Security Directory

O

Office eurométropolitain de tourisme, des loisirs et des congrès de Strasbourg

visitstrasbourg.fr

56

The website www.visitstrasbourg.fr serves as the official online presence of the Office eurométropolitain de tourisme, des loisirs et des congrès de Strasbourg, a public tourism office dedicated to promoting Strasbourg and its surrounding region. It provides comprehensive information on local attractions, events, leisure activities, and offers services such as the Strasbourg City Card. The site targets tourists, visitors, and event attendees, positioning itself as a key regional tourism resource. The business model is primarily informational and promotional, supported by public funding and tourism-related services. Technically, the website is built on the WordPress CMS platform, utilizing the Elementor page builder and several plugins including Rank Math SEO and GDPR cookie consent tools. The infrastructure supports modern web standards with responsive design, SEO optimization, and moderate performance. The site integrates tracking and analytics tools such as Google Analytics and Facebook Pixel, with user consent mechanisms in place to comply with GDPR. From a security perspective, the website enforces HTTPS, employs standard security headers, and implements cookie consent banners. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a security.txt file and explicit incident response contacts suggests room for improvement in vulnerability disclosure and incident management readiness. Overall, the website presents a professional, trustworthy, and user-friendly platform for tourism promotion. The lack of publicly available WHOIS data for the domain slightly reduces transparency but does not detract significantly from the site's legitimacy. Strategic recommendations include enhancing accessibility, publishing security policies, and establishing formal vulnerability disclosure channels to further strengthen security posture and user trust.

U

Univention GmbH

univention-summit.de

52

Univention GmbH organizes the Univention Summit, a prominent open source event in Germany focused on digital sovereignty, IT trends, and community networking. The summit attracts IT service providers, software manufacturers, public sector officials, and educators from Germany and Europe. The website presents a professional, well-branded platform with detailed information about the event, speakers, partners, and registration. Technically, the site is built on WordPress with modern plugins and uses Matomo for privacy-conscious analytics. Security posture is good with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy and cookie policies are clearly stated with consent mechanisms, indicating GDPR compliance. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

B

Bowling Zone

bowlingzone.cz

51

Bowling Zone is a small hospitality and entertainment business based in Liberec, Czech Republic, specializing in bowling and related leisure activities. The company offers professional bowling lanes, certified coaching, and additional entertainment options such as pinball and darts, targeting families, friends, and corporate groups. Their website is built on WordPress with a modern tech stack including Bootstrap and various plugins for enhanced user experience and functionality. The site supports online reservations and newsletter subscriptions, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks some security headers and a published privacy policy, which are areas for improvement. Overall, the business presents a trustworthy and professional online presence with room to enhance compliance and security practices.

B

Bartoň Studio s.r.o.

bartonstudio.cz

65

Bartoň Studio s.r.o. is a Czech-based company specializing in custom and pre-built e-commerce solutions tailored for B2B and B2C online businesses. Positioned as an expert e-commerce development studio in Plzeň, the company offers services focused on creating performant, user-friendly online shops with a strong emphasis on design and technical quality. The website reflects a professional digital presence using WordPress CMS with the Divi theme, integrating common marketing and analytics tools such as Google Analytics, Hotjar, and Google Tag Manager. Security measures include HTTPS enforcement, security headers, and reCAPTCHA for form protection, alongside a cookie consent mechanism indicating some privacy compliance awareness. However, the absence of a dedicated privacy policy and terms of service pages represents a compliance gap that should be addressed.

L

LepsiPrace.cz

lepsiprace.cz

44

LepsiPrace.cz is an online job portal primarily targeting job seekers and employers in the Czech Republic. The platform offers job listings and candidate services, leveraging WordPress CMS with specialized job board plugins. The website demonstrates a good level of content quality and user experience, with a professional design and clear navigation. However, the absence of publicly available WHOIS data limits the ability to verify domain legitimacy and registrant details, which impacts overall trust. Technically, the site uses modern web technologies and performance optimization plugins but lacks visible security headers and comprehensive privacy or terms of service documentation. The cookie consent mechanism is present, indicating some level of privacy compliance. Security posture is moderate but could be improved by implementing standard security headers and incident response information. Overall, the site is functional and relevant for its target audience but would benefit from enhanced transparency and security practices.

J

JAVI solutions s. r. o.

javi.sk

42

JAVI solutions s. r. o. is a Slovakia-based technology company specializing in comprehensive information system solutions including business intelligence, internet solutions, software development, and ongoing support. The company targets businesses seeking integrated and customized IT solutions to optimize their internal processes and customer reach. Their market position is that of a niche provider with a focus on tailored software and system integration services. Technically, the website is built on a modern stack including Debian, MySQL, PHP, Java, and front-end technologies like Bootstrap and jQuery. The site uses a custom CMS (BiS/WEB 1.0.2 rc) and integrates Google Analytics and Tag Manager for tracking. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v2 to protect forms. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. Cookie consent is implemented, but privacy policy and terms of service are missing, which impacts compliance and user trust. Overall, the website is professional and trustworthy with a good security baseline but would benefit from enhanced privacy and security disclosures. The domain registration data aligns well with the company identity, supporting legitimacy. Strategic improvements in security headers, privacy documentation, and incident response readiness are recommended to strengthen the security posture and compliance.

Z

Zako Slovakia, s. r. o.

zakobowling.com

45

Zako Slovakia, s. r. o. operates the website zakobowling.com, providing services and products related to the realization, reconstruction, and maintenance of skittles and bowling lanes. The company also offers an e-commerce platform selling spare parts and accessories for these sports. The business targets sports centers and enthusiasts primarily in Slovakia, positioning itself as a niche regional provider with a small business scale. The website is multilingual, supporting Slovak and several other European languages, enhancing accessibility for a broader audience. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO for search optimization, TranslatePress for multilingual support, and Moove GDPR Cookie Compliance for privacy management. Hosting is provided by Websupport, indicated by the domain's nameservers. The site demonstrates moderate performance and basic mobile optimization, with a functional but basic design and navigation structure. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, aligning with GDPR requirements. However, it lacks DNSSEC, security headers, and published security or incident response policies, which are areas for improvement. No critical vulnerabilities or malicious content were detected. The domain registration is consistent and legitimate, though the domain is relatively new compared to the website's content history, suggesting a possible domain migration or re-registration. Overall, the website presents a functional and moderately secure platform for its business operations but would benefit from enhanced privacy disclosures, security hardening, and more comprehensive contact information to improve trust and compliance.

O

Olomoucká Jízdárna s.r.o.

olomouckajizdarna.cz

37

Olomoucká Jízdárna s.r.o. operates a restaurant and event venue located in Olomouc, Czech Republic, specializing in Czech and international cuisine with a focus on quality ingredients and fresh food. The business targets local residents and event organizers, offering services such as dining, birthday celebrations, weddings, and corporate parties. The website is built on WordPress with modern plugins like LayerSlider and Slider Revolution, hosted likely by Webglobe. The site is well-designed, mobile-optimized, and provides clear contact information and social media links, supporting moderate trustworthiness. However, it lacks privacy and cookie policies, which impacts GDPR compliance and privacy posture.

D

dentum.cz

dentum.cz

48

Dentum.cz is a professional private dental laboratory based in Brno, Czech Republic, specializing in dental prosthetics including ceramic and metal-ceramic works, implant-related prosthetics, and rehabilitation aids. The company has a strong local presence with over 30 years of experience and close collaboration with the Faculty Hospital Brno and Masaryk University. Their website reflects a well-structured business offering with clear contact information and service descriptions. Technically, the site is built on WordPress using modern plugins and frameworks such as Bootstrap and jQuery, with SEO optimizations and Google reCAPTCHA implemented for form security. However, the absence of a visible privacy policy and cookie consent mechanism indicates partial privacy compliance. Security posture is good with HTTPS and spam protection but lacks some HTTP security headers. WHOIS data is unavailable, which slightly reduces domain trustworthiness but the website content and contact details support legitimacy.

S

Salesiánské kluby mládeže, z. s.

skm.cz

52

Salesiánské kluby mládeže (SKM) is a Czech non-profit organization dedicated to youth development through clubs, educational programs, and community activities inspired by the pedagogical principles of Don Bosco. The organization operates multiple regional clubs across the Czech Republic, offering courses for animators, summer camps, and various youth engagement activities. The website reflects a well-structured and content-rich platform supporting their mission with clear contact information and published strategic documents. Technically, the website is built on WordPress with Bootstrap and jQuery, employing modern SEO practices and responsive design. It uses Smart Slider 3 for interactive content and integrates Google Analytics for visitor tracking. The site is served over HTTPS, ensuring encrypted communication, but lacks some advanced security headers and a formal privacy policy page. From a security perspective, the site demonstrates basic good practices such as HTTPS and cookie consent but could improve by implementing additional security headers and providing a vulnerability disclosure mechanism. The absence of WHOIS data reduces domain trustworthiness, though the presence of official registration numbers and consistent branding supports legitimacy. Overall, SKM's website is a credible and professional platform for a medium-sized non-profit organization focused on youth education and community engagement. Strategic improvements in security and privacy documentation would enhance trust and compliance.

D

DeepO

deepo.swiss

38

DeepO is a Swiss-based technology company offering an advanced AI-powered data capture solution that automates document processing and data extraction. Positioned as an industry leader, DeepO targets businesses seeking to reduce manual data entry and streamline document workflows. The website demonstrates a mature digital presence with multilingual support, professional design, and integration within a broader ecosystem of related DeepCloud services. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and reCAPTCHA usage, though some HTTP security headers could be improved. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy or terms of service pages detected. WHOIS data is privacy protected, common for Swiss domains, and does not raise immediate concerns. Overall, DeepO presents a credible and professional business with a solid technical foundation and trustworthy online presence.

S

SPA Studio

spa-studiocz.com

62

SPA Studio is a medium-sized retail business specializing in luxury family hot tubs, swim spas, wellness, and sauna products, primarily serving the Czech and Slovak markets. The company operates multiple physical showrooms and provides expert advice, service, and maintenance, positioning itself as the exclusive dealer for Canadian Spa International® products in the region. The website is professionally designed, content-rich, and optimized for user experience and mobile devices. Technically, it leverages WordPress CMS with modern JavaScript libraries and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Smartlook for user behavior tracking. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism implemented. However, the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. Security posture is generally good with HTTPS enforced and privacy plugins in use, but lacks explicit security headers and published incident response or vulnerability disclosure policies. Overall, the website is trustworthy and professional but would benefit from enhanced transparency on domain registration and security policies.

S

SPA Studio

spa-studio.sk

54

SPA Studio is a specialized retailer focused on selling family whirlpools and hybrid pools with counter-current swimming features under the Canadian Spa International® brand. The company operates primarily in Slovakia and the Czech Republic, offering over 47 unique whirlpool models and 9 swim spa models. Their market position is strong as an exclusive distributor with multiple physical showrooms and a professional e-commerce presence. Technically, the website is built on WordPress with modern plugins and tracking tools, providing a fast and mobile-optimized user experience. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site is trustworthy, professional, and well-aligned with business goals.

O

Oceana

oceana.org

67

Oceana is a well-established non-profit organization dedicated to ocean conservation and advocacy, operating since 1995. It holds a strong market position as the largest international advocacy group focused solely on protecting the world's oceans. The website reflects a professional and consistent brand image, targeting a broad audience including environmental advocates and policymakers. The business model centers on advocacy, public education, and policy influence to drive ocean protection efforts. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and tracking tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Hosting and DNS services leverage Cloudflare, enhancing performance and security. The site is mobile-optimized with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and some advanced security headers are missing. No public security policy or incident response information is available, and no vulnerability disclosure program is evident. Overall, the security posture is solid but could be improved with additional headers and DNS security. The overall risk assessment is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include enabling DNSSEC, implementing a Content-Security-Policy header, and publishing security and incident response policies to enhance transparency and trust.

Awesome Without Borders is a small non-profit organization focused on providing weekly $1,000 no-strings-attached grants to support creative, social impact, and community projects. The website is built on WordPress using popular plugins such as Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site is well-branded and content-rich, targeting individuals and groups seeking funding for innovative ideas. Technically, the site uses HTTPS and Google Analytics for tracking, but lacks some advanced security features such as DNSSEC and security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website presents a trustworthy and professional image but could improve in security and privacy compliance areas.

U

Univention GmbH

univention-summit.com

56

Univention GmbH organizes the Univention Summit, a prominent open source event focused on digital sovereignty in government, education, and business sectors. The summit attracts IT service providers, software vendors, and users primarily from Germany and Europe, offering keynotes, panels, workshops, and an exhibition with numerous IT partners. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and uses Matomo analytics with user consent, indicating a good level of digital maturity. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not published. The absence of WHOIS data is a notable anomaly but does not detract from the overall professionalism and trustworthiness of the site. Strategic recommendations include publishing security and incident response policies and verifying domain registration status.

U

Univention GmbH

univention.de

57

Univention GmbH is a well-established German technology company specializing in open source Identity and Access Management (IAM) solutions, primarily targeting the education sector and public administration. With over 20 years of experience and managing 35 million identities, the company offers scalable, secure, and integrated IAM products such as Nubus, UCS@school, and UCS. Their business model focuses on providing software solutions, support, training, and integration services to organizations seeking digital sovereignty and efficient IT management. The website reflects a mature market position with strong trust signals and a professional presentation. Technically, the website is built on WordPress with modern plugins and tools including WPBakery Page Builder, Gravity Forms, and Matomo for analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive metadata and structured data enhancing discoverability. Privacy compliance is robust, featuring a cookie consent mechanism and a detailed privacy policy. The use of Matomo analytics indicates a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response page and does not provide a vulnerability disclosure or security.txt file. These gaps represent opportunities for improvement in transparency and readiness. Overall, the security posture is strong with no evident vulnerabilities or risks. The domain WHOIS data aligns well with the company's profile, showing consistent registration details and domain age appropriate for the business history. No privacy protection is used in WHOIS, which supports transparency. The website is fully accessible without WAF or blocking mechanisms, enabling thorough analysis. Strategic recommendations include publishing explicit security and incident response policies, establishing a vulnerability disclosure process, and providing data protection officer contact details to enhance compliance and trust. These steps will strengthen the company's security culture and customer confidence while maintaining its leadership in open source IAM solutions.

The website vykup-aut.cz operates as a service provider specializing in the purchase of used cars for cash across the Czech Republic. It positions itself as an experienced player with over 10 years in the market, targeting individuals and businesses seeking to sell their vehicles quickly and professionally. The business model is straightforward, focusing on offering competitive prices and a professional approach to car buying. The website content is primarily in Czech and tailored to the local market. Technically, the site is built on WordPress, utilizing common plugins such as Contact Form 7, Cookie Notice, and Slider Revolution. The site is served over HTTPS with a good SSL configuration, but lacks some advanced security headers. Performance is moderate, with good mobile optimization and basic accessibility features. SEO is supported by the All in One SEO plugin, and cookie consent mechanisms are in place, indicating some level of privacy compliance. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible security headers and detailed privacy policies. No direct contact information or incident response contacts are found, which could impact user trust and compliance. The WHOIS data is unavailable, suggesting privacy protection or lack of public registration details, which reduces transparency and trustworthiness. Overall, the website presents a professional and functional platform for used car buying in the Czech Republic but would benefit from enhanced transparency, security policies, and contact information to improve trust and compliance.

Sběratelské zbraně s.r.o. is a Czech Republic-based small retail business specializing in the sale of collectible firearms, primarily from the World War I and II eras. The company operates a niche market model focusing on individual customer consultations and custom orders, emphasizing personalized service rather than a traditional storefront. Their website reflects this business model with detailed product listings, contact information, and legal disclaimers. Technically, the site is built on WordPress using modern frameworks such as Foundation CSS and integrates Google Analytics and reCAPTCHA for analytics and security. While the site is well-structured and SEO-optimized, it lacks some advanced security headers and cookie consent mechanisms, which could be improved for better compliance and security posture. The absence of WHOIS data for the domain is a notable concern, reducing domain trustworthiness despite the professional appearance and clear business information on the site.

G

GoFox - Tecnologias de Informação

gofox.pt

54

GoFox - Tecnologias de Informação is a Portuguese technology company specializing in web design, development, and digital marketing services. With over 20 years of experience and a portfolio exceeding 1200 projects, GoFox positions itself as a trusted partner for businesses seeking tailored web solutions, including mobile applications, e-commerce platforms, and SEO optimization. The company emphasizes strategic vision and technical expertise to deliver measurable results for its clients. Technically, the website demonstrates a mature digital infrastructure leveraging modern technologies such as PHP, Django, React, and mobile development frameworks, hosted likely within the PTisp Partners Network. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of digital maturity. Security-wise, the website employs HTTPS, secure forms with CAPTCHA, and cookie consent mechanisms, though it lacks a publicly stated security policy or incident response contacts. Overall, GoFox exhibits a strong security posture with room for improvement in formal security disclosures. The domain registration data aligns well with the company's claims, reinforcing legitimacy. The website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the business.

U

UniWIRE Solution, s. r. o.

uniwire.cz

52

UniWIRE Solution, s. r. o. is a Czech-based small IT and security services company specializing in visual identity creation, installation of camera and security systems, electrical installations, and IT services. The company targets schools, businesses, and general clients seeking comprehensive IT and security solutions. Their market position appears regional with a focus on quality and reliability, supported by client references and a portfolio of completed projects. The website is built on WordPress using modern technologies such as Bootstrap and Smart Slider 3, with good mobile optimization and user experience. Security posture is solid with HTTPS and Google reCAPTCHA integration, though lacking some advanced security headers and formal privacy documentation. The absence of WHOIS data reduces domain trust but the website content and business information are professional and credible.

Dostihový spolek a.s. operates as a prominent horse racing organization based in Pardubice, Czech Republic, managing events such as the renowned Velká pardubická race. The company targets horse racing enthusiasts and visitors, providing event calendars, ticketing, and visitor information. The website reflects a medium-sized regional business with a focus on hospitality and transportation services related to horse racing events. Technically, the website is built on WordPress using modern plugins and themes, ensuring good mobile optimization and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

EQS magazín

eqsmagazin.cz

42

EQS magazín is a Czech-language online media platform dedicated to equestrian topics including horse care, nutrition, health, equipment, and interviews with riders and trainers. The website targets horse enthusiasts and riders primarily in the Czech Republic. It operates on a WordPress CMS infrastructure with common plugins and technologies such as Smart Slider 3, jQuery, Google Fonts, and Font Awesome. The site is well-structured with good content quality and consistent branding. Security posture is adequate with HTTPS enabled but lacks some security headers and formal privacy and cookie policies. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site is professional and safe for general audiences, with moderate tracking via Google Analytics.

F

Friedrich-Althoff-Konsortium e.V.

althoff-konsortium.de

54

The Friedrich-Althoff-Konsortium e.V. is a regional non-profit consortium serving scientific institutions in Berlin and Brandenburg, providing access to licensed electronic publications and scientific information. The website is hosted on WordPress.com, leveraging WordPress CMS and Jetpack for content management and analytics. The site is well-structured, primarily in German, with an English version available, targeting academic and research institutions. Security posture is moderate with HTTPS enabled but lacking explicit security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and compliance transparency.

A

ASPprofessionell.de e. K.

aspprofessionell.de

62

ASPprofessionell.de e. K. is a specialized hosting provider based in Germany, offering ASP, ASP.NET, and PHP hosting services with a focus on high availability and personalized customer support. Established in 1999, the company targets small to medium-sized enterprises and public institutions, emphasizing reliability and tailored hosting solutions. Their service portfolio includes Windows and Linux hosting, MS SQL Server support, backup systems, SSL and MIME certificates, domain registration, and SMS services. The website content is primarily in German and reflects a niche market position with a long-standing reputation.

E

Evolix SARL

evolix.com

61

Evolix SARL is a specialized French company founded in 2004, providing dedicated Linux and BSD server hosting, open source infrastructure management, and infogérance services primarily in Marseille, Paris, and Montréal. Their business model focuses on offering customizable dedicated servers, high availability hosting, disaster recovery solutions, and 24/7 managed services with expert support. The company maintains a strong market position as a niche provider with a multi-datacenter presence and their own network ASN, targeting businesses requiring reliable and secure open source hosting solutions. Technically, Evolix employs a mature infrastructure leveraging Linux/BSD systems, Debian GNU/Linux, and a variety of open source software stacks including PHP, MariaDB, PostgreSQL, and nginx. The website is custom-built without a CMS, uses jQuery 1.10.2 and other JavaScript libraries, and is hosted likely in professional datacenters with good network connectivity. Performance and mobile optimization are moderate to basic, with room for improvement in accessibility and modern frontend technologies. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks explicit security headers and uses an outdated jQuery version, which could pose vulnerabilities. No cookie consent mechanism is present, which is a GDPR compliance gap. The company demonstrates trustworthiness through transparent WHOIS data, long domain age, RIPE membership, and clear contact information. However, explicit security policies and incident response contacts are not published. Overall, Evolix presents a professional and credible online presence with solid business and technical foundations. Strategic improvements in security headers, library updates, and privacy compliance would enhance their security posture and regulatory adherence.

CLIP Group S.A. is a well-established logistics company based in Poland, specializing in intermodal container terminal operations, storage, and transport services including rail and road. The company holds a strong market position as a leading operator in intermodal transport within Europe, supported by certifications and active participation in EU projects. Their website reflects a professional and comprehensive digital presence with clear service offerings and active communication channels. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements in security headers and privacy compliance mechanisms are recommended. Overall, the business demonstrates high credibility and operational maturity with room for enhancing privacy and security transparency.

The website 'Use Social Proof' appears to be a minimal WordPress-based site with very limited content, primarily a default 'Hello world!' post. There is no clear business description, contact information, or privacy and security policies present. The technical infrastructure leverages common WordPress plugins and themes, including Astra theme, Yoast SEO, Google Analytics, and Google Tag Manager, indicating a basic digital maturity level. Security posture is moderate due to HTTPS usage and spam protection, but lacks advanced security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional but lacks professionalism, business credibility, and compliance features.

S

SPŠ a VOŠ Příbram

spspb.cz

44

SPŠ a VOŠ Příbram is a regional educational institution in the Czech Republic providing secondary technical and higher vocational education. The website targets prospective students, current students, parents, and the general public, offering detailed information about study programs, school events, and virtual tours. The institution maintains an active social media presence and complies with GDPR regulations, including a comprehensive privacy policy and cookie consent mechanism. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery. It uses several plugins for video playback, galleries, and cookie management. The site is mobile-optimized and features good SEO practices with structured data and meta tags. Performance is moderate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some security headers and a security.txt file for vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, but the website's content and technical setup indicate legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving its educational mission effectively.

Č

Čachrov CZ

cachrov.cz

42

Čachrov CZ is a local community informational website serving the Čachrov region in the Czech Republic. It provides news, historical content, current events, and resources for residents and enthusiasts. The site is built on WordPress with a variety of plugins enhancing multimedia and social media integration. It maintains an active content publishing schedule and engages with users via social media platforms such as Facebook, Twitter, and YouTube. The website's technical infrastructure is modern and includes HTTPS encryption, Google Analytics, and Google Maps integration. However, it lacks visible privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS but could be improved by adding security headers and formal incident response information. The absence of WHOIS data limits domain trust assessment, but the website content and structure indicate a legitimate community portal. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and publishing a security.txt file to improve transparency and compliance.

D

Dolák s.r.o.

toyotadolak.cz

44

Toyota Dolák is a large, authorized Toyota dealership and service provider operating in the Czech Republic. It holds the position as the largest Toyota sales and service partner in the country, offering a comprehensive range of services including new and used vehicle sales, vehicle buyback, leasing, rental, and authorized servicing. The company operates multiple branches across key Czech cities, enhancing accessibility and customer reach. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to consumers and businesses interested in Toyota vehicles and related services. From a technical perspective, the website is built on WordPress with a modern technology stack including jQuery, Google Tag Manager, and various UI libraries. It is mobile-optimized and SEO-friendly, with good performance and accessibility standards. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a mature approach to privacy and regulatory compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a security.txt file suggests room for improvement in security best practices. The lack of WHOIS data reduces domain trustworthiness somewhat, but the professional presentation and detailed business information mitigate concerns. Overall, Toyota Dolák presents a trustworthy and professional online presence with strong business credibility and good technical implementation. Strategic improvements in security policies and domain transparency would further enhance trust and compliance.

S

Status301

status301.net

62

Status301.net operates as the root site of the Permanently Moving Network, specializing in WordPress-related development services and plugin offerings. The business targets WordPress users and developers, providing both free and premium plugins alongside internet services such as VPS management and e-commerce site building. The website is built on WordPress CMS, hosted on o2switch.net, and uses modern web technologies including jQuery and LiteSpeed caching for performance optimization. The site demonstrates good mobile optimization and SEO practices, though accessibility is basic. From a security perspective, the website benefits from HTTPS encryption and domain transfer protection but lacks DNSSEC and security headers, which are recommended for enhanced protection. No explicit privacy policy or terms of service are published, though a cookie consent mechanism compliant with EU regulations is present. Contact is available via a dedicated contact page with a form, but no direct emails or phone numbers are listed. The domain is well aged and registered consistently, supporting the legitimacy of the business. Overall, the website presents a moderate security posture with room for improvement in privacy compliance and security best practices. The business model is clear and niche-focused, with a consistent brand and good content quality. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and implementing security headers to strengthen the security posture.

L

Loyal

loyalhealth.com

62

Loyal is a mature healthcare technology company founded in 2015, offering an end-to-end digital healthcare platform focused on patient engagement and data management. The company targets healthcare organizations and health systems, providing modular solutions such as provider data management, digital engagement, CRM, reputation management, and scheduling. The website is professionally designed using WordPress and Elementor, hosted on Azure DNS infrastructure, and integrates analytics tools like Google Analytics and MonsterInsights. Security posture is strong with HIPAA and SOC 2 Type 2 compliance claims, HTTPS enforcement, and domain registration protections. However, the site lacks visible privacy and cookie policies, as well as explicit incident response or vulnerability disclosure information, which are areas for improvement. Overall, the website is trustworthy, content-rich, and well-positioned in the healthcare technology market.

A

Atelier Fabrics

atelierfabrics.cz

43

Atelier Fabrics is a small Czech Republic based retail business specializing in fabrics and textile products, operating primarily through an e-commerce website built on WordPress. The website uses modern web technologies including Elementor and Slider Revolution for content presentation, and integrates Google Analytics and Facebook Pixel for user tracking and marketing purposes. The technical infrastructure is adequate for a small business, hosted via a Czech registrar and hosting provider, with proper SSL encryption ensuring secure communications. However, the website lacks comprehensive privacy and cookie policies, and does not disclose contact information or security policies, which limits its privacy compliance and business credibility. Security posture is moderate with HTTPS enabled but missing security headers and formal incident response mechanisms. Overall, the website is safe for general audiences with no adult or questionable content detected.

S

SPA Studio

spa-studio.cz

57

SPA Studio is a specialized retailer and service provider of family whirlpools and hybrid swim spa pools under the Canadian Spa International® brand, operating primarily in the Czech and Slovak markets. The company emphasizes quality, innovation, and customer service, supported by multiple showrooms and a comprehensive online presence. Their product offerings include over 47 unique whirlpool models and 9 swim spa models, targeting families and wellness enthusiasts seeking year-round relaxation solutions. Technically, the website is built on WordPress with a modern tech stack including jQuery, Slick Carousel, and various analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Smartlook. The site is well optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices and GDPR compliance through the Complianz plugin. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for forms, and manages cookie consent effectively. However, there is room for improvement in HTTP security headers and incident response visibility. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital front for SPA Studio, though the lack of WHOIS data reduces transparency regarding domain registration. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving incident response contact information to further strengthen trust and compliance.

B

BK Instal

bk-instal.cz

38

BK Instal is a small Czech Republic-based company specializing in photovoltaic power plant projects, installations, servicing, and energy savings solutions. The website presents a professional and modern approach to energy solutions, targeting owners and operators of photovoltaic systems and energy-conscious consumers. The company positions itself as a regional energy service provider with a focus on sustainable energy savings. Technically, the website is built on WordPress with Elementor, utilizing modern web technologies including Google Tag Manager and Facebook Pixel for marketing and analytics. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and privacy compliance mechanisms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website is functional and professional but would benefit from improved privacy compliance and verified domain registration information.

P

Paliva Větrovský

palivavetrovsky.cz

33

Paliva Větrovský is a small regional business based in the Czech Republic specializing in the sale and delivery of various types of coal and briquettes, primarily serving the Příbram region. The company emphasizes quality fuel products with guaranteed origin and offers both personal pickup and delivery services. The website is built on WordPress using common plugins and frameworks such as Bootstrap and jQuery, with moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS and missing security headers, although some basic protections like copy protection scripts are implemented. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy for its business scope but requires significant improvements in security and privacy to meet modern standards.

N

Neher Systeme GmbH & Co. KG

neher.de

60

Neher Systeme GmbH & Co. KG operates a professional website focused on high-quality insect protection products including custom-fit fly screens for windows, doors, and light shafts. The company positions itself as a market leader in Germany with patented technology and a strong dealer network. The website is built on WordPress with modern plugins and frameworks, showing good technical maturity and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or privacy issues were detected. Overall, the site reflects a trustworthy and professional business with clear customer engagement channels.

A

ATONdesign s.r.o.

atondesign.cz

45

ATONdesign s.r.o. is a Czech Republic based professional design studio specializing in graphic design, interior design, and exhibition stand construction. With over 25 years of experience, the company positions itself as a trusted partner for businesses seeking to enhance their brand and physical spaces through creative design solutions. The website reflects a well-structured and professional digital presence, leveraging WordPress CMS and modern web technologies to deliver a responsive and user-friendly experience. Security measures such as HTTPS and Google reCAPTCHA are implemented, though some improvements in security headers and privacy compliance are recommended. Overall, the website and business appear legitimate and credible, though the absence of WHOIS data and privacy policies slightly reduce trust levels.

T

ThePrime.cz

theprime.cz

48

ThePrime.cz is a specialized subscription-based news portal focused on the Czech and Slovak real estate markets, operated by journalist Robert McLean. It provides market news, investment insights, event information, and multimedia content targeting real estate professionals and investors in the region. The business model centers on subscription revenue and content delivery through a WordPress-based platform. Technically, the website employs a modern WordPress CMS with various plugins for analytics, payment processing, and content management. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data implementation. Security posture is adequate with HTTPS and cookie consent mechanisms, but could benefit from enhanced security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the website's regional focus and business age. Overall, the site presents a professional and trustworthy presence in its niche market.

The website www.reseauhaj.org/login serves as an intranet login portal for users with @reseauhaj.org accounts, providing access to the Unhaj intranet. It leverages Google OAuth for authentication, ensuring secure login without sharing user data beyond credentials. The site is built on WordPress with plugins such as WooCommerce and Elementor, indicating a modern CMS infrastructure. However, the absence of visible privacy and cookie policies and lack of security headers suggest areas for improvement in compliance and security hardening. The WHOIS data is unavailable due to a malformed response, limiting domain trust assessment, but the site content and technology usage indicate a legitimate organizational portal.

S

Střední škola technická

kourilkova8.cz

45

Střední škola technická is a Czech technical secondary school located in Přerov, offering a variety of technical and vocational education programs. The website reflects a well-established educational institution with a focus on practical and theoretical training in fields such as mechatronics, automechanics, optics, and more. The school maintains partnerships with notable companies, enhancing student opportunities for internships and employment. Technically, the website is built on WordPress with modern plugins and technologies, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, security headers, and CAPTCHA integration, although formal security and incident response policies are not published. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy page. Overall, the site is professional, trustworthy, and serves its educational audience effectively.

W

Websupreme

websupreme.cz

42

Websupreme.cz is a Czech Republic based small business specializing in web development, e-shop creation, and advertising services. The company emphasizes 12 years of experience, competitive pricing, and reliable delivery times. The website is built on WordPress using the Elementor page builder, indicating a modern and flexible technical infrastructure. Hosting is provided by REG-WEDOS, a Czech hosting provider, consistent with the business location. The site is well designed with good user experience and mobile optimization, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enabled but lacking security headers and formal security policies. Privacy compliance is limited with no cookie consent mechanism and only basic privacy and terms links in the footer. Overall, the site is professional and trustworthy for its market segment but could improve in security and privacy compliance.

Š

Škola Parentes

parentes.cz

47

Škola Parentes is a small educational institution based in the Czech Republic offering primary, kindergarten, and gymnasium level education. The website presents a well-structured and professionally designed platform that highlights their educational philosophy, tutoring services, character formation programs, and extracurricular activities. The institution targets parents and prospective students seeking quality education in Prague. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, incorporating modern web technologies and third-party integrations such as Google Analytics and Facebook Pixel with a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and consent management in place, though security headers are not explicitly detected. The absence of WHOIS data limits domain trust assessment, but the website content and social media presence support legitimacy. Privacy policy and terms of service pages are not explicitly found, indicating room for compliance improvement.

L

Limbus Studio

limbus.fr

53

Limbus Studio is a French-based creative agency specializing in WordPress web design, development, and maintenance services. Established since 2005, the company offers a broad range of services including branding, digital design, motion design, print, packaging, SEO, and WooCommerce support. The agency positions itself as a trusted partner with a strong client base and positive reviews, emphasizing quality and long-term client relationships. Technically, the website is built on WordPress using the Enfold theme and WooCommerce platform, enhanced with performance optimization tools like WP Rocket and RocketCDN. The site is well-structured with comprehensive metadata, schema.org structured data, and social media integration, reflecting a mature digital presence. Mobile optimization and accessibility are well addressed. Security posture is solid with HTTPS enforced, anti-clickjacking measures, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers like Content-Security-Policy are not detected, and no dedicated security or incident response pages are found. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service pages. Overall, the website demonstrates professionalism and reliability, though the absence of WHOIS data and explicit privacy documentation slightly reduce trust scores. Strategic improvements in privacy transparency and security header implementation are recommended to enhance compliance and trustworthiness.

A

Association de l'aluminium du Canada

veritesurlalu.quebec

47

The website 'La vérité sur l'alu' is operated by the Association de l'aluminium du Canada, an industry association representing Canadian primary aluminium producers. The site focuses on promoting sustainable aluminium production in Quebec and Canada, highlighting the industry's low carbon footprint and economic contributions. It serves as an educational platform with interactive content such as quizzes to dispel myths about the aluminium industry. Technically, the website is built on WordPress using the Salient theme and WPBakery page builder, incorporating modern JavaScript libraries and SEO tools like Yoast. The site is hosted likely via GoDaddy, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

E

Event Online Registration

eventsonlineregister.com

59

Event Online Registration operates a WordPress-based platform focused on listing and facilitating online registration for various events. The website showcases multiple upcoming events with detailed information including dates, titles, and images, targeting event attendees and organizers. The business model centers on providing an accessible online event registration service, positioning itself as a niche player in the event management space. Technically, the site leverages WordPress CMS with plugins such as Tickera for ticketing, integrates Google Analytics, HubSpot, and Permutive for marketing and analytics, and employs Google Tag Manager for tag management. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices.

B

Belle Main

bellemain.org

54

Belle Main is a French non-profit foundation dedicated to the conservation of movable heritage and the preservation of artisanal craftsmanship. Founded in 2015 and affiliated with the Fondation du patrimoine, it provides financial support for restoration projects and artisan training. The website presents a professional and consistent brand image, targeting proprietors of antique furniture and artisans. Technically, the site is built on WordPress with a moderate performance profile, employing common plugins for SEO, forms, and cookie compliance. Security posture is adequate with HTTPS enforced and reCAPTCHA on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy and well-maintained, with no critical security or content safety issues detected.

P

PMS ČR

pmscr.cz

55

The website pms.gov.cz is the official portal for the Probační a mediační služba (Probation and Mediation Service) of the Czech Republic, a government agency under the Ministry of Justice. It provides a wide range of services including probation supervision, mediation between victims and offenders, juvenile justice, electronic monitoring, parole, community service, and victim support. The site targets the general public, legal professionals, victims, and offenders, positioning itself as a key national public service entity in the justice sector. The content is comprehensive, professionally presented, and consistent with government standards.

G

Groupe Télégramme

groupe-telegramme.com

10

Groupe Télégramme is a French media and services group engaged in three main sectors: Media & Communication, Employment, Recruitment & Training, and Sports & Culture. The website presents a professional image with clear branding and structured content targeting a general audience interested in these sectors. The business model focuses on providing media content, recruitment services, and cultural/sports event organization, positioning itself as a regional leader in these areas. Technically, the website is built on WordPress, leveraging modern plugins such as Slider Revolution and WPBakery Page Builder, and integrates analytics tools like Piano Analytics and Google Tag Manager. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, indicating a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and includes standard security headers, but lacks publicly available security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected, suggesting a moderate security posture. Overall, the website is trustworthy and professionally maintained, with room for improvement in privacy transparency and security documentation. Strategic recommendations include publishing clear privacy and security policies, establishing incident response contacts, and implementing a vulnerability disclosure policy to enhance trust and compliance.