Security Directory

T

Tilos Kulturális Alapítvány

tilos.hu

45

Tilos Rádió is a Budapest-based nonprofit community radio station established in 1999, operating under the Tilos Kulturális Alapítvány. The station offers diverse programming produced by contributors from various civilian professions, emphasizing independent and community-driven broadcasting. Their business model relies heavily on donations, supported by transparent fundraising campaigns and a webshop. The website reflects a mature digital presence with a modern React/Next.js infrastructure, optimized for performance and mobile devices. Social media integration and community engagement are strong, enhancing their outreach. Security-wise, the site employs HTTPS, security headers, and cookie consent mechanisms, demonstrating good compliance with GDPR and privacy standards. No critical vulnerabilities or suspicious activities were detected, and the domain's WHOIS data aligns well with the organization's history, supporting legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

O

OpenAssistantGPT

openassistantgpt.io

62

OpenAssistantGPT is a technology SaaS platform specializing in building AI chatbots and AI agents powered by the OpenAI API. It targets businesses seeking to automate customer support, sales, and internal communications with smart RAG AI agents. The platform offers multiple subscription tiers, including a free plan, and supports advanced features such as SAML/SSO authentication and file attachment analysis. The company embraces open source principles, with code available on GitHub, enhancing transparency and community trust. Technically, the website is built using modern web technologies including Next.js and TypeScript, deployed likely on Vercel. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation. Integration with popular website platforms like WordPress, Shopify, Squarespace, and Wix is emphasized. From a security perspective, the site enforces HTTPS and supports enterprise-grade authentication methods. However, it lacks visible security headers and public incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism was detected. Overall, the platform presents a credible and professional offering with strong technical foundations and good business transparency. The absence of WHOIS data due to privacy protection is common and justified for this business type. Strategic improvements in security headers, cookie consent, and public security policies would enhance trust and compliance.

C

Cornerstone OnDemand

cornerstoneondemand.com

73

Cornerstone OnDemand operates a leading enterprise AI-powered human capital management platform known as the Galaxy Platform. The company serves a global customer base of over 7,000 organizations and 140 million users, offering comprehensive talent management, learning, and workforce agility solutions. Their market position is reinforced by multiple industry awards and analyst recognitions, reflecting a strong competitive advantage in the HCM technology sector. Technically, the website leverages modern frameworks such as Next.js and React, integrates advanced analytics and marketing tools, and demonstrates excellent performance and mobile optimization. Security posture is robust with HTTPS enforcement and comprehensive security headers, though no explicit incident response or vulnerability disclosure policies are publicly visible. Privacy compliance is well addressed with clear privacy and cookie policies indicating GDPR adherence. Overall, the website and business present a professional, trustworthy, and mature digital presence, though the absence of WHOIS data introduces some uncertainty regarding domain registration transparency.

M

MegaUbytovanie.sk

megaubytovanie.sk

55

MegaUbytovanie.sk is a well-established online platform specializing in accommodation bookings across Slovakia and the Czech Republic, offering over 6000 verified listings including cottages, apartments, hotels, and private stays. The platform targets travelers seeking direct booking options with property owners, providing a multi-language user experience and a broad geographic reach within Central Europe. Technically, the website leverages modern web technologies such as Next.js and React, hosted on Amazon Cloudfront CDN, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement, security headers, and a cookie consent mechanism, although explicit privacy and terms policies are not found in the provided content. The absence of direct contact information and formal policies slightly impacts trust and compliance scores. Overall, the site demonstrates a strong market position with good technical maturity but would benefit from enhanced transparency and compliance documentation.

R

Recombee

recombee.com

67

Recombee is a technology company specializing in AI-powered recommendation and personalized search services delivered as a SaaS platform. Their offerings include real-time personalized recommendations, advanced search capabilities, and analytics tools tailored for diverse industries such as video streaming, e-commerce, media, real estate, and more. The company targets product managers and technical teams seeking to enhance user engagement and conversion rates through AI-driven personalization. With a strong market presence evidenced by partnerships with major brands and numerous client testimonials, Recombee positions itself as a leading provider in the AI recommendation space. Technically, Recombee employs a modern web stack including React and Next.js, with extensive use of RESTful APIs and SDKs for multiple programming languages. The website demonstrates excellent performance, mobile responsiveness, and SEO optimization. Integration of Google Tag Manager, Hotjar, and Usercentrics indicates a mature approach to analytics and privacy compliance. However, explicit security headers are not detected, and no dedicated security policy or incident response page is published. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, along with consent management for cookies, reflecting good baseline security and privacy practices. The absence of WHOIS data is likely due to privacy protection, which is justified for this business type. No critical vulnerabilities or suspicious indicators are found in the content or technical setup. Overall, Recombee presents a professional, trustworthy, and technically sound platform with strong business credibility. Strategic recommendations include enhancing security header implementation, publishing a formal security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

O

ONDRÁŠEK INK - JET SYSTEM spol. s r.o.

ondrasek.cz

62

ONDRÁŠEK INK - JET SYSTEM spol. s r.o. is a Czech-based company specializing in comprehensive marking and automation solutions, primarily serving industrial and manufacturing sectors. Their product portfolio includes inkjet printers, thermal transfer printers, laser printers, label application systems, and collaborative robots, supported by software solutions for packaging and printing management. The company maintains a professional web presence with clear business and contact information, indicating a medium-sized enterprise with a solid regional market position. Technically, the website is built on modern frameworks such as Next.js and React, ensuring good mobile optimization and moderate performance. The site uses HTTPS with strong SSL configuration but lacks some security headers and cookie consent mechanisms, which are important for GDPR compliance. Marketing and lead generation scripts are present, indicating active customer engagement strategies. From a security perspective, the site demonstrates good practices like HTTPS enforcement and no visible sensitive data exposure. However, the absence of published security policies, incident response contacts, and cookie consent banners suggests areas for improvement in compliance and transparency. The WHOIS data is missing, which reduces domain trustworthiness from a registration standpoint but does not necessarily reflect on the business legitimacy. Overall, the website is professional and trustworthy with minor gaps in privacy compliance and security transparency. Strategic improvements in these areas would enhance the company’s digital trust and regulatory adherence.

R

rawpixel

rawpixel.com

10

rawpixel is a professional all-in-one graphic design platform offering free and premium stock photos, PNGs, templates, mockups, videos, fonts, and creative tools. The website is well-designed, modern, and targets graphic designers, marketers, and content creators seeking high-quality visual assets and design capabilities. The business operates on a freemium model with paid plans for enhanced access and features. Technically, the site uses Next.js and React frameworks, integrates Google Tag Manager and Pinterest scripts, and delivers content with good performance and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and explicit privacy/cookie policies are missing. WHOIS data is unavailable, likely due to privacy protection, which is common for commercial media sites. Overall, rawpixel presents a trustworthy and professional digital presence with room for improvement in privacy compliance and security transparency.

P

Pikwizard

pikwizard.com

74

Pikwizard is a well-established online platform founded in 2017 that offers over one million free, high-quality stock photos, PNG images, videos, and templates. It targets creators, marketers, and designers by providing royalty-free media assets with no attribution required, positioning itself as a competitive player in the free stock media market. The website is professionally designed with excellent content quality and clear navigation, supporting a positive user experience. Technically, it leverages modern web technologies including React and Next.js, hosted likely on AWS infrastructure, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and domain protection statuses in place, though some security headers could be improved. Privacy compliance is basic with a comprehensive privacy policy but lacking explicit cookie consent mechanisms. Contact is primarily via a company email address. Overall, the site demonstrates strong business credibility and technical maturity with room for enhancements in security headers and privacy transparency.

S

SOLSOL s.r.o.

solsol.cz

64

SOLSOL s.r.o. is a leading Czech Republic-based distributor specializing in photovoltaic technologies including panels, inverters, batteries, and mounting systems. Established in 2012, the company operates a professional B2B e-commerce platform targeting partners and installers in the renewable energy sector. SOLSOL positions itself as the largest distributor in its market with a comprehensive partner program, extended warranties, and technical support services. The website reflects a mature digital infrastructure leveraging modern web technologies such as Next.js and Shopsys Platform, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS, security headers, and error monitoring via Sentry, although explicit security policies and incident response contacts are not publicly detailed. Privacy and cookie policies are present and GDPR compliant, supporting trust and regulatory adherence. Overall, SOLSOL demonstrates a strong market presence with professional branding, clear contact channels, and a well-structured online platform.

S

Stock Spirits Group

stock.cz

78

Stock Spirits Group is a leading European spirits producer with a rich heritage dating back to 1884. The company offers a diverse portfolio of high-quality alcoholic beverages rooted in local and regional traditions, targeting mature consumers across over 50 countries. Their market position is strong, supported by sustainability initiatives and responsible drinking policies. Technically, the website is built on modern frameworks such as Next.js and React, delivering fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly available. Overall, the website reflects a professional and trustworthy business presence with moderate user tracking and good privacy compliance.

Ogilvy CZ is a well-established advertising and marketing agency operating since 1998, providing comprehensive services including advertising, PR, consulting, performance marketing, experience design, and social media marketing. The company targets businesses seeking integrated brand building and marketing solutions, holding a strong market position supported by awards and professional branding. Technically, the website is built on modern frameworks such as Next.js and React, with Drupal CMS backend, hosted by REG-WEBGLOBE. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and privacy policies in place, though it lacks a public vulnerability disclosure mechanism. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence.

M

mBank S.A.

mbank.pl

71

mBank S.A. is a major Polish retail bank offering a comprehensive range of financial products including personal accounts, loans, deposits, insurance, and investment services. The website targets individual customers in Poland and presents a professional, well-structured digital presence with strong branding and consistent messaging. The bank leverages modern web technologies such as React and Next.js to deliver a fast, mobile-optimized experience. Security is robust with HTTPS, security headers, and privacy policies in place, although WHOIS data is unavailable which is unusual but likely due to registry policies. Overall, the site reflects a mature digital infrastructure and a strong market position in the Polish banking sector.

A

ALEXANDRIA s.r.o.

alexandria.cz

53

CK Alexandria is a Czech Republic based travel agency specializing in holiday packages primarily to popular European and exotic destinations such as Bulgaria, Greece, Turkey, Spain, Italy, Albania, Croatia, Cyprus, Montenegro, and the UAE. The company offers a broad range of services including last minute deals, animation programs, and a premium club membership, targeting general consumers seeking vacation travel. The website is built on modern technologies including Next.js and React, with integration of multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Smartlook. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and a published privacy policy reduces compliance maturity. WHOIS data is unavailable, limiting domain trust assessment. Overall, the website presents a professional and trustworthy front for a medium-sized travel business.

VVV TOUR CZ 1, s.r.o. is a Czech travel agency specializing in holiday packages to Bulgaria, leveraging direct flights from multiple Czech cities including Pardubice, Prague, Brno, and Ostrava. The company has a long-standing presence since 2001, positioning itself as a specialist in the Bulgarian travel market with a focus on quality accommodation and comprehensive travel services. The website reflects a professional and consistent brand image, targeting Czech travelers seeking vacations in Bulgaria. Technically, the site is built on modern frameworks such as Next.js and React, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is addressed with cookie consent and privacy policy, though GDPR compliance could be enhanced with more detailed disclosures. Overall, the site is trustworthy and functional, supporting the business model effectively.

C

CK Blue Style

blue-style.cz

62

CK Blue Style is a Czech travel agency specializing in offering vacation packages and tours to popular European and exotic destinations such as Greece, Egypt, Tunisia, Turkey, Morocco, Italy, Bulgaria, and more. The website provides a comprehensive catalog of travel options including last minute and first minute deals, family vacations, and premium travel experiences. The company targets a broad audience including families, seniors, and adult travelers seeking quality holiday options. Technically, the website is built using modern web technologies including React and Next.js, with integrations for analytics and cookie consent management. The site is mobile optimized and provides a good user experience with clear navigation and search capabilities. Security-wise, the site enforces HTTPS and uses asynchronous script loading, but lacks some security headers and explicit security policies. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and business presence suggest legitimate operations. Privacy compliance is partial, with cookie consent implemented but no clear privacy or terms of service pages found. Overall, the site is professional and trustworthy but would benefit from improved transparency and security practices.

T

TUI Poland Sp. z o.o.

tui.cz

66

TUI Poland Sp. z o.o. operates the website www.tui.cz as a leading travel agency offering a wide range of all inclusive and last minute vacation packages, tours, and charter flights to popular destinations worldwide. The company positions itself as the number one travel agency in Europe, targeting general consumers seeking organized travel experiences. The website is professionally designed with good content quality and consistent branding, supported by official social media channels and a clear customer service contact number. Technically, the website leverages modern web technologies including React and Next.js frameworks, with integrations for Cookiebot for cookie consent management, Google Analytics, and Hotjar for analytics and user behavior tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. Performance is moderate, with a comprehensive set of meta tags and structured data enhancing search engine visibility. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. Cookie consent mechanisms are implemented in compliance with GDPR, and privacy policies are comprehensive and accessible. However, the absence of WHOIS data and lack of explicit security policy or incident response information represent gaps in transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance. Improving accessibility and adding a terms of service page would further strengthen the user experience and legal posture.

Š

Škoda Auto a.s.

skodaplus.cz

73

Škoda Plus is a certified used car sales program operated by Škoda Auto a.s. in the Czech Republic, offering quality-assured used vehicles through authorized dealers. The website presents a professional and well-structured platform with comprehensive information about the program, vehicle offerings, financing, and insurance options. Technically, the site uses modern web technologies including React and Next.js, with integration of Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and nonce attributes on scripts, although some security headers and explicit policies are missing. Privacy and cookie policies are present and GDPR compliant. The absence of WHOIS data limits domain trust assessment, but the branding and content strongly indicate legitimacy. Overall, the site is well-designed, user-friendly, and trustworthy for its target audience.

D

Direct Family s.r.o.

direct-technologies.cz

65

Direct technologies is a Czech Republic-based technology company operating as part of the Direct Family group. The company focuses on delivering agile, innovative, and reliable technology solutions in partnership with business units, leveraging modern technologies and data insights to build functional business systems. Their market position is that of a medium-sized technology partner supporting sectors including insurance, automotive, fintech, and non-profit foundations. The website demonstrates a professional digital presence with good content quality and modern technical infrastructure, including React and Next.js frameworks and AWS S3 for media hosting. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not published. The absence of WHOIS data limits domain legitimacy verification, but the overall business credibility and trust indicators are strong.

D

Direct Investments

directinvestments.cz

66

Direct Investments is a Czech investment group specializing in building and managing a portfolio of companies primarily in the insurance, mobility, finance, and technology sectors. The group emphasizes Czech ownership and control, aiming to create trustworthy and sustainable businesses. Their market position is strong with over one million clients and a significant annual turnover. The website presents a professional image with clear information about subsidiaries and investment opportunities. Technically, the website is built using modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. The presence of Google Tag Manager and cookie consent mechanisms indicates a moderate level of digital maturity and privacy awareness. However, some improvements could be made in accessibility and security headers. From a security perspective, the site uses HTTPS and has basic privacy mechanisms, but lacks visible security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data reduces transparency and trustworthiness from a domain registration standpoint. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security disclosures and domain registration transparency to improve its risk profile and compliance posture.

D

Direct pojišťovna a.s. spółka akcyjna oddział w Polsce

directubezpieczenia.pl

65

Direct ubezpieczenia is a Polish branch of the Czech insurance company Direct pojišťovna a.s., offering modern and transparent insurance solutions primarily in the automotive, property, and travel sectors. With over 300,000 clients in Poland and a decade of experience, the company emphasizes simplicity, fast claims processing, and customer-friendly service. The business model leverages direct sales and agent networks, with claims and customer service managed by UNEXT sp. z o.o., a trusted partner in Poland. The website reflects a professional and consistent brand image, targeting individual and corporate clients in Poland.

D

Direct Fidoo Payments s.r.o.

fidoo.com

69

Fidoo is a Czech-based financial technology company specializing in corporate expense management solutions. Their platform offers business clients a combination of prepaid Mastercard corporate cards and a comprehensive expense management application that streamlines payment approvals, receipt digitization, and reporting. The company positions itself as a modern, digital-first alternative to traditional expense handling, targeting medium-sized businesses and enterprises seeking efficiency and transparency in financial operations. The website reflects a mature digital presence with strong branding and customer testimonials, indicating a solid market position within the Czech Republic and potentially broader European markets. Technically, the website is built on modern web frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates Google Tag Manager for analytics and marketing. The platform supports mobile optimization and accessibility, with clear SEO practices and fast performance. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data is a notable gap, potentially due to privacy protection or domain registration issues, which slightly impacts trustworthiness. However, the website's content, regulatory references, and Mastercard licensing provide strong legitimacy signals. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, Fidoo presents a professional, secure, and user-friendly platform for corporate expense management, with recommendations to enhance transparency around security policies and domain registration details to further strengthen trust and compliance.

D

Direct nadace

directnadace.cz

66

Direct nadace is a Czech non-profit foundation established in 2010, originally as Nadace VIGO, focusing on social inclusion, youth development, amateur sports, volunteerism, and emergency response. It operates under the Direct group umbrella, leveraging business resources to create social impact. The website is modern, well-designed, and mobile-optimized, built on Next.js and React with media hosted on AWS S3. Privacy and cookie policies are implemented with consent management tools. Security posture is strong with HTTPS and security headers, though no explicit security or incident response policies are published. WHOIS data is unavailable, which slightly impacts trust but the website content and external references support legitimacy.

D

Direct Group, s.r.o.

directgroup.eu

64

Direct Group, s.r.o. is a large Czech financial and technology group operating multiple subsidiaries in insurance, payment services, and investments. The company serves both individual and business clients, emphasizing simplicity, speed, reliability, and friendliness in its offerings. The website reflects a mature and professional digital presence with a modern tech stack based on Next.js and React, and uses third-party services such as CookiePro for cookie consent and Google Tag Manager for analytics. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security policies. Privacy compliance is basic, with cookie consent implemented but no clear privacy or terms of service pages found. Overall, the site is well-branded, consistent, and trustworthy, though improvements in transparency and security documentation are recommended.

C

Cornerstone OnDemand

csod.com

74

Cornerstone OnDemand operates a leading AI-powered human capital management platform designed to empower workforce agility and talent development globally. The company serves a large enterprise customer base with comprehensive solutions including learning management, talent management, compliance, and workforce intelligence. Their market position is strong, supported by numerous industry awards and analyst recognitions. Technically, the website is built on modern frameworks such as Next.js and React, with advanced animations and integrations with marketing and analytics tools like Marketo and Google Tag Manager. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though explicit incident response and vulnerability disclosure policies are not publicly detailed. Overall, the website reflects a mature, professional, and trustworthy enterprise digital presence.

K

KLUDI

kludi.com

64

KLUDI is a well-established German manufacturing company specializing in high-quality bathroom and kitchen fixtures, combining nearly a century of engineering expertise with innovative design. The website reflects a professional digital presence built on modern technologies such as React, Next.js, and Ant Design, hosted with Cloudflare DNS services. While the site is visually appealing and mobile-optimized, it lacks explicit privacy and cookie policies, as well as visible contact information, which are important for compliance and user trust. Security posture is generally good with HTTPS enabled and domain transfer protections, but could be improved by implementing DNSSEC and security headers. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

Gas.be is a Belgian collaborative platform dedicated to promoting the use of renewable and green gases in household, mobile, and industrial sectors. The organization plays a pivotal role in supporting the energy transition by providing up-to-date information, studies, and practical solutions such as hybrid heating systems and bio-LNG for transport. The website is professionally designed, content-rich, and targets a broad audience including consumers, industry professionals, and policymakers in Belgium. Technically, the site leverages modern frameworks like Next.js and React, and uses Storyblok CMS for content management, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS and security headers implemented, though the site lacks visible cookie consent mechanisms and published security policies. WHOIS data is restricted due to registry policies, but the website's professional presentation and partner ecosystem support its legitimacy. Overall, Gas.be is a credible and authoritative source in the renewable gas sector in Belgium.

H

Najděte si skvělého terapeuta — Hedepy online terapie

hedepy.cz

10

Hedepy.cz is an established online therapy platform founded in 2020, offering clients access to a wide network of vetted therapists primarily in the Czech Republic and other European countries. The platform emphasizes personalized therapist matching and provides a mobile app for convenient access to therapy sessions. With over 50,000 clients served and 700+ therapists, Hedepy positions itself as a trusted player in the online mental health space. The website content is professionally designed, mobile-optimized, and includes positive client testimonials and insurance partnerships, enhancing its credibility. Technically, the website leverages modern web technologies including React and Next.js, hosted on Vercel, with integrated error monitoring via Sentry and analytics through Google Tag Manager. The platform supports multiple languages and regional domains, indicating a mature digital infrastructure. Performance and SEO optimizations are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses monitoring tools but lacks visible security headers and published security policies or incident response contacts. Privacy and cookie policies are not clearly accessible, which is a compliance gap. No vulnerabilities or suspicious domains were detected, and no WAF or blocking mechanisms interfere with content access. Overall, Hedepy.cz demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

T

Testuj.to s.r.o.

testuj.to

71

Testuj.to s.r.o. operates a Czech Republic-based marketing platform that leverages micro-influencer communities to provide authentic product testing and reviews. The platform enables users to test products for free or at discounted prices and share their experiences to assist other consumers and product manufacturers. The company positions itself as the largest tester community in the Czech market, focusing on user-generated content as a marketing tool. Technically, the website is built on a modern React and Next.js stack, integrating multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates good mobile optimization, SEO practices, and security posture with HTTPS and security headers properly configured. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information and social media presence enhancing trust. However, the site lacks a publicly available security policy and incident response information, which could improve transparency and security readiness. Overall, the website is professional, trustworthy, and well-positioned in its niche, with moderate to good technical maturity and security practices.

O

Ottobock

ottobock.sk

71

Ottobock is a globally recognized leader in the healthcare sector specializing in prosthetics, orthotics, and mobility solutions. The company offers a broad range of innovative products and services aimed at improving the quality of life for individuals with physical disabilities. Their market position is strong, supported by a century-long history and ISO certifications, targeting healthcare professionals, patients, and rehabilitation centers worldwide. The website is professionally designed, multilingual, and optimized for mobile users, reflecting a mature digital presence. Technically, the website leverages modern frameworks such as React and Next.js, combined with analytics and optimization tools like Google Analytics and Visual Website Optimizer. The site demonstrates good performance, accessibility, and SEO practices, ensuring a positive user experience. Security measures include HTTPS enforcement and standard security headers, although there is room for improvement in publishing explicit security policies and incident response information. From a security perspective, the site shows a solid posture with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism, aligning with GDPR requirements. However, the absence of WHOIS data and public security disclosures slightly lowers the trust score. Overall, Ottobock's website is a trustworthy and professional platform that effectively supports its business objectives. Strategic recommendations include enhancing transparency around security policies and incident response, and improving WHOIS data visibility to strengthen domain trustworthiness.

Střední škola zemědělská a přírodovědná Rožnov pod Radhoštěm is a well-established secondary educational institution in the Czech Republic with over 120 years of tradition. The school specializes in agricultural and natural science education, offering comprehensive programs including practical training, student accommodation, and canteen services. It serves students, parents, and applicants primarily within the region and operates under the governance of the Zlínský kraj. The website reflects a professional and consistent brand image with clear contact information and access to official documents.

V

Vimeo Livestream

livestream.com

62

Vimeo Livestream is a mature and reputable enterprise-level live streaming platform owned by Vimeo, Inc., providing comprehensive live video streaming, hosting, and monetization services. The company targets businesses and organizations seeking scalable and professional live streaming solutions for events, webinars, and corporate communications. Their market position is strong, leveraging Vimeo's brand and infrastructure to deliver high-quality streaming experiences. Technically, the website employs modern frameworks such as React and Next.js, hosted on AWS infrastructure, with excellent performance and mobile optimization. Security posture is robust with HTTPS, security headers, and domain protections, although explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, supporting Vimeo Livestream's position as a leading live streaming service provider.

B

Buttondown

buttondown.com

63

Buttondown is a small, independent SaaS company specializing in newsletter software designed for individuals, creators, and businesses seeking a simple, privacy-focused, and reliable email platform. Founded in 2017 by Justin Duke, it positions itself as a customer-centric alternative to larger email marketing platforms, emphasizing ease of use, automation, and long-term commitment to users. The platform offers features such as markdown support, API access, paid subscriptions, and concierge migration services, catering to a broad audience from hobbyists to enterprise users. Technically, Buttondown leverages a modern web stack including React and Next.js, hosted on Vercel, with integrations for analytics and payment processing via Stripe. The website is well-optimized for performance, mobile responsiveness, and SEO, with a clean, professional design and clear navigation. Security best practices are observed with HTTPS enforcement and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. From a security and compliance perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by a comprehensive privacy policy and GDPR adherence, although a cookie consent mechanism is absent. The WHOIS data indicates domain privacy proxy usage, which is justified for this business type, and the domain is well-established with a long registration period. Overall, Buttondown presents a trustworthy and professional online presence with room for minor improvements in transparency and cookie management. Strategically, Buttondown should focus on enhancing privacy compliance by implementing cookie consent, publishing security policies, and enabling DNSSEC to further strengthen trust and security posture. These steps will support its market position as a reliable and user-friendly newsletter platform in a competitive landscape.

R

RoboRobo Chat Widget

roborobo-widget.hu

53

The website roborobo-widget.hu represents a newly launched chat widget product, likely targeting businesses or website owners seeking chat integration solutions. The domain was registered recently in April 2024, indicating a startup or new product launch. The site is built using modern web technologies such as Next.js and React, suggesting a contemporary technical infrastructure. However, the website content is minimal, lacking business details, contact information, and policy documents, which limits its credibility and user trust. From a security perspective, the site does not exhibit any blocking mechanisms or WAF challenges, and HTTPS is presumably enabled though no explicit security headers were detected. The absence of privacy and cookie policies, as well as contact channels for incident response, indicates gaps in compliance and security posture. No analytics or advertising scripts were found, which reduces privacy concerns but also limits marketing insights. Overall, the website scores low to moderate on content quality, technical implementation, security, privacy compliance, and business credibility. The lack of transparency and minimal content are key weaknesses. Strategic improvements in policy publication, contact availability, and security hardening are recommended to enhance trust and compliance.

B

Buttondown

buttondown.email

63

Buttondown is a small, independent technology company providing a focused SaaS newsletter platform designed for creators and businesses seeking simplicity and reliability in email communication. Founded in 2017, it offers key services such as email newsletter creation, subscriber management, analytics, API access, and paid subscription handling. The platform emphasizes user success, privacy, and long-term commitment, distinguishing itself with a minimalist design and strong customer support. Technically, Buttondown leverages modern web technologies including React and Next.js, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, Buttondown presents a trustworthy, professional, and user-centric service with high customer satisfaction and a clear market niche.

F

Fishmonger

fishmonger.hu

57

Fishmonger.hu is a Hungarian seafood retail and wholesale business offering fresh fish, fillets, shellfish, and related products through multiple physical locations and an online webshop. The company emphasizes freshness, quality, food safety, and sustainability, serving both consumers and businesses in Hungary. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for marketing and analytics tools like Google Tag Manager and Facebook Pixel, managed with GDPR-compliant cookie consent via Cookiebot. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-structured, supporting a medium-sized business with a strong market position in the Hungarian seafood sector.

R

Rossmann Magyarország Kft.

rossmann.hu

71

Rossmann Magyarország Kft. operates a comprehensive online drugstore platform offering a wide range of products including cosmetics, personal care, and household items. The company holds a strong market position in Hungary as a leading retailer with a well-established brand and parent company support from Dirk Rossmann GmbH. The website demonstrates a mature technical infrastructure leveraging modern frameworks such as Next.js and React, integrated with advanced analytics and marketing tools like Google Tag Manager and Cookiebot for GDPR compliance. Security posture is robust with HTTPS enforcement, security headers, and bot protection via reCAPTCHA, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the platform is professional, trustworthy, and compliant with relevant privacy regulations.

K

Könyvtárellátó Nonprofit Kft.

pedig.hu

54

The website pedig.hu serves as the official platform for the Pedagógus Igazolvány, a service operated by Könyvtárellátó Nonprofit Kft. It provides Hungarian educators with a digital means to register, manage, and utilize their teacher identification cards to access discounts and cultural benefits. The platform includes a web portal and mobile applications for iOS and Android, enhancing accessibility and user convenience. The site is well-branded, consistent, and targets educators in Hungary with a nonprofit service model. Technically, the website is built using modern web technologies including Next.js and React, ensuring a responsive and performant user experience. The site is mobile-optimized and includes essential SEO and accessibility features, although some accessibility enhancements could be made. The hosting provider is not explicitly identified, but the site uses HTTPS with excellent SSL configuration. From a security perspective, the site enforces HTTPS and secure user registration/login flows. However, it lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is available via a dedicated contact page, though no direct emails or phone numbers are visible on the homepage. Overall, pedig.hu presents a trustworthy, professional, and secure platform for its target audience. Strategic recommendations include implementing security headers, publishing a vulnerability disclosure policy, enhancing accessibility, and maintaining regular security audits to sustain and improve the security posture.

D

Digital Thinkers

digitalthinkers.com

63

Digital Thinkers is a well-established digital innovation company founded in 1999, specializing in designing and delivering innovative digital solutions tailored to client needs. Their market position is supported by a strong portfolio of projects and client testimonials, targeting businesses seeking digital transformation and product development services. The website demonstrates a modern technical infrastructure leveraging Next.js, React, and Cloudflare DNS, with good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA on forms, and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic but present, with a privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and business credible.

K

KOOP a.s.

kooperativa.cz

67

KOOP a.s. is a well-established energy company based in the Czech Republic, specializing in electricity and gas supply for both residential and commercial customers. The company has a solid market position supported by a long domain registration dating back to 1992, indicating a mature and stable business. Their website reflects a professional and consistent brand image, targeting primarily Czech households and businesses with sustainable energy solutions. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and moderate performance. Security posture is strong with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, KOOP a.s. demonstrates a credible and trustworthy online presence with a good balance of business professionalism and technical maturity.

W

webit! Gesellschaft für neue Medien mbH

webit.de

11

webit! Gesellschaft für neue Medien mbH is a well-established full service digital agency based in Dresden, Germany, founded in 1997. The company specializes in providing comprehensive digital solutions including strategy and consulting, UX/UI design, development, and operations, targeting primarily mid-sized enterprises. Their market position is strong, supported by partnerships with leading CMS and marketing platforms such as TYPO3, Sitecore, Ibexa, Kentico, and Storyblok. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the site leverages modern frameworks like Next.js and React, hosted on Vercel, and integrates advanced CMS and marketing automation tools.

B

beckapp solutions s.r.o.

beckapp.solutions

10

beckapp solutions s.r.o. is a small technology service provider based in Prague, Czech Republic, specializing in design, coding, and ongoing support for web and application development projects. The company targets businesses seeking tailored IT solutions and emphasizes client-specific, secure, and user-friendly software. Their market position is that of a niche provider with a focus on quality and client satisfaction, supported by testimonials from notable clients. Technically, the website is built using modern frameworks such as Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS enforced and secure forms, but lacks explicit security headers and published privacy or cookie policies. The WHOIS data is privacy protected, which is common and justified for this business type, though it limits transparency. Overall, the website is professional and trustworthy, but could improve compliance and security transparency.

D

Digital Thinkers

dtapp.hu

63

Digital Thinkers is a well-established digital innovation company founded in 1999, specializing in designing and delivering innovative digital solutions tailored to business needs. Their market position is supported by a strong portfolio of projects and client testimonials, targeting businesses seeking digital transformation and product development services. Technically, the website leverages modern frameworks such as Next.js and React, with Cloudflare providing DNS and CDN services, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is basic with a privacy policy and cookie consent banner present, but lacks detailed GDPR compliance indicators. Overall, the website demonstrates high professionalism and trustworthiness with room for enhanced transparency in security and contact information.

M

Moravio s.r.o.

moravio.com

68

Moravio s.r.o. is an established international software development agency specializing in custom software, AI, data analytics, and digital transformation services. With over 14 years in the market and more than 120 projects completed, Moravio serves a broad audience from startups to Fortune 500 companies. Their service portfolio includes software development, AI software, product development, technical due diligence, and software support, positioning them as a comprehensive digital solutions provider. The company is headquartered in Ostrava, Czech Republic, and demonstrates strong market presence through client testimonials, awards, and official memberships. Technically, the website leverages modern technologies such as React, Next.js, Node.js, TypeScript, and various AI frameworks including ChatGPT and LangChain. The site is built on Webflow CMS, hosted on Webflow's platform, and integrates advanced analytics and marketing tools like Google Tag Manager and LinkedIn Insight. The website is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs security headers, integrates Google reCAPTCHA, and follows best practices for secure forms and data handling. However, explicit security policies and incident response information are not publicly available, indicating room for improvement in transparency and preparedness. The WHOIS data is unavailable, likely due to privacy protection, which is common for businesses of this nature but introduces minor uncertainty regarding domain registration details. Overall, Moravio presents a professional, trustworthy, and technically sound online presence with strong business credibility. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing accessibility features to further strengthen their security posture and compliance standing.

I

Innovasjon Norge

innovationnorway.no

60

Innovasjon Norge is a Norwegian government agency dedicated to fostering sustainable growth and export opportunities for Norwegian businesses. The organization provides comprehensive support services including advisory, capital funding, and networking to entrepreneurs and companies at various stages such as starting, scaling, internationalizing, and renewing their business models. The website reflects a strong market position as a key national innovation facilitator with a clear focus on sustainability and international growth. Technically, the website is built on modern frameworks such as Next.js and React, ensuring a responsive and accessible user experience. The site employs best practices in SEO, accessibility, and performance optimization, with a well-structured layout and clear navigation. The presence of a cookie consent mechanism and privacy policy indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS, implements security headers, and avoids exposing sensitive data. However, explicit security policies and incident response information are not publicly available, and no vulnerability disclosure program is evident. Overall, the security posture is strong but could benefit from enhanced transparency and formalized disclosure mechanisms. The domain WHOIS data is not publicly available due to Norwegian registry privacy policies, but the domain and website content strongly indicate legitimacy as the official site of Innovasjon Norge. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences.

Alkotó Energia operates a Hungarian-language online magazine focused on sustainability, conscious living, recycling, and eco-friendly lifestyle topics. Founded in 2018, the site targets environmentally aware individuals interested in practical and inspirational content about sustainable home living and circular economy principles. The business positions itself as a niche media outlet within the energy and sustainability sector in Hungary, offering articles, videos, and publications to engage its audience. Technically, the website is built using modern web technologies including React and Next.js frameworks, supported by a custom CMS. The site demonstrates good mobile optimization and SEO practices, with integration of Google Fonts and social media SDKs. Performance is moderate, with room for improvement in accessibility features and security headers. From a security perspective, the site enforces HTTPS and uses standard tracking tools like Google Tag Manager and Facebook SDK. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. Overall, the website is professionally designed, trustworthy, and aligned with its business goals. The security posture is adequate but could be enhanced by adding security headers and formal incident response information. The domain registration data supports the legitimacy of the business, with consistent registration details and no privacy protection masking ownership.

Tesco Stores ČR a.s. operates a comprehensive retail supermarket website for the Czech Republic market, offering online grocery shopping, loyalty programs (Clubcard), promotional offers, recipes, and store locator services. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated analytics, and user-friendly features including cookie consent and privacy policies. The site is well-branded, professionally designed, and optimized for mobile and accessibility standards. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS data from the CZ NIC WHOIS server limits domain registration transparency, but the website content and corporate links support legitimacy. Overall, the site is a reliable and professional retail platform serving a large customer base in the Czech Republic.

E

Entradio

entradio.cz

55

Entradio is a Czech-based ticketing system platform offering comprehensive solutions for ticket sales, reservations, discounts, goods and services sales, and multiple payment options. The platform targets a wide range of event organizers including theaters, cultural centers, museums, sports events, transportation, and festivals. Entradio positions itself as a flexible and user-centric system with integrated marketing and payment capabilities. The website is built on modern web technologies such as React, Next.js, and Material-UI, providing a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS usage and secure forms, but lacks explicit security headers and published security policies. WHOIS data is unavailable, indicating privacy protection which slightly reduces transparency but is common for small to medium businesses. Overall, Entradio presents a professional and trustworthy platform with room for improvement in privacy compliance and security transparency.

G

GetResponse

getresponse.com

72

GetResponse is a well-established marketing automation platform founded in 1998, headquartered in Poland. It offers a comprehensive suite of tools including email marketing, landing pages, webinars, SMS marketing, and AI-driven product recommendations. The company targets entrepreneurs, ecommerce stores, and global brands, boasting over 350,000 customers worldwide. The website reflects a mature digital presence with modern technologies such as Next.js, React, and integration with analytics and consent management tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The missing WHOIS domain registration data slightly reduces trust but is mitigated by strong branding and external trust signals. Overall, GetResponse presents a professional, secure, and privacy-conscious platform with room for improvement in transparency around security policies.

A

Artslimit

artslimit.com

58

Artslimit is a prominent Czech online auction platform specializing in curated auctions of luxury and collectible items such as fine art, historic automobiles, and designer handbags. It holds a leading market position in the Czech Republic with a focus on authenticated and exceptional lots, providing a seamless and engaging bidding experience for its users. The platform supports live auctions and offers a user-friendly interface optimized for desktop and mobile devices. Technically, the website is built using modern web technologies including React and Next.js, ensuring dynamic content delivery and good performance. Integration with Google Tag Manager facilitates marketing and analytics tracking. The site employs HTTPS for secure communications but lacks some advanced security headers, which could be improved to enhance security posture. From a security and compliance perspective, Artslimit demonstrates good privacy practices with comprehensive GDPR-compliant privacy and cookie policies and a clear terms of service. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. No direct contact emails or phone numbers are provided, which may impact user trust and support accessibility. Overall, Artslimit presents a professional and trustworthy platform for online auctions in its niche, but it should address domain registration transparency and enhance security headers to strengthen its security posture and business credibility.

D

Dot Creative

dotcreative.hu

57

Dot Creative is a Hungarian creative agency established in 2018, specializing in digital design, branding, and marketing services. The company targets businesses and professionals seeking innovative digital presence solutions. The website reflects a modern, professional design with clear navigation and strong branding consistency. The technical infrastructure is based on Next.js and React, indicating a modern and performant digital platform. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not found. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, the website presents a trustworthy and professional business presence with minimal risk exposure.