Security Directory

C

Creduo

creduo.cz

43

Creduo is a Czech Republic-based language education studio specializing in group and individual English courses primarily for children from preschool age to teenagers, as well as online Spanish courses for beginners and intermediate learners. The business emphasizes quality teaching, individual approach, and uses accredited methods such as Teddy Eddie. The website reflects a small but professional local education provider with a clear market niche and positive customer testimonials. Technically, the site is built on WordPress with Elementor and Yoast SEO, showing good digital maturity and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response information. Overall, the site is trustworthy and well-maintained, suitable for its target audience.

The website www.lancome.cz is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks access to the actual site content. This prevents extraction of any meaningful business, technical, or security information. The WHOIS lookup for the domain returned no entries, indicating either privacy protection or lack of public registration data, which further limits trust and legitimacy assessment. Without access to the site content, no privacy policies, contact information, or business details can be confirmed. The technical infrastructure appears to rely on Cloudflare services for security and hosting, but no further details are available. The security posture is limited to the presence of Cloudflare's WAF, but no other security headers or configurations can be verified. Overall, the site cannot be fully analyzed, and the risk assessment remains low due to lack of accessible data.

Š

Škoda Motorsport

skoda-motorsport.com

70

Škoda Motorsport is the official motorsport division of the Czech automotive manufacturer Škoda Auto, with a rich history dating back to 1901. The website serves as a hub for news, customer programs, and information about Škoda's rally and motorsport activities, targeting motorsport enthusiasts and professional racing teams. The company holds a strong market position in the motorsport industry, particularly in rally championships, supported by a professional and content-rich website. Technically, the site is built on WordPress, leveraging modern technologies such as Amazon S3 for asset hosting and Azure CDN for script delivery, with good SEO and mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is partially addressed with a clear privacy policy and GDPR consent on newsletter forms, but lacks a cookie banner. Overall, the website is professional, trustworthy, and well-maintained, though the absence of WHOIS data for the domain is a notable anomaly requiring monitoring.

Š

Škoda Auto

skoda-storyboard.com

70

Škoda Storyboard is a professionally designed and content-rich website serving as a media and storytelling platform for Škoda Auto, a well-established automotive manufacturer. The site targets journalists, influencers, customers, and fans, providing news, press releases, and engaging stories about Škoda vehicles and company initiatives. The technical infrastructure leverages WordPress CMS with modern plugins and CDN delivery, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforcement and privacy consent mechanisms, although explicit security policies and incident response contacts are not published. The domain WHOIS data is missing, which raises some concerns about registration transparency but does not detract from the overall professional presentation and trustworthiness of the site content. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and improving direct contact information availability.

Strohmy a.s. is a Czech-based company specializing in electricity trading across European markets. Founded in 2022, it leverages expertise from energy, trading, investment banking, and professional poker to deliver precise decision-making supported by advanced mathematical and data analysis tools. The company emphasizes a respectful and trusting team environment and actively contributes to societal well-being through charitable donations and partnerships. The website reflects a professional and consistent brand image, targeting experienced professionals and partners in the energy sector. Technically, the site is built on WordPress with modern plugins and demonstrates good SEO and mobile optimization, though some security best practices like security headers and explicit privacy policies are missing. Overall, the security posture is adequate with HTTPS enabled and GDPR consent integrated in forms, but could be improved with additional policies and headers. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

O

Onboardee.io

onbee.app

64

Onboardee.io operates the Onbee.app platform, a SaaS solution focused on digitizing and modernizing employee onboarding, offboarding, and HRIS processes. The platform targets HR professionals and team leaders, offering features such as onboarding plan templates, digital employee cards, contract templates with digital signatures, and integrations with popular ATS and SSO providers. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, it leverages modern web technologies including Alpine.js and Astro framework, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS and security headers properly configured, though explicit privacy and terms policies are missing. The domain uses privacy protection in WHOIS, which is common for startups but limits transparency. Overall, the platform appears legitimate and well-positioned in the HR technology niche.

The website 42firenze.it currently serves a security challenge page that blocks direct access to its main content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is registered since 2021 and is active without DNSSEC enabled. The visible page uses outdated CMS technologies such as Joomla 1.5 and WordPress 2.5, which are known to have multiple security vulnerabilities. No business or contact information, privacy, cookie, or terms of service policies are present on the accessible page, limiting the ability to assess the business or compliance posture. The site includes a security check powered by BitNinja, suggesting some level of security awareness but lacks modern security headers and best practices. Overall, the site’s digital maturity is low, with poor content quality and minimal SEO or accessibility features.

A

Association 42

s19.be

50

Campus 19 is a Belgian coding education platform affiliated with the global 42 network, offering free, peer-to-peer, project-based learning without traditional classes or teachers. It targets adults aged 18 and over, providing an innovative approach to IT education with campuses in Brussels and Antwerp. The platform emphasizes accessibility, inclusivity, and direct career placement, boasting a 100% employment rate after the core curriculum. Technically, the website is built on WordPress, leveraging modern analytics and marketing tools such as Google Tag Manager and Facebook Pixel, and is hosted by OVH. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and security policies are absent. Overall, the site is professional, trustworthy, and well-positioned in the education sector.

4

42 beirut

42beirut.com

50

42 Beirut is a non-profit educational institution offering a tuition-free, project-based computer science program focused on peer-to-peer learning and practical skills development. Positioned within the global 42 network, it aims to prepare students for careers in software development, AI, blockchain, cybersecurity, and related fields. The website is professionally designed using WordPress and modern web technologies, providing a good user experience and clear navigation. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding DNSSEC and security headers. Overall, the domain registration details align well with the business claims, supporting legitimacy.

4

42 Luanda

42luanda.com

44

42 Luanda is a free programming education center based in Angola, part of a global network offering innovative peer-to-peer learning without traditional teachers. The website presents a clear business focus on empowering youth through gamified programming challenges and practical projects. Technically, the site uses modern frontend technologies and is hosted with Cloudflare DNS, ensuring good availability and performance. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and explicit privacy or cookie policies. Tracking technologies like Facebook Pixel and Google Tag Manager are used without visible consent mechanisms, indicating privacy compliance gaps. Overall, the site is professional and credible but would benefit from enhanced security and privacy transparency.

G

GreatPages

greatpages.com.br

54

GreatPages is a Brazilian technology company specializing in providing high-performance landing page templates and a platform for infoproduct creators and online course sellers. Their service enables users to create optimized landing pages with marketing tool integrations and SEO configurations, targeting the Brazilian market. The website is professionally designed with good content quality and moderate technical implementation, including Cloudflare DNS for hosting and performance. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate but could be improved with better security practices and transparency. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security measures.

G

GreatSoftwares

greatsoftwares.com.br

54

GreatSoftwares is a Brazilian technology company offering a suite of software solutions primarily targeting photographers, studios, and businesses requiring digital tools. Their portfolio includes management systems, website builders, payment processing, email marketing, e-commerce, and membership platforms. The company positions itself as a comprehensive provider with a growing international presence. Technically, the website is built with modern web standards, uses HTTPS, and is hosted on a specialized platform, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional and trustworthy, with clear business information and compliance with privacy regulations.

F

Fundación Telefónica España

fundaciontelefonica.com

61

Fundación Telefónica España is a well-established non-profit organization focused on digital education, social action, and cultural initiatives primarily in Spain and Latin America. The foundation operates multiple programs aimed at improving digital skills and social inclusion, leveraging technology as a key enabler. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to a broad audience including students, educators, and social organizations. Technically, the site is built on WordPress with modern libraries and includes accessibility and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although no explicit security policy or vulnerability disclosure is publicly available. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website's content and social media presence. Strategic recommendations include publishing a security policy, establishing a vulnerability disclosure channel, and enhancing incident response contact visibility to further strengthen trust and compliance.

N

Nadační fond Czechitas Báry Bühnové

nadacnifondczechitas.cz

51

Nadační fond Czechitas Báry Bühnové is a Czech non-profit foundation dedicated to supporting women and disadvantaged groups in accessing IT education and career opportunities. The foundation provides scholarships and funding to help overcome barriers in the IT sector, aiming for systemic change in IT education across all ages. The website is professionally designed, targeting Czech-speaking audiences, and presents a clear mission with calls to action for donors and applicants. The foundation collaborates with reputable partners and uses established donation platforms to facilitate contributions. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts and jQuery. It is hosted on Webflow's infrastructure, ensuring reliable performance and mobile responsiveness. The site includes a cookie consent mechanism compliant with GDPR, although explicit privacy and terms of service pages are limited or linked externally. No blocking or WAF mechanisms were detected, and SSL is properly configured, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks some security headers and formal security policies. The absence of WHOIS data for the domain is a concern for transparency and trust, although the website content and partner references support legitimacy. No critical vulnerabilities or exposed sensitive data were found. Overall, the site presents a moderate to good security posture with room for improvement in policy disclosures and technical headers. The overall risk assessment is moderate with recommendations to improve domain registration transparency, add security headers, and publish formal security and privacy policies. These steps will enhance trustworthiness and compliance, supporting the foundation's mission and stakeholder confidence.

C

Czechitas z.ú.

shop-czechitas.cz

55

Czechitas z.ú. operates a pilot mini e-commerce shop offering branded merchandise and vouchers to support its mission of empowering women and children in the Czech Republic to explore IT. The website is professionally designed, mobile-optimized, and built on the Shoptet platform, integrating standard analytics and marketing tools such as Google Analytics and Facebook Pixel. Contact information and social media presence are clearly provided, enhancing trust and engagement. Technically, the site uses HTTPS with CSRF protection on forms and a cookie consent mechanism, reflecting a good security posture. However, the absence of WHOIS data limits domain legitimacy verification, and security headers are not explicitly detected, suggesting room for improvement. No explicit security policies or incident response contacts are published. Overall, the website demonstrates a solid foundation in content quality, privacy compliance, and business credibility, but would benefit from enhanced transparency in domain registration and security practices. The risk level is moderate with no critical vulnerabilities detected, but verification of domain registration details is recommended to strengthen trust.

4

42 Singapore

42singapore.sg

66

42 Singapore operates as a tuition-free ICT education institution leveraging a peer-to-peer, project-based learning model derived from the 42 Paris pedagogy. It targets learners seeking innovative, hands-on coding education without traditional teachers or lectures. The institution is part of the globally recognized 42 Network and offers an EU-recognized diploma equivalent to a Bachelor's degree. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing pixels, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and external references support legitimacy. Overall, the site is professional and user-friendly but would benefit from enhanced transparency in privacy, security policies, and domain registration details.