Security Directory

V

Volkswagen Užitkové vozy

vw-uzitkove.cz

59

Volkswagen Užitkové vozy is the official Czech Republic website for Volkswagen commercial vehicles, offering a comprehensive portfolio of new vehicle models, configurators, financing options, and after-sales services including servicing and accessories. The site targets both business customers and individual buyers interested in commercial vehicles, positioning itself as a key player in the Czech automotive transportation sector. The website demonstrates strong brand consistency with official Volkswagen branding and links to related Volkswagen services and partners. Technically, the site is built on modern frameworks such as Next.js and React, providing a responsive and accessible user experience with good SEO practices. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though some security headers are not detected and no explicit security or incident response policies are published. Privacy compliance is well addressed with visible cookie consent and privacy policy pages. The absence of WHOIS data reduces domain trustworthiness, but the overall professional presentation and official branding mitigate concerns. Strategic recommendations include improving security header implementation, publishing a security policy, and enhancing transparency around incident response.

R

Rodinné centrum BABOČKA

rcbabocka.cz

58

Rodinné centrum BABOČKA is a small family-oriented center based in Prague, Czech Republic, focused on providing educational and recreational activities for children aged from 6 months to 8 years and their parents. Established since 2009, it offers a variety of services including a preschool program (Školička), diverse courses, parenting academy, coaching, events, family stays, and birthday celebrations. The center targets families seeking a safe, friendly, and developmentally supportive environment for their children. Technically, the website is built on the Webnode CMS platform, hosted via Amazon Cloudfront CDN, and uses modern web technologies such as HTML5, CSS3, and JavaScript. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal privacy or security policies. The WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces transparency but is consistent with a small non-profit entity. Overall, the website is professional, content-rich, and safe for general audiences.

G

GoOut

goout.net

76

GoOut.net is an established online platform specializing in cultural event listings and ticket sales, primarily serving the Czech Republic and surrounding regions. Founded in 2010, it offers users comprehensive information about concerts, festivals, theatre, exhibitions, and parties, positioning itself as a key player in the regional cultural media sector. The website provides inspiration and ticketing services for various cultural venues including theatres, cinemas, galleries, clubs, and museums. Technically, the site leverages modern JavaScript frameworks such as Nuxt.js, integrates reputable third-party services for analytics and advertising, and employs Cloudflare for DNS management. The presence of a detailed cookie consent mechanism powered by Cookiebot demonstrates a commitment to privacy compliance and user consent management. Security-wise, the site enforces HTTPS and domain registration protections but could improve by enabling DNSSEC and publishing explicit security policies. Overall, the website is professionally designed, user-friendly, and trustworthy, with a good balance of content quality and technical implementation.

K

AdZilla: The Ad-Eating Dino of Solana

karlovarsky-kraj.cz

54

AdZilla is a small-scale cryptocurrency project centered around a Solana-based meme coin featuring a dinosaur mascot that 'eats' online ads. The website provides clear instructions for users to create a wallet, acquire Solana tokens, and swap them for the ADZILLA token via decentralized exchanges. The business model focuses on engaging both crypto and non-crypto users through creative advertising campaigns and token ecosystem participation. The site is moderately well designed with good mobile optimization and user experience, but lacks comprehensive privacy, cookie, and security policies. No contact information or formal business credentials are provided, which limits trust and credibility. Technically, the site uses standard web technologies and integrates with popular Solana wallets and exchanges, but lacks advanced security headers and HTTPS verification details.

M

město Tábor

visittabor.eu

50

The website www.visittabor.eu serves as the official tourism portal for the city of Tábor, Czech Republic. It provides comprehensive information about the city's attractions, culture, accommodation, sightseeing, gastronomy, and practical visitor details. The site targets tourists and visitors interested in exploring Tábor and the South Bohemian region. The business model is government-supported tourism promotion, positioning itself as a key regional tourism information source with official city branding and certifications such as A.T.I.C. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and tracking tools like Google Analytics and Adform. It uses the Nette Framework CMS inferred from form structures and AJAX usage. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate, with room for improvement in security headers and accessibility. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are missing, and there is no explicit security policy or incident response information published. The use of third-party tracking scripts is transparent with user consent. Overall, the security posture is good but could be enhanced with additional headers and documented policies. The overall risk assessment is low, with the site demonstrating legitimacy through official contact information, consistent branding, and certifications. The lack of WHOIS data is due to registry privacy policies and does not detract from trustworthiness. Strategic recommendations include implementing security headers, publishing a security policy, enhancing accessibility, and adding a vulnerability disclosure mechanism to further strengthen security and compliance.

T

THINline s.r.o.

websynergy.cz

66

WebSynergy, operated by THINline s.r.o., is a Czech-based technology service provider specializing in custom web design, e-commerce solutions, and digital marketing. With over 20 years of experience and more than 500 projects completed, the company targets businesses seeking modern, responsive websites and effective online marketing strategies. Their offerings include proprietary CMS technology, hosting services, and comprehensive website management. The website reflects a professional and trustworthy business with clear contact information and client testimonials, positioning them as a reputable player in the Czech web services market. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Google Analytics, reCAPTCHA v3, and Visual Website Optimizer for marketing and analytics purposes. The site is hosted on a Czech hosting provider and uses a proprietary CMS platform. Performance and mobile optimization are excellent, with good SEO and accessibility features. However, some security headers are missing, and no explicit security policy or incident response information is published. Security posture is solid with HTTPS enforced and secure form handling via reCAPTCHA, but improvements are recommended in HTTP security headers and transparency around security policies. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned privacy policies. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy. Overall, WebSynergy demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

M

Mailchimp

mailchi.mp

80

Mailchimp is a leading marketing automation and email marketing platform, serving primarily small to medium businesses and marketers. Owned by Intuit Inc., it offers a SaaS-based subscription and freemium business model with a strong market position as a top email marketing solution. The platform leverages AI and real-time behavioral data to enhance customer conversion and engagement. The website reflects a mature digital infrastructure with integrations of advanced analytics and marketing tools, demonstrating high digital maturity and performance. Security posture is strong with HTTPS enforcement, security headers, and certifications such as SOC 2 Type II and ISO 27001, although minor improvements like enabling DNSSEC and publishing a security.txt file could enhance security transparency. Overall, the website is professional, privacy compliant, and trustworthy, supporting Mailchimp's reputation as a reliable enterprise-grade service.

T

Tino Digital Agency

tino.design

67

Tino Digital Agency is a professional UI/UX design and web/mobile development agency primarily serving clients in the USA market, with a focus on fintech, healthcare, energy, and crypto sectors. The company offers comprehensive services including research and strategy, UX/UI design, and full-cycle development. Their portfolio includes notable clients and projects, supported by multiple industry awards and high client satisfaction ratings. Technically, the website is built on modern frameworks such as Next.js and React, hosted by Hosting Ukraine LLC, and optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the business demonstrates strong credibility and professionalism, though privacy compliance and security transparency could be enhanced.

W

WhitePress sp. z o.o.

whitepress.com

64

WhitePress sp. z o.o. operates an international content marketing platform that automates the creation, publishing, and analysis of content for marketers, publishers, and copywriters. The platform supports SEO and link building across thousands of portals worldwide and offers native copywriting services to ensure content quality. The website is professionally designed, supports multiple languages, and maintains active social media channels, positioning WhitePress as a reputable player in the digital marketing technology sector. Technically, the website uses modern JavaScript, Google Tag Manager, and Google Analytics for tracking and performance monitoring. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some accessibility features could be improved, and explicit cookie consent mechanisms are not detected. From a security perspective, the site enforces HTTPS and shows no visible vulnerabilities or exposed sensitive data. Security headers are not explicitly detected in the provided data, and no incident response or security policy information is published. The WHOIS data is unavailable, which limits domain registration transparency but does not detract from the site's professional appearance and trust signals. Overall, WhitePress presents a low-risk profile with a solid business model and technical foundation. Strategic improvements in security headers, privacy compliance transparency, and accessibility would enhance its security posture and user trust.

D

Dobrovolný svazek obcí Šlapanicko

dsoslapanicko.cz

55

Dobrovolný svazek obcí Šlapanicko is a voluntary association of 27 municipalities in the Czech Republic focused on regional cooperation and public infrastructure projects, particularly cycling path development and waste management. The organization operates as a non-profit entity serving local communities with transparent contact information and EU co-financed projects, positioning itself as a trusted regional government partner. The website is built on the Vismo CMS platform, utilizing modern JavaScript libraries including Vue.js and Mustache.js, and integrates Google services such as reCAPTCHA v3 and Translate for enhanced user experience and security. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its target audience. Security posture is solid with HTTPS enforced and spam protection on forms, though formal security policies and incident response contacts are absent. Privacy compliance is basic with cookie policy present but lacking explicit consent mechanisms. Overall, the domain registration is consistent with the business age and purpose, indicating a legitimate and trustworthy online presence.

G

Girsberger Mountain Rescue Technology

girsberger-elektronik.ch

62

Girsberger Mountain Rescue Technology is a specialized Swiss company focused on providing innovative mountain rescue and avalanche safety solutions. Their offerings include training systems and products designed to enhance safety in alpine environments. The company targets professionals and organizations involved in mountain rescue and alpine safety, positioning itself as a niche technology provider in this sector. The website is built on the Wix platform, leveraging modern JavaScript technologies and error monitoring tools, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enabled and no exposed sensitive data, though there is room for improvement in security headers and privacy compliance. Overall, the website is professional and trustworthy but lacks critical compliance documents such as privacy and cookie policies.

B

Bell Textron Inc.

bellflight.com

67

Bell Textron Inc. is a leading manufacturer of vertical lift aircraft, including commercial and military rotorcraft. The company has a rich history spanning approximately 90 years and operates as a subsidiary of Textron Inc. Their website showcases a comprehensive portfolio of products and services, including innovative rotorcraft technologies, training, maintenance, and support. The site targets aviation professionals, military clients, and commercial customers globally. Technically, the website employs modern JavaScript frameworks, multimedia content, and integrates with marketing and analytics platforms such as Google Tag Manager and HubSpot. The hosting infrastructure leverages Akamai CDN and service workers for performance optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional presentation and corporate affiliations. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing incident response contacts to further strengthen security transparency.

O

Ortovox

ortovox.com

62

Ortovox Sportartikel GmbH is a well-established German company specializing in outdoor equipment and apparel, particularly for mountain sports and safety. Founded in 1980 by Gerald Kampel, the company targets outdoor enthusiasts and safety-conscious consumers with a retail business model. The website is professionally designed, mobile-optimized, and provides clear contact information and social media presence, indicating a mature digital footprint. Technically, the site uses modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, supporting moderate user tracking and marketing efforts. Security posture is generally good with HTTPS enforced, though explicit security headers are not detected, and no public security or incident response policies are found. The WHOIS data for the domain is missing, which raises some concerns about registration transparency but does not detract significantly from the overall legitimacy given the professional web presence. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust.

T

TYROMONT Alpin Technik GmbH

tyromont.com

39

TYROMONT Alpin Technik GmbH is a specialized manufacturer and trader of alpine rescue equipment with a history spanning approximately 70 years. The company serves a global clientele including mountain rescue, ski patrol, air rescue, and height rescue organizations. Their website presents a professional and comprehensive product catalog, clear contact information, and relevant business documentation such as terms of business and data protection policies. Technically, the website employs modern JavaScript libraries like jQuery and Flickity, and uses Google Analytics with consent-based loading. The site is mobile-optimized and well-structured, providing a good user experience. However, the absence of WHOIS registration data for the domain www.tyromont.com is a notable inconsistency that impacts domain trustworthiness. Security headers are not visibly implemented, and no explicit cookie consent mechanism is present, which are areas for improvement. Overall, the website is professional and trustworthy from a business perspective but could enhance its security posture and privacy compliance.

K

Kohlbrat & Bunz GmbH

kohlbratbunz.com

57

Kohlbrat & Bunz GmbH is a small, family-owned Austrian company established in 1930 specializing in manufacturing medical, transport, and rescue equipment such as vacuum mattresses and rescue stretchers. Their products serve medical professionals, rescue teams, and animal healthcare sectors worldwide. The website is hosted on WordPress.com, leveraging modern CMS and Gutenberg blocks, providing a professional and mobile-optimized user experience. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the site is trustworthy but would benefit from improved security and compliance disclosures.

M

makandra GmbH

makandra.de

74

makandra GmbH is a German-based technology company specializing in custom software development, hosting, DevOps, AI consulting, and UI/UX design. The company positions itself as a reliable full-service agency focused on delivering high-quality, maintainable software solutions tailored to client needs. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions targeting business clients seeking bespoke software solutions. The company leverages modern technologies including Ruby on Rails, JavaScript, and integrates analytics tools such as Matomo and Google Analytics to monitor performance and user engagement. Privacy compliance is well addressed with a comprehensive privacy policy and an active cookie consent mechanism, indicating adherence to GDPR requirements. Security posture is strong with HTTPS enforced, CSRF protection, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, makandra GmbH demonstrates a solid business and technical foundation with a high level of professionalism and trustworthiness.

The website www.parkovanivbrne.cz serves as the official information portal for the new parking system in Brno, Czech Republic. It provides comprehensive details about parking zones, regulations, payment options, and mobility funds targeted at residents, subscribers, and visitors. The site is positioned as a municipal service platform, aiming to simplify parking management and user experience in the city. Technically, the site employs modern web technologies including HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, Smartlook, and Cookiebot for analytics and marketing purposes. The site is mobile optimized and features a cookie consent mechanism compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent to manage user privacy. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data reduces trust slightly but does not negate the official nature of the site. Overall, the website presents a professional, trustworthy, and user-friendly platform for parking information in Brno. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and providing clearer contact information to improve business credibility and user trust.

G

Galileo Corporation s.r.o.

smart-info.cz

39

Galileo Smart Info is a Czech Republic based service operated by Galileo Corporation s.r.o. that enables municipalities to communicate important announcements to their citizens via SMS and email. The platform targets local government officials and citizens, offering a free service with features such as message category selection and a mobile application for enhanced user experience. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the website uses modern web technologies including JavaScript and CSS, and integrates Google Analytics with IP anonymization to monitor traffic. Hosting is provided by Forpsi, a Czech hosting provider, which aligns with the local focus of the service. The website is mobile optimized and performs moderately well, though there is room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide a cookie consent mechanism, which are areas for improvement to enhance compliance and security posture. No vulnerability disclosure or incident response information is available, which could be added to improve transparency and trust. Overall, the website and service appear legitimate and trustworthy with a solid foundation. Strategic improvements in security headers, privacy compliance, and incident response transparency would further strengthen the platform's security and compliance standing.

I

International Commission for Alpine Rescue

alpine-rescue.org

66

The International Commission for Alpine Rescue (ICAR) is a globally recognized non-profit organization dedicated to alpine rescue and mountain safety. The website serves as a comprehensive platform for disseminating recommendations, event information, organizational details, and collaboration tools for mountain rescue professionals worldwide. The presence of numerous reputable partners and sponsors underscores its authoritative position in the alpine rescue community. Technically, the website employs modern web technologies including the Unpoly.js framework and Matomo analytics, ensuring a responsive and user-friendly experience across devices. The site is well-structured with clear navigation and professional design, supporting excellent content quality and user engagement. From a security perspective, the site enforces HTTPS and implements CSRF protections in forms, with privacy-conscious analytics settings. However, the absence of explicit security headers and vulnerability disclosure mechanisms suggests room for improvement in security posture. The lack of WHOIS data limits domain trust verification, though the website's professional presentation and partner ecosystem mitigate some concerns. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic enhancements in security headers, vulnerability disclosure, and WHOIS transparency would further strengthen trust and compliance.

I

infocount, s.r.o.

infocount.cz

44

infocount, s.r.o. is a Czech IT company specializing in comprehensive IT solutions and consultancy, with a focus on electronic signature services, web publishing systems, and web development. Established in 2003, the company leverages strong academic ties and offers services to both private and government sectors, maintaining a solid market presence with over two decades of experience. Their key offerings include PKI-based security solutions, intranet and web application development, and eBusiness tools. Technically, the website is built on WordPress with modern web technologies such as PHP, Java, and JavaScript frameworks, providing a responsive and user-friendly experience. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection but lacks some advanced security headers and published security policies. The absence of WHOIS data reduces domain trustworthiness, but the detailed company information and client references enhance credibility. Overall, the website is professional and functional, with room for improvement in privacy compliance and security transparency.

M

Město Kyjov

mestokyjov.cz

58

Město Kyjov operates an official municipal website serving residents and visitors with comprehensive information about the city, municipal office, cultural events, and public services. The site offers online appointment booking and a citizen portal for electronic transactions, positioning itself as a key digital interface for local government services. The website is well-branded, professionally designed, and targets local citizens and stakeholders seeking municipal information and services. Technically, the site employs modern JavaScript libraries such as GSAP and Swiper.js, and integrates Google Tag Manager for analytics. It is mobile-optimized and accessible, with good SEO practices and structured data enhancing search visibility. Security posture is solid with HTTPS enforced and secure form handling, though some security headers and incident response disclosures are absent. Privacy and cookie policies are present and GDPR compliant, supporting user data protection. The absence of WHOIS data limits domain trust assessment, but the official content and contact details strongly support legitimacy. Overall, the site demonstrates a mature digital presence for a municipal government entity with room for enhanced security transparency and incident response readiness.

M

Město Kolín

mukolin.cz

48

The website mukolin.cz is the official online presence of the city of Kolín, Czech Republic. It serves as a comprehensive municipal portal providing residents and visitors with information about city administration, social services, local news, events, and public resources. The site is well-structured and targets the general public, especially local citizens seeking government services and updates. The business model is that of a government service portal, with no commercial intent, focusing on transparency and accessibility. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, and integrates Google Analytics and Google Tag Manager for visitor insights. It uses the vismo CMS platform and is hosted by Active24. The site is mobile-optimized, accessible, and includes multilingual support via Google Translate. Security measures include HTTPS, Google reCAPTCHA on forms, and cookie consent mechanisms compliant with GDPR. From a security perspective, the site demonstrates good practices such as encrypted connections, anti-bot protections, and privacy controls. However, explicit security policies and incident response contacts are not published, which could be improved. No vulnerabilities or suspicious activities were detected in the content or scripts. The domain registration is consistent with the official city entity, with a long-established domain age supporting legitimacy. Overall, mukolin.cz is a trustworthy, well-maintained municipal website with good content quality, technical implementation, and privacy compliance. Strategic recommendations include publishing a formal security policy, adding vulnerability disclosure information, and enhancing security headers to further strengthen the security posture.

M

Město Mikulov

mikulov.cz

41

Město Mikulov operates as the official municipal government website for the city of Mikulov in the Czech Republic. It provides comprehensive information and services for both citizens and tourists, including municipal office details, cultural events, tourism highlights, and e-services. The website is well-branded and targets local residents and visitors, emphasizing the city's rich history and wine culture. Technically, the site employs modern web technologies, including JavaScript and Google Analytics, and is mobile-optimized with good accessibility and SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks some advanced security headers and explicit security policies. The absence of WHOIS data reduces domain registration transparency, but the website content and official branding strongly support its legitimacy. Overall, the site presents a professional and trustworthy digital presence for the city government.

T

Travelport CZ

travelport-partner.cz

64

Travelport Česká republika operates as a platform provider in the travel industry, focusing on connecting entities within the travel sector through a unified and independent platform for buying and selling travel services. The website is hosted on the Wix platform and demonstrates a moderate level of digital maturity with good design and mobile optimization. Security posture is adequate with HTTPS enforced and some security best practices observed, though the absence of explicit security headers and privacy policies indicates room for improvement. The lack of WHOIS data and contact information reduces overall trustworthiness and business credibility. Strategic recommendations include enhancing transparency with privacy and cookie policies, improving security headers, and providing clear contact and incident response information.

I

Interact

interreg.eu

63

Interreg.eu is the official website for the Interreg series of EU funding programmes that promote cross-border, transnational, and interregional cooperation across Europe. The site is managed by Interact and provides comprehensive information about the programmes, news, events, and resources to support regional development and cohesion. The website targets public institutions, regional organizations, and citizens interested in EU cooperation initiatives. Technically, the site is built on Umbraco CMS, hosted on Microsoft Azure, and employs modern web technologies including Vite and JavaScript frameworks. It features a robust cookie consent mechanism and integrates Google reCAPTCHA for security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR and EU privacy standards.

The website www.tpcr-turnov.cz serves as an informational portal focused on promoting local landmarks and tourism in Turnov, Czech Republic. It provides links to partner sites such as the Valdštejn Castle, Synagogue Turnov, and the local information center. The site uses the Public4u CMS platform and relies on traditional web technologies like jQuery and CSS. The content is primarily in Czech with language options for English, German, and Polish, targeting a general audience interested in cultural and historical tourism. The site lacks detailed business information and contact data, which limits its business credibility.

Agentura Paseo, s.r.o. is a Czech online marketing agency specializing in comprehensive digital marketing services including PPC, RTB, SEO, social media marketing, email marketing, video production, and content marketing. They also operate a network of leisure-focused portals targeting active audiences planning leisure activities, positioning themselves as a niche player in the Czech online marketing space. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, reflecting a mature digital presence for a small-sized agency. Technically, the site uses Solidpixels CMS, integrates Google Tag Manager, Google Analytics, and Leady tracking scripts, indicating a modern marketing technology stack. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and documented security policies or incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details appear legitimate. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security transparency and domain registration clarity.

B

ByznysWeb s.r.o.

byznysweb.cz

62

ByznysWeb s.r.o. operates a mature and professional e-commerce platform focused on enabling entrepreneurs and small to medium businesses to create and manage performant e-shops and websites without programming expertise. The platform offers multilingual support, migration services, and comprehensive hosting and support, positioning itself as a trusted player in the Czech and Slovak markets since 2003. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, and responsive design, ensuring good performance and user experience across devices. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is solid with HTTPS enforced and consent-based script loading, though explicit security headers could be improved. The absence of WHOIS data is a notable gap, slightly impacting trust but mitigated by the professional and transparent web presence. Overall, the site demonstrates high quality, trustworthiness, and business credibility.

O

Obec Kořenov

korenov.cz

54

The website www.korenov.cz serves as the official online presence for the municipality of Kořenov in the Czech Republic. It provides comprehensive information about local government activities, public notices, tourism, and community services. The site targets residents, tourists, and local stakeholders, offering a well-structured navigation system and multilingual support via GTranslate. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with a focus on accessibility and responsive design. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected in the provided data. Privacy and cookie policies are present and appear comprehensive, though no explicit cookie consent mechanism was found. The absence of WHOIS data reduces the domain trust score, but the website content and structure strongly indicate legitimacy as a municipal government site.

W

WEBHOUSE s.r.o.

vismo.cz

44

WEBHOUSE s.r.o. is a well-established Czech company specializing in providing web solutions and editorial systems primarily for public administration entities such as cities and municipalities. With a history dating back to 1997 and managing over 2,000 websites including more than 30% of Czech towns, the company holds a strong market position as a leading supplier in its sector. Their flagship product, the vismo 6 editorial system, emphasizes ease of use, modern technology, and compliance with current legislation. The website reflects a professional and consistent brand image targeting government clients. Technically, the website employs a modern JavaScript stack including Vue.js and Mustache.js, integrates advanced analytics and tracking tools such as Google Analytics, Facebook Pixel, and Smartlook, and enforces HTTPS with Google reCAPTCHA v3 for security. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers could be improved. Cookie consent mechanisms are implemented in compliance with GDPR. From a security perspective, the site demonstrates good practices with encrypted connections and user consent for tracking, but lacks explicit published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data confirms the domain's legitimacy and long-term presence, consistent with the company's claims. Overall, the website presents a trustworthy, professional, and secure digital presence suitable for its government-focused audience, with room for enhancement in security policy transparency and header configurations.

W

WEBHOUSE s.r.o.

webhouse.cz

52

WEBHOUSE s.r.o. is a well-established Czech company specializing in the development and maintenance of websites and related digital services primarily for public administration, including municipalities and cities. Founded in 1997, the company holds a strong market position serving over 2,000 websites and more than 30% of Czech towns. Their offerings include responsive and accessible web design, custom graphic solutions, and mobile applications, supported by their proprietary Vismo CMS platform. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript frameworks including Vue.js and Mustache.js, and integrates advanced analytics and tracking tools like Google Analytics, Facebook Pixel, and Smartlook. The site is mobile-optimized and demonstrates good accessibility compliance. Security measures include HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, although explicit security headers and a formal security policy are not evident. From a security perspective, the site maintains a solid posture with no visible vulnerabilities or exposed sensitive data. However, improvements could be made by publishing a dedicated security policy, incident response contacts, and implementing additional security headers. Privacy compliance is well addressed through comprehensive privacy and cookie policies with GDPR-aligned consent mechanisms. Contact information is complete and transparent, enhancing business credibility. Overall, WEBHOUSE s.r.o. presents a trustworthy and professional digital presence aligned with its business focus. The website is secure, compliant, and user-friendly, supporting the company’s leadership in the Czech public sector web services market.

R

Raiffeisenbank a.s.

rb.cz

71

Raiffeisenbank a.s. is a well-established Czech banking institution providing a broad range of retail and corporate financial services including accounts, loans, mortgages, and investments. The website reflects a mature digital presence with modern design, mobile optimization, and comprehensive content tailored to individual and business customers. The bank leverages advanced web technologies such as Angular and Material Design, integrated with analytics and user behavior tracking tools like Google Tag Manager and Hotjar, indicating a focus on user experience and data-driven insights. Security posture is strong with HTTPS enforcement, security headers, and secure login mechanisms, although the absence of WHOIS data for the domain introduces a minor trust concern. Overall, the site is professional, secure, and compliant with privacy regulations, supporting Raiffeisenbank's market position as a trusted financial services provider in the Czech Republic.

W

WEBHOUSE s.r.o.

obce.cz

53

WEBHOUSE s.r.o. is a well-established Czech company specializing in providing web solutions and related services primarily for municipalities and public administration. With a market presence since 1997 and managing over 2,000 websites including services for more than 30% of Czech towns, the company holds a strong position in its niche. Their offering includes a mobile application 'Města a obce' that delivers municipal information directly to citizens' smartphones, emphasizing ease of use, GDPR compliance, and no user data collection. The website reflects a professional and consistent brand image with clear contact channels and social media engagement.

The Council of Europe operates as a leading intergovernmental organization dedicated to the promotion and protection of human rights, democracy, and the rule of law across 46 member states in Europe. The website serves as a portal providing comprehensive information about the organization's activities, news, and institutional structure, targeting European citizens, government officials, and human rights advocates. The Council holds a prominent market position as the continent's foremost human rights body, supported by its official .int domain and multilingual content. Technically, the website is built on a modern infrastructure leveraging Liferay CMS, React, YUI, and Clay UI frameworks, ensuring a responsive and accessible user experience. The site demonstrates moderate to good performance and SEO optimization, with a well-structured navigation system and mobile-friendly design. Analytics are implemented via Piwik Pro, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and employs standard security best practices, although explicit security policies and incident response contacts are not publicly visible. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy, professional, and aligned with the Council of Europe's mission. Strategic recommendations include publishing clear privacy and cookie policies, establishing visible security and incident response contacts, and implementing a security.txt file to enhance transparency and compliance.

W

Weblium

weblium.site

73

Weblium is a technology company offering a SaaS website builder platform designed to enable users to create professional websites effortlessly. The platform targets individuals and businesses seeking intuitive and advanced website building tools, positioning itself as an easy-to-use solution with professional templates and features. The website is well designed, mobile optimized, and uses modern web technologies including React and service workers, indicating a mature technical infrastructure. Security posture is adequate with HTTPS enabled and domain registration protections in place, though there is room for improvement in security headers and published security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy, with a solid business foundation and technical implementation.

K

Kuřimsko

modrozelene-kurimsko.cz

53

The website modrozelene-kurimsko.cz represents a regional government or community initiative focused on environmental sustainability and climate resilience projects in the Kuřim area of the Czech Republic. It provides news updates, project information, and community engagement content targeting local residents and stakeholders. The site is professionally designed with good navigation and mobile optimization, leveraging modern web technologies including Google Tag Manager and CookieHub for analytics and cookie consent management. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership, which slightly reduces trustworthiness. Security posture is moderate with no visible security headers detected and no explicit privacy policy or terms of service pages, indicating room for compliance improvements. Overall, the site is functional and relevant for its audience but would benefit from enhanced transparency and security practices.

A

Agentura regionálního rozvoje Nisa, příspěvková organizace

platebniportallk.cz

51

The Platební portál Libereckého kraje is a government-operated online payment portal designed to facilitate convenient payment of municipal fees for citizens of the Liberecký region in the Czech Republic. The portal consolidates various local fees such as waste disposal, public space usage, residence fees, entrance fees, and dog ownership fees into a single platform, enhancing user convenience and operational efficiency for municipalities. The business is relatively new, with the domain registered in July 2024, aligning with the launch of this regional service. The portal is operated by the Agentura regionálního rozvoje Nisa, a regional development agency, under the auspices of the Liberecký kraj government.

Č

Český statistický úřad

volby.cz

61

The website volby.cz serves as the official platform for the Czech Statistical Office (Český statistický úřad) to publish election and referendum results. It is a government-operated site providing authoritative statistical data related to various elections in the Czech Republic. The site targets voters, election commissions, and government officials, offering comprehensive election results and related information. The branding and content strongly indicate a trusted government source, although WHOIS data is unavailable, which slightly impacts transparency. Technically, the site uses modern web technologies including JavaScript, CSS, SVG, and web components within the gov-design framework. The site is mobile-optimized and accessible, with good SEO practices evident. However, there is no evidence of advanced analytics or tracking, and no visible security headers were detected in the provided HTML content. The site lacks explicit privacy, cookie, and terms of service policies, which is a gap in compliance and user transparency. From a security perspective, the site uses HTTPS (implied by the URL), but no security headers or incident response contacts are visible. The absence of WHOIS data is unusual but may be due to CZ NIC policies or privacy protections. No vulnerabilities or malicious content were detected. Overall, the site demonstrates a moderate security posture but would benefit from enhanced transparency and security best practices. The overall risk assessment is moderate with a recommendation to improve privacy disclosures, implement security headers, and provide clear contact information for security incidents. These steps would enhance user trust and compliance with data protection regulations.

Č

ČEZ Distribuce

cezdistribuce.cz

59

ČEZ Distribuce is a major electricity distribution company in the Czech Republic, serving over 3.7 million households and businesses. It operates as a distributor rather than a supplier, focusing on reliable and safe electricity distribution. The company provides a wide range of services including new connections, meter readings, outage reporting, and support for electricity producers such as photovoltaic systems. The website reflects a mature digital presence with modern technologies like Next.js and Vue.js, offering user-friendly portals and mobile applications for customer convenience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response information are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

E

ENVIPARTNER, s.r.o.

edpp.cz

41

The website edpp.cz operates as a specialized digital flood portal primarily serving government agencies, municipalities, emergency services, and the general public in the Czech Republic. It provides comprehensive flood plans, weather forecasts, water level data, radar imagery, and flood risk maps. The portal is managed by ENVIPARTNER, s.r.o., a Czech company with a consistent domain registration dating back to 2010, aligning with the business's operational history. The content is professionally presented in Czech and targets users interested in flood risk management and meteorological data. Technically, the website employs a modern JavaScript stack including jQuery and Leaflet for interactive mapping, alongside Google Analytics and Tag Manager for user tracking. The site is moderately optimized for performance and mobile use, with good SEO practices and clear navigation. However, it lacks advanced accessibility features and some modern security headers, which could be improved. From a security perspective, the site uses HTTPS but does not implement key security headers such as Content-Security-Policy or Strict-Transport-Security. There is no visible cookie consent mechanism, which may affect GDPR compliance. No incident response or security policy information is published, and no vulnerability disclosure or security.txt file is present. Despite these gaps, no critical vulnerabilities or suspicious content were detected. Overall, edpp.cz is a trustworthy and professionally maintained portal with a clear business focus and consistent domain registration. Strategic improvements in privacy compliance and security hardening would enhance its risk posture and user trust.

E

ENVItech Bohemia s.r.o.

envitech.eu

56

ENVItech Bohemia s.r.o. is a Czech Republic-based company specializing in environmental monitoring services, particularly air quality measurement. Established in 1992, the company offers a comprehensive portfolio including monitoring systems, meteorological equipment, emission measurement, calibration, detection systems, and related software solutions. The company holds multiple certifications such as ISO 9001 and ISO 14001, reinforcing its credibility and compliance with industry standards. Their market position is solid within the environmental technology sector, targeting professional and governmental clients. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the website is built on the ByznysWeb.cz platform, utilizing modern web technologies including Google Analytics for tracking and FontAwesome for icons. The site is mobile-optimized with good SEO practices and clear navigation. Privacy and cookie policies are well implemented with consent mechanisms, indicating compliance with GDPR requirements. However, the absence of explicit security headers and incident response information suggests areas for security enhancement. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data limits domain trust assessment, but the website content and certifications support legitimacy. Overall, the site demonstrates a mature digital infrastructure with room for security improvements and enhanced transparency in incident response. Strategically, the company should focus on improving security headers, publishing incident response contacts, and resolving WHOIS data visibility to strengthen trust and compliance. These steps will enhance their security posture and business credibility in the competitive environmental monitoring market.

N

Netpromotion group s.r.o.

ekatalog.cz

62

Ekatalog.cz operates as the largest regional business directory in Eastern Bohemia, Czech Republic, providing a comprehensive database of over 660,000 Czech companies. The platform offers verified company listings, user ratings from Google and Facebook, and regional search capabilities. Owned and operated by Netpromotion group s.r.o., the website has been active for over 19 years, positioning itself as a trusted resource for consumers and businesses seeking local services. The business model centers on lead generation and providing up-to-date company information.

S

SmartEnvi

smartenvi.eu

55

SmartEnvi is a specialized environmental monitoring platform focused on measuring air quality and meteorological data primarily in the Czech Republic. The website provides interactive maps and data visualization for various monitoring stations, serving governmental bodies, researchers, and environmental agencies. The platform leverages modern web technologies such as Leaflet.js and OpenStreetMap for geospatial data presentation. While the website content is professionally structured and relevant to its niche, it lacks visible privacy and cookie policies, contact information, and security best practices such as security headers. The absence of WHOIS registrant data is consistent with EURid's privacy policies for .eu domains and does not raise immediate concerns. Overall, the site demonstrates moderate digital maturity but requires improvements in security and compliance to enhance trust and user confidence.

H

Horská služba ČR, o.p.s.

horskasluzba.cz

62

Horská služba ČR, o.p.s. is a Czech non-profit organization dedicated to mountain rescue and safety services. The website serves as an official information portal providing updates on rescue operations, avalanche warnings, and safety guidelines for mountain visitors. It is supported by government funding and partnerships with recognized entities, positioning it as a trusted national mountain rescue service. The site targets outdoor enthusiasts and the general public seeking safety information in mountainous regions of the Czech Republic. Technically, the website employs modern web technologies including Leaflet.js for interactive maps and Google Tag Manager for analytics, with a basic but functional mobile experience. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, but the absence of WHOIS data introduces some uncertainty in domain legitimacy.

Janov nad Nisou operates an official municipal website serving residents and visitors with comprehensive local government information, news, and public services. The site provides access to official documents, contact details for municipal offices and police, and tourism-related content, positioning itself as a trusted source for community engagement and information dissemination. The domain has been registered since 2000, reflecting a stable and established online presence consistent with a government entity. Technically, the website utilizes a CMS Made Simple platform with Foundation 5.0.2 framework, jQuery, and standard web technologies. The site is hosted by WEDOS and enforces HTTPS, ensuring secure communications. While the site is moderately optimized for mobile and accessibility, there is room for improvement in performance and modern SEO practices. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data but lacks important security headers and publicly available security policies or incident response contacts. The absence of a cookie consent mechanism is a compliance gap under GDPR. Overall, the security posture is adequate but could be enhanced with standard best practices. The website is safe for general audiences, with no adult or questionable content detected. Contact information is clearly presented, and the WHOIS data confirms legitimacy and consistency with the municipal nature of the site. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and updating technical components to improve security and compliance.

M

Muzeum skla a bižuterie v Jablonci nad Nisou

msb-jablonec.cz

45

Muzeum skla a bižuterie v Jablonci nad Nisou is a specialized cultural institution in the Czech Republic dedicated to the preservation and exhibition of glass and bijouterie artifacts. It holds unique and extensive collections, including the world's largest public collection of glass Christmas ornaments. The museum operates under the auspices of the Czech Ministry of Culture, positioning it as a significant governmental and non-profit entity in the cultural sector. The website reflects a professional and comprehensive digital presence, offering detailed information about exhibitions, events, and visitor services, targeting a broad audience including families, tourists, and researchers. Technically, the website employs modern web standards with responsive design, accessibility considerations, and integration of Google Tag Manager for analytics and marketing. Cookie consent mechanisms are implemented, demonstrating awareness of privacy regulations such as GDPR. However, some security best practices like explicit security headers and published security policies are absent, representing areas for improvement. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but the lack of WHOIS data limits domain registration trust analysis. Despite this, the website's affiliation with the Ministry of Culture and consistent business information support its legitimacy. Overall, the site is well-maintained, user-friendly, and trustworthy, serving its cultural mission effectively.

The website tvrzoziva.cz serves as an informational portal for the Čelákovice fortress and museum, highlighting the ongoing reconstruction project and cultural exhibitions. It targets general visitors and history enthusiasts, providing detailed historical context and visitor information. The business operates as a small government/non-profit cultural institution with a local/regional focus. Technically, the site is built on WordPress with modern web standards and includes GDPR-compliant cookie consent management. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could improve in security documentation and contact transparency.

U

Úvod | ÚP

uradprace.cz

68

The website www.uradprace.cz is the official online portal for the Czech Republic's public employment service, providing job seekers and employers with access to employment-related information and services. The site targets citizens seeking employment assistance and labor market data. Technically, the site employs modern web technologies such as StencilJS and web components, offering a responsive and accessible user experience. However, the site lacks publicly available WHOIS registration data, which reduces transparency and trust. Security posture is moderate with no detected security headers or explicit policies, and privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

M

Městská Policie Brno

dopravnihristebrno.cz

42

Dopravní hřiště Riviéra Brno is a municipal traffic education facility operated by the Municipal Police of Brno, Czech Republic. It provides traffic safety education primarily targeting children, schools, and the general public through interactive projects, tests, and bicycle registration services. The website reflects a well-established public service with a clear focus on traffic education and safety, supported by EU funding and local government partnerships. The content is professionally presented in Czech and targets local audiences including schools and families. Technically, the website is built on TYPO3 CMS with modern web technologies including responsive design, external fonts, and icon libraries. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. SEO practices are adequate with proper meta tags and structured navigation. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide explicit security policies or incident response information. Cookie consent mechanisms are absent despite GDPR relevance, which is a compliance gap. The WHOIS data aligns well with the municipal police entity, confirming legitimacy and trustworthiness. Overall, the website is a credible, well-maintained public service platform with good content quality and business credibility. Security and privacy compliance can be improved by adding cookie consent, security headers, and publishing security policies. These enhancements would strengthen user trust and regulatory compliance.

M

Made by Büro

madebyburo.com

43

Made by Büro operates a technology platform accessible via a login portal, likely serving business clients requiring authenticated access. The website is built using AngularJS and integrates with ActiveCollab APIs, indicating a modern albeit somewhat dated technical infrastructure. The domain is stable and registered since 2014, supporting the legitimacy of the business. However, the public-facing content is minimal, focusing solely on user authentication without additional business or contact information. Security practices include HTTPS enforcement and CSRF token usage, but lack visible security headers and published policies, which limits transparency and compliance assurance. Privacy and cookie policies are absent, which may pose compliance risks under GDPR or similar regulations.