions itself as a market leader in Europe, offering a comprehensive platform that integrates booking generation, channel management, and centralized administration to simplify operations and increase sales for its customers. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a high level of digital maturity. The technical infrastructure leverages WordPress CMS with modern marketing and analytics tools such as Facebook Pixel, Hotjar, and HubSpot, ensuring robust data collection and user engagement capabilities. Security posture is strong with HTTPS, domain locking, and no visible vulnerabilities, although DNSSEC is not enabled. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligned with GDPR requirements. Overall, bookingkit demonstrates a high level of business credibility and operational professionalism, making it a trustworthy platform in its niche.

G

Gilston Digital SA

miru.digital

49

Miru.digital is a Swiss-based SaaS platform operated by Gilston Digital SA, specializing in PDF document archiving, consultation, and distribution with advanced full-text search capabilities. The company positions itself as a Swiss-made, secure, and easy-to-use solution targeting businesses and organizations requiring efficient document management. The website reflects a professional and consistent brand image with clear pricing tiers and client references, indicating an established niche presence in the document management technology sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes essential security features such as HTTPS and cookie consent management. However, it lacks explicit privacy and terms of service documentation, which are critical for compliance and user trust. Security posture is generally good, with use of Google reCAPTCHA and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and professionally maintained, though it would benefit from enhanced privacy and security disclosures to align with best practices.

C

Comvation AG

cubetech.ch

64

Comvation AG is a Swiss digital and web agency based in Bern and Thun, specializing in developing customized digital products including web applications, websites, online shops, SEO, and consulting services. The company positions itself as a passionate and human-centric digital partner, serving businesses seeking tailored digital solutions. Their website demonstrates a professional and modern design with rich content, customer testimonials, and client references, indicating a strong market presence in their regional niche. Technically, the site leverages modern frameworks such as Astro, integrates Google Tag Manager and reCAPTCHA for analytics and security, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is generally good with HTTPS enforced and secure form handling, though explicit security headers and published security policies are absent. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business credibility and digital maturity are solid. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to improve trust.

S

swipe GmbH

recycling-map.ch

60

Recycling Map is a Swiss-based digital platform operated by swipe GmbH that aggregates over 12,000 recycling collection points across Switzerland. It serves as an informational resource for residents and municipalities to locate recycling stations for various materials, providing detailed data such as location, opening hours, and accepted recyclable goods. The platform supports user engagement through feedback mechanisms and favorites management, positioning itself as a niche environmental service provider within the Swiss market. Technically, the website leverages modern web technologies including Laravel backend inferred from routing patterns, Font Awesome for icons, Cookiebot for consent management, and Google Tag Manager for analytics. The site is well-optimized for mobile devices, uses HTTPS with strong security headers, and integrates a comprehensive cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF protection, and transparent cookie disclosures. However, it lacks a dedicated security policy or incident response contact information, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious activities were detected in the provided content. Overall, Recycling Map presents a professional, trustworthy, and privacy-conscious web presence with strong compliance to GDPR and cookie regulations. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen its security posture and user trust.

L

Leitmotiv Online Medien GmbH & Co. KG

backstagepro.de

48

Backstage PRO is a well-established German professional network platform dedicated to the music industry, connecting musicians, bands, event organizers, and related businesses. It offers a comprehensive suite of services including booking opportunities, a musician marketplace, industry news, and premium cooperation campaigns. The platform is supported by notable partners such as Musikhaus Thomann, enhancing its market credibility and reach. The website is professionally designed, content-rich, and targets music professionals seeking networking and business opportunities within the German music scene. Technically, the site employs modern web technologies including Google Analytics 4, Google Tag Manager, and cookie consent management, with a mobile-optimized experience and good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies and a consent mechanism. Overall, the platform demonstrates a mature digital presence with strong business credibility and user trust.

T

TixforGigs

tixforgigs.de

70

TixforGigs is an online ticketing platform specializing in event ticket sales, artist promotion, and venue information primarily targeting the German-speaking market. The website offers a comprehensive event search and ticket purchasing experience with user account management and security features such as captcha and two-factor authentication. The platform demonstrates a moderate to good level of digital maturity with a modern tech stack including jQuery and Knockout.js, and a responsive design optimized for mobile devices. Security posture is adequate with HTTPS enforced and captcha protections, though some security headers are missing, suggesting room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences, though the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers and improving transparency around business contact information.

N

naturstrom AG

naturstrom.de

51

Naturstrom AG operates as a renewable energy provider in Germany, offering green electricity, green gas, heating solutions, and electric mobility services. The company positions itself as a leading supplier in the sustainable energy sector with a broad product portfolio aimed at private customers and businesses committed to the energy transition. The website reflects a mature digital presence with a professional design and clear messaging focused on sustainability and customer engagement. Technically, the website is built on TYPO3 CMS and integrates modern analytics and consent management tools such as Matomo, Etracker, and Cookiebot. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. Hosting is provided by Schlundtech, a reputable German hosting provider, supporting the site's performance and reliability. From a security perspective, the site enforces HTTPS and employs consent-based loading of tracking scripts, respecting user privacy and GDPR requirements. However, explicit security policies and incident response contacts are not published, which could be improved to enhance transparency and trust. No critical vulnerabilities or suspicious patterns were detected in the analysis. Overall, Naturstrom.de presents a trustworthy and professional online presence with strong privacy compliance and a solid technical foundation. Strategic improvements in security policy disclosure and contact information could further strengthen its credibility and user trust.

F

fritz-kola

fritz-kola.de

65

Fritz-kola is an independent German beverage company established in 2003, specializing in high-quality soft drinks with a unique taste. The website reflects a medium-sized retail business with consistent branding and a focus on product quality. Technically, the site employs modern JavaScript technologies, including Usercentrics for consent management, Google Analytics for traffic analysis, and Sentry for error tracking, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNS security and security headers. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy or terms of service. Overall, the site is professional and trustworthy but could improve transparency and security practices.

B

Bundesstiftung Baukultur

bundesstiftung-baukultur.de

49

Bundesstiftung Baukultur is a German independent foundation dedicated to promoting architectural culture and quality in the built environment. Established in 2007, it operates as a non-profit entity offering publications, events, competitions, and networking opportunities to professionals, students, and the public. The website is well-structured, professionally designed, and provides comprehensive information about its mission, activities, and contact details. Technically, the site runs on TYPO3 CMS, uses Matomo analytics with privacy-conscious settings, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain and website appear legitimate and trustworthy, serving a government-related non-profit sector in Germany.

F

Forum Musikwirtschaft

forum-musikwirtschaft.org

61

Forum Musikwirtschaft is a professional umbrella organization representing six major associations within the German music industry sector. The website serves as an informational platform to communicate the interests and activities of these associations. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills, indicating a moderate level of technical maturity. The website is mobile optimized and uses HTTPS, ensuring secure communication. However, the absence of privacy and cookie policies, contact information, and detailed WHOIS data limits the overall trust and compliance posture. Security measures such as security headers are not evident, though some scripts indicate attempts to harden fetch and XHR requests. Overall, the site is professional and relevant to its target audience but would benefit from enhanced transparency and compliance documentation.

L

Live DMA

live-dma.eu

56

Live DMA is a well-established European non-profit network founded in 2012 that represents live music venues, clubs, and festivals across multiple countries. The organization focuses on strengthening the live music sector through cooperation, advocacy, and knowledge sharing. Their website reflects a professional and consistent brand image, providing information about their membership, projects, and tools such as mentorship programs and audience development resources. The target audience includes live music associations and event organizers in Europe. Technically, the website is built on WordPress with modern plugins and analytics integrations, hosted by OVH SAS. While the site is performant and mobile-optimized, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit incident response or security policy disclosures. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Overall, the website is trustworthy and professional, with a strong market position in the live music advocacy sector.

I

Interessengemeinschaft Veranstaltungswirtschaft e. V.

igvw.org

49

The Interessengemeinschaft Veranstaltungswirtschaft e. V. (IGVW) is a non-profit association representing the event industry across Germany, Austria, and Switzerland. The organization focuses on setting industry standards, public representation, education, and research within the event sector. Their website is professionally designed, content-rich, and targets industry professionals and associations in the DACH region. The business model centers on collaboration among industry stakeholders to promote quality and compliance standards. Technically, the website is built on WordPress using a modern tech stack including plugins for event management, downloads, and SEO optimization. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and content suggest legitimacy. Overall, the site presents a low risk profile with strong business credibility and good technical implementation. Recommendations include enhancing security headers, maintaining plugin updates, and improving WHOIS transparency to boost trust further.

B

Bundesstiftung Livekultur

bundesstiftung-livekultur.org

45

The Bundesstiftung Livekultur website represents a German non-profit cultural foundation dedicated to preserving and promoting live music culture, including pop, club, and festival scenes. The foundation focuses on securing cultural spaces and developing funding concepts to sustain live culture as a valued part of Germany's cultural landscape. The website content is professionally presented in German, targeting cultural actors, event organizers, and the general public interested in live music culture. The foundation appears to have been established around 2021, consistent with the website's content and publication dates. Technically, the website is built on WordPress 6.8.3 with common plugins such as Yoast SEO and jQuery. The site is accessible, mobile-optimized, and includes structured data for SEO enhancement. However, some technical improvements are recommended, including the implementation of security headers and a cookie consent mechanism to enhance privacy compliance. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit security policies or incident response contacts. The WHOIS data is unavailable or malformed, likely due to privacy protection, which is common for non-profit organizations. No suspicious indicators or vulnerabilities were found in the content or technical setup. Overall, the site demonstrates a solid security posture but could improve transparency and compliance with privacy regulations. The overall risk assessment is low, with the site appearing legitimate and professionally maintained. Strategic recommendations include adding cookie consent, security headers, clear contact information for security incidents, and publishing terms of service and security policies to enhance trust and compliance.

C

clubsAREculture

clubsareculture.de

40

clubsAREculture is a German-based cultural advocacy platform dedicated to supporting music clubs as vital cultural spaces. The website provides news, studies, newsletters, and event information related to club culture and live music, targeting cultural activists, policymakers, and the general public interested in the preservation and promotion of club culture. The platform operates as a small non-profit entity within the media sector, focusing on advocacy and information dissemination. Technically, the website is built on WordPress 6.8.3, utilizing a modern tech stack including jQuery, Modern Events Calendar Lite, and the Ashe theme. The hosting appears to be managed by Your-Server.de, with a moderate performance profile and good mobile optimization. SEO and accessibility are basic to good, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and updated software versions but lacks explicit security headers and a vulnerability disclosure policy. No cookie consent mechanism was detected, which is a compliance gap given GDPR relevance. Contact information is limited to a contact form, with no explicit emails or phone numbers found. Social media presence is active across major platforms. Overall, the website is functional, professional, and trustworthy within its niche but would benefit from enhanced security practices, privacy compliance improvements, and more transparent contact information to strengthen user trust and regulatory adherence.

A

Ad Shop AB

glasmonter.se

53

Glasmonter.se is an established Swedish e-commerce business specializing in the sale of glass showcases and cabinets primarily targeting professional customers such as companies, schools, museums, and private individuals valuing high quality and functional products. The company operates under Ad Shop AB and has been active since 2003, offering delivery and assembly services alongside standard and custom products. The website demonstrates a solid market position with trust indicators including a high credit rating and a professional online presence. Technically, the site is built on ASP.NET Web Forms with common JavaScript libraries and includes modern tracking and marketing tools with GDPR-compliant consent mechanisms. Security posture is adequate with HTTPS and reCAPTCHA usage, though it lacks advanced security headers and published security policies. The absence of WHOIS data for the domain is a notable concern that impacts trustworthiness and should be investigated further. Overall, the site provides a good user experience with clear business information and no adult or questionable content.

Skrivbord.se is a Swedish e-commerce website specializing in the sale of office desks, including height-adjustable and fixed desks for home and workplace offices. The site leverages the Shopify platform, integrating modern payment methods such as Klarna and Apple Pay, and targets consumers and businesses in Sweden seeking quality office furniture. The website is professionally designed with good content quality and user experience, optimized for mobile devices and SEO. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS and secure payment integrations, but lacks explicit security headers and a visible cookie consent mechanism. Contact information including phone and physical address is provided, enhancing business credibility.

L

Home

lunchbox.schule

44

The website lunchbox.schule is an online platform designed to facilitate the ordering of healthy lunch menus and snack packages for school students. It targets schools and their students or parents, providing a convenient online booking system that requires yearly registration due to data privacy considerations. The platform is niche-focused within the education sector, aiming to promote healthy eating habits in schools. The website is powered by TYPO3 CMS and incorporates JavaScript libraries including jQuery and custom QR code scanning scripts, indicating a moderate level of technical maturity. The presence of Matomo analytics shows an intent to monitor user interactions, although privacy compliance measures such as cookie or privacy policies are absent. Security posture is moderate; the site uses HTTPS and secure form submission but lacks visible security headers and anti-CSRF protections. No WHOIS registrant data is publicly available due to TLD restrictions, but the domain appears legitimate and consistent with the business purpose. Overall, the site is functional and safe but would benefit from enhanced privacy disclosures and security hardening.

The domain www.medtargetsystem.com is currently unregistered or inactive as indicated by the absence of WHOIS registration data and the complete lack of website content. No metadata, scripts, forms, or business information are present, making it impossible to assess the company's operations, market position, or services. The website is effectively non-existent, providing no value to users or stakeholders. From a technical perspective, the absence of any HTML content or metadata indicates no active infrastructure or digital presence. No technologies, frameworks, or hosting details can be identified. The lack of HTTPS or security headers further confirms the domain is not operational. Security posture is minimal due to the lack of any active website or domain registration. There are no vulnerabilities to assess, but the absence of HTTPS and security best practices is a critical issue. No privacy or compliance policies are present, and no contact or incident response information is available. Overall, the domain appears abandoned or unregistered, representing a high risk for trust and legitimacy. Strategic recommendations include registering the domain properly, deploying a secure website with full compliance and security policies, and establishing clear business and contact information to build credibility.

S

Sveučilišni računski centar (Srce)

srce.hr

54

Sveučilišni računski centar (Srce) is a central academic infrastructure institution affiliated with the University of Zagreb, providing comprehensive computing, networking, identity management, data repository, and digital education services to the Croatian academic and research community. The website reflects a mature digital presence with a professional design, clear navigation, and extensive content tailored to its target audience of students, researchers, and academic institutions. Technically, the site is built on Drupal 9 with modern libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS, cookie consent, and anti-bot measures, though explicit security headers could be enhanced. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness, despite the WHOIS data being privacy protected, which is justified for this type of institution.

Sherpas TECH, s.r.o. is a Czech-based technology and marketing company specializing in retention marketing, email marketing strategies, CRM data engineering, and advanced customer analytics. The company targets B2B clients seeking to integrate technology with marketing to improve campaign performance and customer engagement. Their website reflects a professional and consistent brand image, showcasing client references and a clear service portfolio. Technically, the site employs modern tools such as Google Analytics, Google Tag Manager, and Google reCAPTCHA Enterprise, ensuring a secure and data-driven user experience. Security posture is strong with HTTPS and form protections, although explicit security policies and incident response information are absent. Overall, the website is well-structured, GDPR-compliant with cookie consent mechanisms, and provides multiple contact channels, supporting trust and credibility.

O

OKsystem a.s.

checkbot.com

74

Checkbot is a specialized software solution developed by OKsystem a.s. for real-time monitoring and management of Yaskawa robotic production lines. The product offers comprehensive features including remote monitoring, automated backups, predictive maintenance, troubleshooting alerts, and customizable dashboards. The business model is subscription-based SaaS with options for on-premise deployment, targeting manufacturing companies and automation professionals globally. The website demonstrates a strong market position supported by client testimonials, ISO certifications, and integration within the Yaskawa ecosystem. Technically, the site is built with modern web standards, employs Google Analytics and Tag Manager for analytics, and uses reCAPTCHA for form security. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS, penetration testing claims, and encrypted communications, though it lacks some explicit security headers and published incident response contacts. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. However, the absence of WHOIS domain registration data reduces domain trustworthiness and should be investigated. Overall, Checkbot presents as a professional, secure, and credible industrial software offering with room for minor security and transparency improvements.

JSB realitní is a small Czech Republic-based real estate company specializing in brokerage services for residential and commercial properties, including sales, rentals, and problematic property solutions such as debt and foreclosure management. The company also operates a related construction business for property renovations. The website is professionally designed with clear navigation and relevant content targeting local clients in Prague and surrounding areas. However, the absence of WHOIS data and security policies reduces trustworthiness. Technically, the site uses common web technologies like jQuery and Bootstrap but lacks visible HTTPS and security headers, which are critical for secure operations. No privacy or cookie policies are present, indicating compliance gaps. Overall, the business appears legitimate but would benefit from improved security and compliance measures.

Č

Česká gymnastická federace

gymfed.cz

49

Česká gymnastická federace is the official national governing body for gymnastics sports in the Czech Republic, providing comprehensive information, event calendars, results, and resources for multiple gymnastics disciplines including artistic gymnastics, TeamGym, aerobics, acrobatic gymnastics, trampoline, parkour, and more. The website targets athletes, coaches, referees, clubs, and gymnastics enthusiasts, offering news updates, directories, and an e-shop for gymnastics equipment. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, Flickity, and Google Analytics, with good mobile optimization and accessibility features. However, the absence of explicit privacy and cookie policies and lack of security headers indicate areas for improvement in privacy compliance and security posture. The WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of official contact details and social media links supports the site's credibility. Overall, the site is professional, content-rich, and trustworthy within its domain.

A

Altisima software SE

dorsys.cz

46

Dorsys.cz is a professional website representing Altisima software SE's access control system offering tailored solutions for schools, hotels, residential buildings, and attendance tracking. The company positions itself as a niche technology provider with agile development capabilities, targeting businesses and institutions primarily in the Czech Republic. The website demonstrates a modern technical infrastructure using Vue.js and Quasar Framework, integrated with common analytics and retargeting tools. Security posture is moderate with cookie consent implemented but lacks published privacy policies and explicit security frameworks. Contact information is clearly provided, enhancing business credibility. Overall, the site is well-designed and functional but would benefit from enhanced privacy and security disclosures.

A

Altisima software SE

jidelnasql.cz

10

JídelnaSQL is a specialized software solution developed by Altisima software SE, focused on managing food service operations including diner evidence, meal ordering, payment processing, and point-of-sale functionalities. The company targets gastronomic businesses of various sizes, including schools and commercial entities, offering modular and scalable software solutions. The website demonstrates a professional digital presence with clear product offerings and contact channels, supported by a modern technical stack based on Vue.js and PostgreSQL. Security posture is moderate with cookie consent implemented but lacks explicit privacy and security policies. WHOIS data confirms domain legitimacy and consistent business registration. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

A

Altisima software SE

altisima.cz

46

Altisima.cz is a Czech software supplier specializing in software solutions for catering, stock management, access control, and attendance systems. They provide comprehensive service support, implementation, training, integration, customization, and development services. Their products include JídelnaSQL, Gekon, and Dorsys.

W

Wiky s.r.o.

b2bwiky.cz

57

Wiky s.r.o. operates a Czech-language wholesale B2B e-commerce platform specializing in toys and stationery products. With a 30-year tradition as a direct importer, the company targets business customers seeking quality products for resale. The website presents a professional and consistent brand image, providing detailed contact information and compliance with GDPR through privacy and cookie policies. Technically, the site uses legacy JavaScript libraries such as jQuery 1.11.1 and includes common UI plugins like select2 and bxSlider. While the site is accessible and functional, it lacks modern security headers and uses outdated libraries, which could pose security risks. The absence of WHOIS data reduces domain trustworthiness, but the overall business presentation and contact transparency support legitimacy. No signs of adult or questionable content are present, and the site is optimized at a basic level for mobile and accessibility.

S

Sense4code s.r.o.

scormium.com

65

Scormium is a Czech-based company operating under Sense4code s.r.o., providing a modern, scalable learning management system (LMS) and learning experience platform (LXP) designed for corporate training and customer education. The platform emphasizes personalized, multimedia-rich content delivery, actionable reporting, and seamless integration with enterprise systems. It holds recognized certifications such as ISO 27001, ISO 9001, and GxP validation, underscoring its commitment to security and compliance. The company is part of the OKsystem Group, enhancing its market credibility. Technically, the website is built on Webflow CMS and leverages modern web technologies including Google Tag Manager, Facebook Pixel, Bing Ads, and LinkedIn Insight Tag for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a comprehensive cookie consent mechanism ensuring GDPR compliance. Hosting and security are supported by Cloudflare services, including bot management. Security posture is strong with HTTPS enforced, penetration testing mentioned, and adherence to international standards. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No explicit incident response or vulnerability disclosure information is provided, which could be improved to enhance trust. Overall, Scormium presents as a professional, trustworthy educational technology provider with robust technical and security foundations. Strategic recommendations include improving domain registration transparency, publishing incident response contacts, and enhancing security header implementation to further strengthen its security posture.

O

OKsystem a.s.

okskoleni.cz

10

OKškolení, operated by OKsystem a.s., is a well-established certified training center specializing in authorized IT courses including Microsoft, Cisco, and Linux. The company targets IT professionals, corporate clients, and government institutions, offering both standard and tailored training solutions. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports their market position as a trusted education provider in the Czech Republic. The site integrates multiple marketing and analytics tools with user consent mechanisms, demonstrating compliance with GDPR and modern privacy standards. Security posture is solid with HTTPS and reCAPTCHA protections, though there is room for improvement in HTTP security headers and explicit security policies. Overall, the domain and website present a credible and professional business with strong trust indicators.

O

OKsystem a.s.

okmzdy.cz

10

OKsystem a.s. operates the website www.okmzdy.cz, offering the OKmzdy accounting software focused on basic payroll processing for businesses ranging from small entrepreneurs to large companies with hundreds of employees. The company is transitioning customers to a modern HR solution called OKbase, reflecting a strategic shift to updated technology and enhanced security. The website provides detailed information about this transition, including timelines, FAQs, and contact points for support. Technically, the website employs modern web standards with responsive design, uses JavaScript frameworks, and integrates Google Tag Manager for analytics and marketing. The site is well-structured with clear navigation and includes GDPR-compliant cookie consent mechanisms. However, no advanced security headers were detected, and no explicit security or incident response policies are published. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security policies or vulnerability disclosure information. The absence of WHOIS data reduces domain registration transparency, but the website content and contact details support legitimacy. Overall, the site presents a professional and trustworthy front with room for improvement in security disclosures. Strategically, the company should enhance its security posture by publishing clear security policies, adding security headers, and providing incident response contacts. Maintaining GDPR compliance and transparent communication during the software transition will support customer trust and regulatory adherence.

O

OKsystem a.s.

checkbot.cz

69

Checkbot is a specialized software solution developed by OKsystem a.s. for real-time monitoring and management of Yaskawa industrial robots. The platform offers comprehensive features including remote access, automated backups, predictive maintenance, alarm notifications, and detailed analytics, targeting manufacturing and automation professionals. The company maintains strong partnerships with major industrial players and emphasizes continuous improvement and security compliance. The website is professionally designed, mobile-optimized, and provides extensive client references and support resources. However, the absence of WHOIS registration data for the domain www.checkbot.com raises concerns about domain legitimacy that should be addressed. The technical infrastructure leverages modern web technologies, Google Analytics, and reCAPTCHA for security and user tracking, with GDPR-compliant privacy and cookie policies in place. Security posture is solid with HTTPS and penetration testing mentioned, but could be improved by adding explicit security headers and incident response disclosures.

O

OKsystem a.s.

okbase.cz

47

OKsystem a.s. operates the OKbase platform, a comprehensive HR digitalization system targeting companies seeking to streamline HR processes such as attendance, payroll, personnel management, and catering. The company holds a strong market position in the Czech Republic and Slovakia with over 350 large implementations and more than 330,000 users. The website reflects a mature, professional B2B SaaS business model with additional outsourcing services. Technically, the site employs modern JavaScript frameworks, integrates multiple analytics and advertising tools, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA protections, though explicit security headers and policies could be improved. Overall, the site is well-designed, mobile-optimized, and trustworthy, though the absence of WHOIS data slightly reduces domain trust. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

C

CancanIT

cancanit.com

63

CancanIT is a specialized online certification provider focused on professional web developers. Established in 2010, it offers a broad range of certification exams covering front-end and back-end web technologies, including HTML5, CSS3, JavaScript, PHP, MySQL, and more. The company targets freelance workers, job seekers, and career starters aiming to validate their skills and improve marketability. The website is well-structured with clear navigation and professional branding, supporting a positive user experience and trustworthiness. Technically, the site employs modern web technologies such as Bootstrap, Font Awesome, and jQuery, hosted likely via GoDaddy infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain locks in place, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with visible privacy and cookie policies and a consent banner, but no detailed GDPR compliance indicators or data protection officer information. Overall, the security posture is adequate for the business type, with no critical vulnerabilities detected. The domain WHOIS data is consistent and supports legitimacy with a long registration history and no privacy protection. The site does not employ tracking or advertising technologies, indicating a privacy-conscious approach. The content is safe for general audiences, focused on education and certification without any adult or questionable material. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing incident response contacts, and improving privacy compliance transparency to strengthen trust and security culture.

P

Predsjednik Republike Hrvatske - Zoran Milanović

predsjednik.hr

53

The website represents the official online presence of the President of the Republic of Croatia, Zoran Milanović. It serves as a government portal providing official information, news, announcements, and contact mechanisms for citizens and stakeholders. The site is positioned as a trusted source of governmental communication and public service. Technically, the site is built on WordPress CMS with common plugins such as Yoast SEO and integrates Google Analytics and Facebook SDK for analytics and social media engagement. The hosting is managed by CARNET, a reputable Croatian academic network, which aligns with the governmental nature of the site. Security posture is adequate with HTTPS enforced and use of reCAPTCHA on forms; however, some security headers are missing and no explicit security or vulnerability disclosure policies are present. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve in privacy transparency and security hardening.

S

SMART Design | Gregic Advisory

digital-adviser.eu

49

SMART Design | Gregic Advisory operates as a specialized provider of advanced SMART web solutions based in Zagreb, Croatia. The company offers a range of services including customized web shops, web pages, and web applications designed with a focus on performance, security, and user experience. Their market position is that of a leader in SMART web solutions, targeting businesses and professionals seeking innovative digital presence. The website reflects a professional and modern approach with strong branding and client references including government entities. Technically, the site is built on WordPress using Elementor and OceanWP theme, integrating modern analytics and marketing tools such as Google Analytics, Hotjar, and HubSpot. The site is GDPR compliant with a detailed cookie consent mechanism and privacy policy. Security posture is good with HTTPS enforced and secure forms, though explicit security headers and incident response policies are not evident. The domain WHOIS data is missing, which raises some concerns about domain registration legitimacy, but the website content and business information support a credible operation. Overall, the site demonstrates a mature digital infrastructure with room for security enhancements and domain registration verification.

I

IQM Destination

iqmdestination.com

64

IQM Destination is a medium-sized project focused on integrated quality management systems for tourism destinations. It aims to enhance service quality, provide education for tourism workers, and strengthen destination branding through a comprehensive, data-driven approach involving stakeholders and guests. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers and policies could improve resilience. The domain registration is consistent with the business history, supporting legitimacy. Overall, the site presents a trustworthy and professional image in the hospitality sector.

I.M. Matters from ACP is a professional medical news and information website targeting internal medicine physicians. It is affiliated with the American College of Physicians (ACP), providing news, clinical newsletters, and updates on medical policies and practices. The website serves as a trusted source for healthcare professionals with a focus on internal medicine. Technically, the site uses a modern technology stack including jQuery, Google Tag Manager, Google Analytics, and various marketing automation and tracking tools. Hosting is via Amazon AWS DNS infrastructure, and the site is mobile optimized with good navigation and content structure. Security posture is solid with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Business credibility is supported by ACP affiliation and award recognition. Overall, the site is professional, trustworthy, and well maintained.

A

American College of Physicians

acpjournals.org

65

The American College of Physicians (ACP) operates the ACP Journals website, a professional platform hosting multiple medical journals including the Annals of Internal Medicine and Clinical Cases. The site serves physicians, healthcare professionals, and researchers by providing peer-reviewed medical content and educational resources. It holds a strong market position as a leading publisher in internal medicine with a large audience and a subscription-based business model complemented by open access content. Technically, the website employs modern web technologies, including Google Tag Manager, Google Analytics, and Cloudflare services, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement, secure forms, and script nonce usage, though explicit security headers and cookie consent mechanisms could be improved. The absence of WHOIS data due to privacy protection is typical for such organizations and does not detract from the site's legitimacy. Overall, the website is professional, trustworthy, and well-maintained, with minor recommendations for enhanced privacy compliance and security transparency.

Pěkné Bydlení is a Czech online magazine operated by Časopisy pro volný čas s.r.o., focusing on home living, interior design, construction, garden care, and lifestyle inspiration. The website serves a target audience of homeowners and individuals interested in improving their living spaces. It operates a content publishing business model supported by advertising and magazine subscriptions. The company is positioned as an established media outlet within the Czech Republic, offering quality content and consistent branding. Technically, the website is built on WordPress 4.7.3 with integration of jQuery, Google Publisher Tags, Google Analytics, and Seznam retargeting services. It uses the Foundation CSS/JS framework for responsive design and is mobile optimized with good navigation and SEO practices. Performance is moderate, with room for improvement in accessibility and modernization of the CMS. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but it uses an outdated WordPress version which poses potential security risks. Advanced security headers are missing, and no explicit security or incident response policies are found on the site. The privacy policy is present and GDPR compliant, enhancing trustworthiness. Overall, the website is safe, professional, and trustworthy with moderate security posture. Strategic improvements in CMS updates and security headers would enhance its security and compliance standing.

F

Finanční správa České republiky

finfoveskole.cz

61

The website finfoveskole.gov.cz is an official Czech government educational portal dedicated to supporting financial literacy and tax education for students and teachers. It is a collaborative project between the Financial Administration and Customs Administration of the Czech Republic, providing comprehensive information and resources related to taxes and customs. The site is well-structured, professionally designed, and targets primarily educational institutions and individuals seeking knowledge in financial matters. The presence of official government domains and partner links reinforces its legitimacy and authoritative position in the market. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and integrates Cookiebot for cookie consent management and Matomo for privacy-conscious analytics. The site is mobile optimized, accessible, and demonstrates good SEO practices. However, there is no detected CMS or explicit hosting provider information. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and explicit security or incident response policies publicly available suggests areas for improvement. The lack of WHOIS data is notable but likely due to registry policies for government domains rather than malicious intent. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving transparency around contact information for security matters.

Y

Yesme s chutí FOOD TRUCK

yesme.cz

45

Yesme s chutí FOOD TRUCK is a small Czech hospitality business specializing in food truck and catering services, targeting both public events and corporate clients primarily in Prague. The website provides basic information about upcoming events and catering offerings, with clear contact details and a cookie consent mechanism. Technically, the site uses older but functional technologies such as Bootstrap 3.4 and jQuery, with a CMS platform identified as inPage. Security posture is moderate with no detected blocking or WAF, but lacks advanced security headers and a privacy policy, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate for a small local business.

E

eEducation Austria

eeducation.at

64

eEducation Austria is a well-established non-profit organization dedicated to advancing digital education across Austrian schools. The website serves as a comprehensive platform offering digital competence models, educational resources, tools, and community networking to support educators and institutions in their digital transformation journey. The organization targets schools and educators primarily within Austria, positioning itself as a key player in the national digital education landscape. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, providing a responsive and user-friendly experience. While the site is well-structured and content-rich, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security-wise, HTTPS is enforced, but additional security headers are not evident, and no explicit incident response or security policies are published. Overall, the website demonstrates a solid business credibility and technical foundation but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

M

mica BUFFET & CATERING

mica-catering.at

42

mica BUFFET & CATERING is a small hospitality business specializing in buffet and catering services primarily for schools and educational institutions in the Linz region of Austria. The company emphasizes fresh, regionally sourced ingredients and seasonal menus, operating at multiple school locations. The website is built on TYPO3 CMS with a moderate technical stack including jQuery and Unslider, indicating a stable but somewhat dated infrastructure. The site is accessible, uses HTTPS, and employs Piwik analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced but lacks advanced security headers and modern JavaScript libraries. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the business presents a professional and trustworthy online presence with room for technical and security improvements.