Security Directory

Š

ŠVECGROUP

svecgroup.sk

56

ŠVECGROUP is a Slovak engineering and manufacturing group specializing in custom production of pressing tools, sheet metal assemblies, automated lines, ultrasonic applications, and large welded components. With over 32 years of experience, the company serves European industrial clients, emphasizing innovation, customer satisfaction, and partnership synergy. The website reflects a mature business with detailed service descriptions and a professional presentation. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and includes security best practices such as HTTPS and reCAPTCHA. Privacy and cookie policies are implemented with GDPR compliance, though explicit contact emails and phone numbers are not directly listed, relying on contact forms instead. Security posture is strong with appropriate headers and no visible vulnerabilities. Overall, the site is trustworthy, well-structured, and serves its target industrial audience effectively.

N

Nidec Global Appliance (Embraco)

embraco.com

68

Embraco, a brand under Nidec Global Appliance, is a large manufacturing company specializing in refrigeration compressors and cooling solutions for household and commercial applications. The website presents a professional and comprehensive portfolio of products and services targeting refrigeration professionals and businesses globally. The site is multilingual and well-structured, reflecting a mature digital presence. Technically, the website is built on WordPress with Elementor and uses modern JavaScript libraries and tracking technologies, indicating a moderate to high level of digital maturity. Security posture is good with HTTPS enforced and privacy compliance evident through cookie consent and privacy policies. However, the absence of WHOIS registration data and explicit security headers suggests areas for improvement. Overall, the website is trustworthy and professionally maintained, though domain registration transparency should be verified further.

J

Johns Manville

jm.com

69

Johns Manville is a well-established enterprise specializing in manufacturing premium-quality insulation, commercial roofing, and engineered building materials. As a subsidiary of Berkshire Hathaway, it holds a strong market position in the manufacturing and construction sectors, targeting professionals such as contractors, architects, and distributors. The company emphasizes quality and customer relationships, reflected in its professional website and comprehensive product offerings. Technically, the website is built on Adobe Experience Manager with modern JavaScript libraries and includes robust privacy and consent management tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though public security policy and incident response contacts are not explicitly published. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the company's reputation and branding. Overall, Johns Manville presents a professional, secure, and compliant digital presence aligned with its enterprise status.

B

BEYABLE

beyable.com

62

BEYABLE is a French technology company specializing in AI-powered conversion rate optimization (CRO) and digital customer journey enhancement. Their platform offers a comprehensive suite of services including on-site personalization, e-merchandising, product recommendations, A/B testing, email remarketing, and analytics. Positioned as a trusted partner for over 200 brands, BEYABLE targets marketing, acquisition, CRM, data, and IT teams seeking to maximize website traffic value and improve user experience. The company provides flexible engagement models ranging from fully autonomous SaaS access to fully managed expert services. Technically, the website is built on Webflow CMS, leveraging modern web technologies such as Google Tag Manager, jQuery, and custom JavaScript components for enhanced user interaction and analytics. The site demonstrates excellent design quality, mobile optimization, and SEO practices, contributing to a fast and accessible user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts, which are areas for improvement. The absence of WHOIS registration data raises some legitimacy concerns, although the professional content and trust signals mitigate these risks. Overall, BEYABLE presents a mature digital presence with strong business credibility and technical implementation. Strategic recommendations include enhancing security transparency, verifying domain registration status, and establishing formal vulnerability disclosure and incident response mechanisms to further strengthen trust and compliance.

G

GreenTable

greentablelounge.cz

46

GreenTable is a newly established fine dining restaurant and event venue located in Prague, Czech Republic. The business focuses on offering a private and intimate dining experience with a capacity of 30 seats and a garden area. Their culinary offerings emphasize French and Mediterranean cuisine with seasonal ingredients, complemented by a curated wine selection. The restaurant also caters to corporate clients by providing event hosting services including wine tastings, private meetings, and corporate breakfasts. The website is professionally designed using WordPress with modern technologies such as Bootstrap and Splide.js, and it is hosted on AWS infrastructure. SEO and mobile optimization are well implemented, and the site includes structured data for enhanced search engine visibility. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Privacy compliance is partially addressed with a privacy policy present but lacking a cookie consent mechanism. Overall, the website reflects a credible and professional hospitality business with clear contact channels and social media presence.

Luhačovské Zálesí, o.p.s. operates as a non-profit destination management organization promoting tourism in the Zlínsko and Luhačovicko region of the Czech Republic. The website provides comprehensive information on regional attractions, events, wellness, and cultural experiences, targeting tourists and visitors interested in this area. The organization holds recognized awards such as the EDEN European Destination of Excellence 2019, enhancing its credibility. Technically, the website employs modern web technologies including Foundation framework, jQuery, Swiper.js, Owl Carousel, and integrates Google Maps and multiple marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized with good navigation and content quality, though some security headers are not explicitly detected. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks visible advanced security headers. Privacy compliance is strong with a clear GDPR policy and cookie consent banner. No WHOIS data is available, which limits domain registration trust analysis, but the website's content and partner affiliations suggest legitimacy. Overall, the site presents a professional and trustworthy digital presence for regional tourism promotion, with recommendations to enhance security headers and verify WHOIS data for improved trust and compliance.

K

KOMA SLOVAKIA s.r.o.

koma-slovakia.sk

50

KOMA SLOVAKIA s.r.o. is a Slovak company specializing in modular, modularized, and container-based building solutions, offering both sales and rental services. The company targets a broad audience including architects, businesses, private individuals, rental companies, and public institutions. Their business model focuses on providing modular construction systems with a strong emphasis on quality, design, and environmental sustainability. The company holds multiple certifications, reinforcing its market credibility and quality standards. Technically, the website is built on modern frameworks such as Foundation and uses Craft CMS, with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, implements a comprehensive cookie consent mechanism, and uses Google Analytics with consent mode, but lacks a formal security policy and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, with room for improvement in security transparency and incident handling.

K

KOMA RENT

koma-rent.cz

48

KOMA RENT is a Czech-based company specializing in the rental of modular containers and assemblies across the Czech Republic. Their offerings include residential, sanitary, storage containers, and modular office spaces, targeting businesses and organizations requiring flexible, temporary modular solutions. The company positions itself as a long-standing market player with a regularly updated rental fleet and a strong emphasis on quality and service. The website reflects a professional business model with clear service descriptions and multiple trust signals such as certifications and social media presence. Technically, the website employs modern web technologies including jQuery, Foundation framework, and Google Analytics with consent management. It uses Craft CMS as the backend platform. The site is mobile-optimized with good SEO practices and a cookie consent mechanism that complies with GDPR requirements. However, some security best practices like security headers are missing, and WHOIS data for the domain is unavailable, which slightly reduces trust. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. The cookie consent is granular, and tracking scripts are controlled based on user consent. No critical vulnerabilities or security incidents are evident from the content. The absence of a published security policy or incident response contact is a minor gap. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but the lack of WHOIS transparency and some security headers suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust and compliance.

W

WPSERVEUR

wpserveur.net

63

WPServeur is a specialized French WordPress hosting provider offering high-quality, secure, and performant hosting solutions tailored exclusively for WordPress websites. Their business model focuses on subscription-based hosting with value-added services such as automatic backups, free migrations, security enhancements, and developer-friendly tools like WP-CLI and Git integration. The company positions itself as a premium niche player with a strong emphasis on customer support and ecological responsibility. Technically, the website is built on WordPress with WooCommerce and integrates modern technologies including Google Fonts, Font Awesome, and various analytics and marketing tools. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS enforced, nightly backups, and security plugins, although some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. WHOIS data is missing or unavailable, which slightly impacts trust but the professional website content and customer testimonials support legitimacy. Overall, WPServeur presents a mature and trustworthy hosting service with room for improvement in transparency and security policy disclosures.

H

Hematologicko-onkologické oddělení, Fakultní nemocnice Plzeň

hematologieonkologie.cz

57

The Hematologicko-onkologické oddělení FN Plzeň website represents a specialized healthcare department within the Faculty Hospital Plzeň, uniquely accredited for all types of hematopoietic stem cell transplantation in the Czech Republic. The site provides comprehensive information about their services, accreditations, and partnerships, targeting patients and healthcare professionals. The business model focuses on delivering advanced hematology and oncology treatments, supported by clinical research and quality management. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Cookiebot for GDPR compliance, ensuring a responsive and user-friendly experience. However, some technical improvements could enhance accessibility and security headers. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, limiting full domain trust analysis.

P

Peters Surgical

peters-surgical.fr

44

Peters Surgical is a French company specializing in the design, manufacture, and distribution of high-quality medical devices dedicated to surgical practice. Established in 2006 and recently acquired by Advanced Medical Solutions (AMS), the company holds a recognized position in the healthcare sector with a focus on sutures, surgical clips, and surgical glue. The website targets healthcare professionals, patients, partners, and job candidates, providing detailed product information and company insights. Technically, the site is built on WordPress using the Salient theme, integrating modern technologies such as Gravity Forms and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and secure forms, though explicit security headers and policies are lacking. Privacy compliance is partially addressed via consent checkboxes in forms but lacks a visible cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with the company's business claims.

A

AstraZeneca

astrazeneca.fr

64

AstraZeneca France operates as a regional branch of the global biopharmaceutical company AstraZeneca, focusing on research, development, production, and commercialization of prescription medicines across key therapeutic areas including oncology, cardiovascular, respiratory, vaccines, and rare diseases. The website targets French residents, patients, healthcare professionals, and stakeholders, providing comprehensive information about the company's products, innovation strategies, and corporate social responsibility initiatives. The site is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, the website leverages modern web technologies including Adobe Experience Manager CMS, JavaScript libraries like jQuery, and analytics platforms such as Matomo and Adobe Analytics. Tag management is handled via Tealium, and security is enhanced through Cloudflare services including rate limiting and bot management. The site employs HTTPS with strong SSL configuration and cookie consent mechanisms, demonstrating compliance with GDPR and French data protection regulations. Security posture is robust with no evident vulnerabilities or exposed sensitive data. However, explicit security headers like X-Frame-Options and X-Content-Type-Options should be verified. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent. Overall, the site maintains high trustworthiness and professionalism. Strategically, AstraZeneca France should continue to monitor third-party scripts for vulnerabilities, enhance transparency around incident response and security policies, and ensure all forms are secured against common web threats. These measures will strengthen compliance and user trust in an increasingly regulated healthcare digital environment.

C

CytoSorbents Corporation

vetresq.com

59

VetResQ.com is a professionally developed website representing a veterinary medical device product by CytoSorbents Corporation. The company offers an innovative blood purification therapy for animals suffering from critical illnesses, leveraging technology derived from human treatments. The website is well-structured, uses modern web technologies including WordPress, Bootstrap, and Google Analytics, and implements SEO best practices with structured data. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though some security headers could be improved. Privacy policies and cookie consent mechanisms are present and linked to the parent company’s comprehensive policies. The domain registration is transparent and consistent with the business timeline, enhancing trustworthiness. Overall, the site presents a credible, professional, and trustworthy digital presence for a specialized healthcare product.

Gymnastika Zlín z.s. is a well-established sports club based in the Czech Republic, specializing in sport gymnastics and parkour training for children, youth, and adults. The club operates a multifunctional hall and a jump park facility, offering a wide range of courses tailored to different age groups and skill levels. It holds a strong market position as one of the largest sports clubs in the Zlín region and Czech Republic, emphasizing education, physical development, and safety in its training programs. The website reflects a professional and consistent brand image with clear course offerings and partner affiliations. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Owl Carousel, and Google Maps API, providing a good user experience with mobile optimization and clear navigation. However, there is room for improvement in accessibility and SEO optimization. The website does not appear to use any analytics or tracking services, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. No forms collecting sensitive data were detected, reducing immediate risk exposure. The WHOIS data is consistent with the business claims, showing a legitimate and appropriately aged domain. Overall, the website is safe, professional, and trustworthy but would benefit from enhanced privacy compliance, security best practices, and transparency regarding data protection and incident response.

K

Korves.Net

korves.net

57

Korves.Net is a German IT service provider operating since 2002, offering IT-related services primarily targeting businesses and individuals in Germany. The website is built on WordPress using the Divi theme and includes SEO optimization via Yoast SEO. The technical infrastructure includes modern web technologies and a cookie compliance mechanism via hu-manity.co. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy policy and terms of service. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security measures.

A

Amref USA

amrefusa.org

67

Amref USA is a well-established African-led and staffed non-profit organization focused on improving healthcare across Africa by training local health workers and providing essential health services. The organization enjoys a strong market position supported by reputable partnerships with global foundations such as the Gates Foundation and Clinton Foundation. Their website reflects a professional and trustworthy presence, targeting donors, health workers, and African communities. Technically, the site is built on WordPress using modern themes and plugins, with good SEO and accessibility practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and additional security headers. Overall, the site demonstrates high business credibility and compliance with privacy regulations.

A

Amref Salud África

amref.es

45

Amref Salud África is a well-established non-profit organization dedicated to improving health services across Africa, focusing on women, youth, healthcare training, water access, and climate change impacts. The website is professionally designed using WordPress with modern plugins and integrates donation processing via a partner domain. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. Security posture is good with HTTPS enforced, though explicit security headers could be improved. WHOIS data is unavailable due to .es domain restrictions, limiting domain trust analysis. Overall, the site presents a credible and trustworthy digital presence aligned with its mission.

H

HelloPrint

helloprint.it

53

HelloPrint is a large-scale e-commerce platform specializing in professional online printing services in Italy, offering digital and offset printing products. The website is well-designed, mobile-optimized, and provides a comprehensive user experience with clear navigation and a strong brand presence. Technically, it employs modern analytics and marketing tools such as Google Analytics, Segment, and Algolia search, integrated with a likely PrestaShop CMS backend. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. The absence of WHOIS data reduces transparency but does not detract from the site's professional appearance and operational maturity. Overall, the site presents a low risk profile with recommendations to enhance security header implementation and publish formal security policies.

H

HelloPrint

helloprint.de

10

HelloPrint operates as a prominent online printing and promotional product e-commerce platform primarily targeting the German and broader European markets. The company offers a wide range of printing services including flyers, posters, brochures, and promotional items, positioning itself as a convenient and cost-effective solution for businesses and individuals seeking quality print products with express delivery options. The website demonstrates a mature digital presence with multi-language support and regional sites, indicating a well-established market footprint. Technically, the website leverages modern web technologies including Google Analytics, Segment, Algolia search, and PrestaShop CMS, ensuring a robust and scalable infrastructure. The site is mobile optimized and incorporates a comprehensive cookie consent mechanism aligned with GDPR requirements, reflecting a commitment to privacy compliance. Performance is moderate with room for optimization, and accessibility features are basic but present. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which are recommended to enhance protection. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain registration trust verification, but the overall website professionalism and business indicators suggest legitimacy. Overall, HelloPrint presents a solid e-commerce platform with good privacy and security practices, serving a broad customer base in the printing retail sector. Strategic improvements in security headers and transparency in incident response policies would further strengthen its security posture.

C

Commune de Seneffe

seneffe.be

9

The website www.seneffe.be serves as the official online portal for the Commune de Seneffe, a local government entity in Belgium. It provides residents and visitors with access to municipal services, administrative procedures, community news, cultural events, social programs, and tourism information. The site is designed to facilitate citizen engagement and streamline access to public resources. Technically, the site is built on the Plone CMS platform, utilizing common web technologies such as jQuery, Leaflet.js for mapping, and slick sliders for content presentation. The site is accessible, mobile-optimized, and features a cookie consent mechanism, indicating a basic level of privacy compliance. Security-wise, the site uses HTTPS but lacks visible security headers and detailed privacy policies, which are areas for improvement. The WHOIS data is restricted by the .be registry, limiting transparency about domain ownership, but the site’s content and branding strongly indicate legitimacy as a government resource. Overall, the site presents a professional and trustworthy digital presence for the local government, with moderate technical maturity and room for enhanced security and privacy practices.

Maison du Tourisme Centrissime operates as a regional tourism office for the Pays du Centre area in Belgium, providing comprehensive tourism information, event listings, and cultural highlights for 11 communes. The website is multilingual, targeting French, Dutch, and English-speaking visitors, and offers services such as guided tours, brochures, and bike rentals. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements in security headers and published policies are recommended. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given its professional presentation and official tourism role.

C

CGT - Commissariat général au Tourisme

tourismewallonie.be

72

Tourisme Wallonie is the official tourism administration for the Wallonia region in Belgium, focusing on sustainable tourism development and economic recognition of the tourism sector. The website serves as a comprehensive portal offering information on accommodations, attractions, guides, agencies, and public services related to tourism. It targets tourism professionals, public entities, and the general public interested in Wallonia tourism. Technically, the site is built on WordPress using Elementor and JetEngine, with modern JavaScript libraries and analytics tools like Matomo and Google Tag Manager. The site is well-structured, mobile-optimized, and implements GDPR-compliant cookie consent via Iubenda. Security posture is good with HTTPS enforced, though security headers could be improved. WHOIS data is restricted, but the domain appears legitimate and consistent with a government entity. Overall, the site is professional, trustworthy, and serves its public sector mission effectively.

S

Service public de Wallonie

wallonie.be

59

The website 'wallonie.be' serves as the official digital portal for the Wallonia regional government in Belgium. It provides comprehensive administrative services, news, events, and institutional information targeted at citizens, businesses, local authorities, and non-profit sectors. The site is well-established, with a domain age dating back to 1996, reflecting its longstanding presence and authority. The business model is centered on public service delivery and information dissemination, positioning it as a key regional government resource. Technically, the site is built on Drupal 10, leveraging modern web technologies and frameworks such as Bootstrap, Matomo Analytics for privacy-respecting user tracking, and CookiesJSR for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. Performance is moderate, with room for optimization but no critical issues. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements cookie consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response contact suggests areas for improvement in transparency and readiness. The WHOIS data confirms domain legitimacy and consistency with the official government entity. Overall, the website exhibits a high level of professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include publishing explicit security policies, establishing incident response contacts, and adopting security.txt for vulnerability disclosures to enhance security posture and stakeholder trust.

E

elloha

elloha.com

63

elloha is a French SaaS company providing a comprehensive channel management and direct booking platform tailored for independent tourism and leisure professionals. The platform enables users to manage bookings across more than 60 channels, including major OTAs, while promoting direct bookings through a proprietary booking engine and website creation tools. The company positions itself as the leading French solution in this niche, emphasizing commission-free bookings and 7-day-a-week customer support. Technically, the website is built on Webflow with integrations including HubSpot for marketing and meetings, Weglot for translations, and Google Analytics for tracking. The site is well-designed, mobile-optimized, and provides rich multimedia content including testimonials and video case studies. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and policies are not fully implemented. WHOIS data is missing, which slightly reduces trust but the overall business credibility remains strong based on content and integrations. Privacy and cookie policies are not explicitly found, indicating an area for compliance improvement.

B

Be Circular

circulareconomy.brussels

44

BeCircular is a government-backed initiative by the Brussels-Capital Region aimed at supporting independent professionals and companies in Brussels to develop innovative circular economy projects. The website serves as an informational and application platform offering financial support, coaching, networking, and project promotion. The target audience is primarily Brussels-based businesses and entrepreneurs interested in sustainability and circular economy innovation. Technically, the website is built on WordPress with common plugins and uses modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and has good SEO practices but lacks some advanced accessibility features. Security posture is moderate with HTTPS enforced and use of reCAPTCHA, but missing explicit security headers and no visible incident response or vulnerability disclosure information. Privacy compliance is basic with a privacy and cookie policy present but no visible consent mechanism. Overall, the website is professional and trustworthy with strong government legitimacy but could improve in security and privacy transparency.

R

RABBKO

rabbko.be

58

RABBKO is a bilingual arts network based in Brussels, serving as a platform for dialogue, reflection, and information related to the arts. The website targets a general audience interested in cultural and artistic activities within the Brussels region. The business model revolves around community engagement and providing advisory services in the arts sector. The domain has been registered since 2011, consistent with the organization's history and regional presence. Technically, the website is built on WordPress CMS, leveraging modern technologies such as Bootstrap 4, jQuery, FontAwesome, and Leaflet for mapping functionalities. The site is hosted by OVH, a reputable hosting provider, and employs HTTPS for secure communications. SEO is enhanced through the Yoast SEO plugin, and GDPR compliance is partially addressed via a cookie consent mechanism. Mobile optimization and accessibility are rated as good, though some improvements could be made. From a security perspective, the website benefits from HTTPS and does not expose sensitive data in the HTML content. However, no explicit security headers were detected, and there is no published security policy or incident response information. The absence of a privacy policy and terms of service pages represents a compliance gap. Overall, the security posture is moderate but could be strengthened by implementing recommended best practices. The overall risk assessment indicates a trustworthy and legitimate website with room for improvement in privacy compliance and security hardening. Strategic recommendations include publishing comprehensive privacy and terms of service policies, enhancing security headers, and providing clear incident response contacts to improve trust and compliance.

M

MODX

modxcloud.com

69

MODX is an established open source content management framework that empowers developers and publishers to build highly customizable digital experiences without the bloat of traditional CMS platforms. With over 20 years of history and a strong global community, MODX offers a flexible platform supported by commercial services including cloud hosting and selective content staging. The website reflects a mature business with a clear focus on technology and developer-centric solutions. Technically, the site employs modern web standards, including responsive design, accessibility features, and integration with analytics and error monitoring tools such as Segment and Sentry. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosure mechanisms are not publicly documented. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, MODX presents a professional, secure, and user-friendly web presence aligned with its market position as a leading open source CMS framework.

D

Digiforum s.r.o.

digiforum.cz

40

Digiforum s.r.o. operates the largest photography trade fair in the Czech Republic, offering workshops, seminars, lectures, and exhibitions focused on digital photography. The website targets photography enthusiasts, professionals, students, and seniors, providing event information and ticket sales. The business model centers on event organization and educational services within the photography media sector. Technically, the website uses a traditional jQuery-based stack with external libraries and Google Fonts, delivering moderate performance and basic mobile optimization. Security posture is moderate with HTTPS assumed but lacking explicit security headers and advanced protections. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable, which reduces domain trustworthiness, though the website content appears professional and legitimate. Overall, the site is safe, well-structured, and serves its niche audience effectively.

W

Web & Media a.s.

3dscena.cz

40

3Dscena.cz is a Czech language online magazine focused on 3D graphics, including tutorials, discussions, and galleries related to software such as 3D Studio Max, Cinema 4D, and others. Operated by Web & Media a.s., it targets digital artists and 3D graphics enthusiasts within the Czech Republic. The site offers content publishing supported by advertising and related media projects. Technically, the website uses a mix of jQuery, Google Adsense, and AddThis for social sharing and advertising, running on the WMpublic CMS platform. The site is moderately optimized for performance and accessibility, with HTTPS enabled and a secure login form present. However, it lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and security enhancement. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective, though the website content and professional presentation suggest legitimate operation. Overall, the site scores well in content quality and business credibility but has room for improvement in security posture and privacy compliance.

W

Web & Media a.s.

builder.cz

40

Builder.cz is a Czech online information portal focused on programming and development topics, operated by Web & Media a.s. The site offers articles, tutorials, and forums targeting programmers and developers interested in languages such as PHP, ASP, JavaScript, Delphi, and C++. It is part of a broader media group with several related projects in graphics, photography, printing, and Apple product communities. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with Google Adsense for advertising and AddThis for social sharing. The site is served over HTTPS but lacks advanced security headers and cookie consent mechanisms, which impacts privacy compliance. No WHOIS data was available, which reduces domain trustworthiness, though the website content and related projects indicate a legitimate business. Contact is available via email and a contact form, but no phone numbers or physical addresses were found. Overall, the site is professionally maintained with good content quality and moderate technical implementation.

W

Web & Media a.s.

mujipod.cz

40

MUJiPOD.cz is a Czech language online portal dedicated to Apple iPod, iTunes, and related MP3 player news, tips, and product reviews. Operated by Web & Media a.s., the site targets Apple enthusiasts and users seeking information and community engagement. The website features regularly updated content, a newsletter subscription, and social media integration, positioning itself as a niche media outlet within the Czech technology and media sector. Technically, the site employs standard web technologies including HTML5, CSS, JavaScript, and jQuery, with monetization through Google Adsense and social sharing via AddThis. The CMS identified is WMpublic, a multi-editor system. While the site is functional and moderately optimized, there is room for improvement in mobile responsiveness, accessibility, and security headers implementation. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, indicating partial compliance with modern security and privacy standards. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for media websites. Overall, MUJiPOD.cz presents a professional and trustworthy online presence with moderate technical maturity and basic privacy compliance. Strategic improvements in security headers, GDPR cookie consent, and mobile optimization would enhance its security posture and user trust.

W

Web & Media a.s.

printing.cz

34

Printing.cz is a Czech language specialized media website focused on printing, pre-press, and bookbinding topics. Operated by Web & Media a.s., it provides articles, forums, and informational content targeting professionals and enthusiasts in the printing and photography sectors. The site features regularly updated content with recent articles and integrates advertising through Google Adsense. Technically, the site uses jQuery, Google Analytics, AddThis, and a CMS platform called MultiRS WMpublic. While the site is accessible and professionally designed, it lacks some modern security headers and cookie consent mechanisms, indicating partial GDPR compliance. The absence of WHOIS data limits domain legitimacy verification, but the website content and company references suggest a legitimate business entity. Overall, the site demonstrates a moderate security posture and good business credibility.

W

Web & Media a.s.

mujmac.cz

42

MujMAC.cz is a Czech media website focused on Apple products, Mac OS X, and photography. It operates as part of a network of related media projects under the parent company Web & Media a.s. The site offers news, tutorials, a photographic magazine subscription, and community engagement through forums and social media. The business model relies on content publishing and advertising revenue, targeting Apple enthusiasts and photography professionals in the Czech Republic. Technically, the website uses a traditional tech stack including jQuery, Google Adsense, and AddThis for social sharing and tracking. It is built on the WMpublic CMS platform and uses HTTPS with a moderate performance profile. Accessibility and mobile optimization are basic but functional. SEO practices are good with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected, but the absence of cookie consent and privacy compliance mechanisms is a concern. The WHOIS data is unavailable, which reduces transparency and trustworthiness, though the website content and related projects suggest legitimacy. Overall, MujMAC.cz presents a professional and content-rich platform with moderate technical and security maturity. Improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and compliance posture.

M

MODX

modx.com

70

MODX is a well-established technology company specializing in a custom content management system platform that emphasizes speed, security, and creative freedom. With over 20 years of history, MODX positions itself as a flexible and secure alternative to legacy CMS platforms, targeting web developers, digital agencies, and businesses seeking tailored digital experiences. The company offers open source CMS software, managed cloud hosting, selective content staging, and commercial support services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, Font Awesome 6, and integrates analytics and error monitoring tools such as Segment and Sentry. The platform is hosted on MODX Cloud, a managed hosting service, and the site demonstrates fast performance, mobile optimization, and good accessibility. SEO practices are evident through proper meta tags and structured content. From a security perspective, the site enforces HTTPS, uses domain status protections, and implements a cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response information are not publicly available, and DNSSEC is not enabled. No vulnerabilities or exposed sensitive data were detected in the content analysis. Overall, MODX.com presents a trustworthy and professional digital presence with strong business credibility and technical maturity. Strategic recommendations include enabling DNSSEC, publishing detailed security and incident response policies, and enhancing security headers to further strengthen the security posture.

H

HelloPrint

helloprint.com

66

HelloPrint is a large, well-established e-commerce marketplace specializing in customized print products and merchandise, serving a global audience including SMBs, creative entrepreneurs, non-profits, and corporates. The company operates a sophisticated platform connecting customers with a network of over 300 manufacturers across 31 countries, emphasizing local production to reduce costs and carbon footprint. Their market position is strong, supported by certifications such as B Corp and FSC, and a large customer base exceeding 650,000 users. Technically, HelloPrint leverages modern web technologies including Webflow CMS, Snipcart for e-commerce, and multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, and TikTok Pixel. The website is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Hosting appears to be via Cloudflare, enhancing delivery speed and security. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and published security policies. The absence of privacy and cookie policies on the analyzed page is a compliance gap, especially under GDPR. WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency, though the business legitimacy is supported by strong branding and certifications. Overall, HelloPrint presents a professional and trustworthy online presence with a mature technical infrastructure. Strategic improvements in privacy compliance, security policy transparency, and domain registration clarity would enhance their security posture and trustworthiness further.

T

Type Department

type-department.com

70

Type Department is a small UK-based e-commerce business specializing in selling fonts and mockups targeted at creatives and designers. The website operates on the Shopify platform, leveraging a modern tech stack including jQuery, Slick Carousel, and FontAwesome, with integrations for marketing and analytics such as Mailchimp and Facebook Pixel. The site demonstrates good digital maturity with fast performance, mobile optimization, and clear navigation. Security posture is solid with HTTPS enforced and domain lock statuses, though improvements such as enabling DNSSEC and adding security headers could enhance protection. Privacy compliance is addressed with a cookie consent banner and a privacy policy aligned with GDPR. Overall, the business presents a professional and trustworthy online presence with a niche market focus.

A

A is for

aisforfonts.com

45

The website aisforfonts.com is a niche e-commerce and content platform focused on typography and font sales. It showcases various typographic projects and font designs, targeting designers and font enthusiasts. The site is built on WordPress with WooCommerce, leveraging modern web fonts and carousel features to enhance user experience. The technical infrastructure is moderate with good mobile optimization and basic SEO. Security posture is adequate with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

P

Poem / Atelier Jérôme Knebusch

poem-editions.com

51

Poem Editions is a small independent publisher specializing in editions and typefaces, directed by Jérôme Knebusch and based in Frankfurt am Main, Germany. The company offers a curated selection of artworks, typefaces, books, pamphlets, and posters, emphasizing originality and quality. Their business model is focused on direct online sales through their website, targeting design professionals, typographers, artists, and cultural institutions worldwide. The website is professionally designed, mobile-optimized, and provides comprehensive information about ordering, licensing, and privacy policies. Technically, the site uses modern web technologies including Bootstrap, jQuery, Stripe for payments, and Snipcart for ecommerce, ensuring secure transactions and a good user experience. Security posture is solid with HTTPS and secure payment gateways, though some improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data for the domain is a notable concern, impacting domain trustworthiness despite the professional appearance and operation of the website. Overall, the site presents a trustworthy and niche-focused business with room for enhanced transparency and compliance.

A

Atelier Jérôme Knebusch

jeromeknebusch.net

48

Atelier Jérôme Knebusch is a Franco-German graphic, editorial, and type design practice based in Frankfurt am Main, Germany. The website showcases a professional portfolio of custom typefaces, visual identities, and editorial projects primarily serving educational and cultural institutions. The business operates as a small specialized design studio with a focus on bespoke creative services and type design. The domain age and WHOIS data align well with the business history, indicating a stable and legitimate presence since 2006. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Slick Carousel for galleries. It is hosted by Scaleway SAS and uses HTTPS, ensuring secure communication. However, the site lacks DNSSEC and important security headers, which are recommended to enhance security posture. The website is mobile-optimized with good navigation and professional design quality, though SEO and accessibility features are basic. From a security perspective, the site has a good baseline with HTTPS and domain transfer protection but lacks explicit security policies, incident response contacts, and privacy/cookie policies, which are critical for GDPR compliance and user trust. No analytics or tracking scripts were detected, indicating minimal user tracking. The absence of privacy and cookie policies is a compliance gap that should be addressed. Overall, the website is a trustworthy and professional representation of a niche design practice with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response information to enhance trust and compliance.

W

Wait: agency

wait.agency

50

Wait: agency is a creative communication agency based in Luxembourg specializing in strategy, brand identity, and storytelling services to help clients bring their projects to life and strengthen brand impact. The company targets businesses and brands seeking professional communication services within the Luxembourg market. The website is professionally designed using WordPress and Elementor, featuring modern technologies and a GDPR-compliant cookie consent mechanism. The technical infrastructure is mature with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and policies could enhance protection. WHOIS data is unavailable likely due to privacy protection, but the website content and structured data indicate a legitimate business. Overall, the site demonstrates a high level of professionalism and trustworthiness.

C

CytoSorbents Corporation

cytosorbents.com

74

CytoSorbents Corporation is a publicly traded medical technology company specializing in blood purification therapies designed to treat life-threatening conditions in critical care and cardiac surgery. The company operates globally with a presence in over 75 countries and offers a portfolio of solutions including CytoSorb, PuriFi, ECOS, and VetResQ. Their website targets healthcare professionals, patients, families, and investors, providing comprehensive information about their products, innovations, and corporate team. The business is well-established with a domain age consistent with its market history and NASDAQ listing. Technically, the website is built on WordPress with modern technologies such as Yoast SEO, Google Tag Manager, and Cloudflare DNS. It demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. The site uses multiple tracking and marketing tools with a clear cookie consent mechanism, reflecting good privacy compliance. However, explicit security policies and incident response information are not publicly available. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and employs Cloudflare DNS, indicating a solid baseline security posture. Some improvements are recommended, including enabling DNSSEC and adding explicit security headers and a vulnerability disclosure policy. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving as a credible digital presence for CytoSorbents Corporation. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

A

Abbott

fr.abbott

72

Abbott is a global healthcare company with a strong presence in France, offering innovative health solutions across cardiovascular, diagnostics, neuromodulation, and diabetes care sectors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive corporate information tailored for a French-speaking audience. Technically, the site leverages Adobe Experience Manager as its CMS, integrates monitoring via New Relic, and manages user consent with TrustArc, indicating a modern and compliant infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. Overall, the site is trustworthy and professionally maintained, supporting Abbott's market position as a healthcare leader.

K

key4events

key4events.com

70

Key4events is a French-based company specializing in IT solutions and services for event management, including physical, virtual, and hybrid events. Their flagship software suite, K4FUSION, integrates with third-party applications to streamline event operations, complemented by K4PROD event services and K4ACADEMY training initiatives. The company targets a diverse audience including scientific societies, PCOs, agencies, enterprises, associations, and institutional clients, positioning itself as an experienced player with over 20 years in the market. The website reflects a professional and consistent brand image with good content quality and clear navigation.

K

KOMA Modular s.r.o.

koma-modular.cz

48

KOMA Modular s.r.o. is a leading Czech manufacturer specializing in modular and container-based construction solutions. The company offers a wide range of modular building products and services tailored to various market segments including architects, developers, businesses, private individuals, rental companies, and public institutions. Their business model integrates manufacturing with comprehensive support services such as technical assistance, installation, logistics, financing, and rental options. The company holds multiple certifications and awards, reinforcing its market credibility and commitment to quality. Technically, the website demonstrates a mature digital infrastructure utilizing modern web technologies including Craft CMS, Foundation framework, Google Fonts, and multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Bing Ads, and Smartlook. The site is well-optimized for mobile devices, features a cookie consent mechanism compliant with GDPR, and employs security best practices like HTTPS and reCAPTCHA integration. From a security perspective, the website maintains a good posture with encrypted communications and secure form handling. However, some standard security headers are not explicitly detected, and there is no visible incident response or vulnerability disclosure information. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, though the professional presentation and certifications support trustworthiness. Overall, KOMA Modular presents a professional, trustworthy online presence with strong business credibility and good technical and security implementations. Strategic improvements in security header implementation and transparency around incident response would further enhance their security posture.

Č

Český národní registr dárců dřeně

kostnidren.cz

53

The website kostnidren.cz serves as the official portal for the Czech National Bone Marrow Donor Registry and the Foundation for Bone Marrow Transplantation, collaborating closely with the Hematology-Oncology Department of the Faculty Hospital in Plzeň. It provides information and access points for donors, supporters, and patients related to bone marrow transplantation. The organization holds a strong market position as the sole accredited transplantation center in the Czech Republic for all hematopoietic cell transplants, supported by a network of partners and a long-established domain presence since 1999. Technically, the website employs a modern and responsive design using Bootstrap, jQuery, and Google Analytics for user tracking. The site is mobile-optimized and structured for good SEO, though accessibility features are basic. While the site uses HTTPS, it lacks visible security headers and published security or privacy policies, indicating room for improvement in security posture and compliance. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data but lacks formalized policies such as privacy, cookie, or incident response disclosures. The absence of contact emails and phone numbers on the main page reduces transparency. The WHOIS data confirms the domain's legitimacy and consistency with the organization's claims, supporting trustworthiness. Overall, the site is professionally designed and trustworthy for its healthcare and non-profit audience but should enhance privacy compliance, security headers, and contact transparency to improve its security and compliance posture. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing clear contact information for incident response.

R

Reklamní Inženýři

reklamni-inzenyri.cz

46

Reklamní Inženýři is a Czech Republic based advertising agency founded in 2014, specializing in creative advertising services including graphic design and video production. The company positions itself as a local agency proud of its Zlín roots, emphasizing honest and high-quality work without overpromising. Their market presence is regional with a focus on media and advertising clients. Technically, the website is built on WordPress with common frontend libraries such as jQuery and Bootstrap, hosted on miniserver.cz. The site is mobile optimized and SEO friendly with good content quality and consistent branding. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy and consent mechanism present, but no visible privacy policy page or incident response contacts. Overall, the website is professional and trustworthy with moderate risk and room for security and compliance improvements.

V

Vita Sana Club

vitasana.cz

43

Vita Sana Club is a well-established fitness and wellness center based in Zlín, Czech Republic, operating since 2011. The business offers a comprehensive range of services including premium fitness, group classes, wellness treatments, a medical center, children's club, and an e-commerce platform for courses and merchandise. The website reflects a modern and professional brand targeting fitness enthusiasts and wellness seekers in the region. Technically, the site is built on WordPress using the FoundationPress framework, integrating modern technologies such as Google Tag Manager, Facebook Pixel, and Google Maps API. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and use of reCAPTCHA; however, it lacks some security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

C

CREAM Real Estate, s.r.o.

cream-reality.cz

50

CREAM Real Estate, s.r.o. is a medium-sized real estate company operating primarily in the Czech Republic, specializing in rental services and property development with a portfolio exceeding 100 properties. The company targets tenants, investors, and clients seeking premium office, retail, and residential spaces. The website reflects a professional digital presence with modern technologies and multiple marketing and analytics tools integrated. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, although some security headers and policies are missing. The absence of WHOIS data limits domain trust assessment but the business information and contact details on the site are clear and credible. Overall, the company demonstrates a solid market position with room for improvement in transparency and security documentation.

S

Schweizerische Epilepsie-Liga

epi.ch

50

The Schweizerische Epilepsie-Liga is a Swiss non-profit organization dedicated to epilepsy research, education, and support. Their website serves as a comprehensive resource for patients, healthcare professionals, and the general public, offering information on epilepsy, publications, events, and opportunities to support the organization through donations and memberships. The organization holds a reputable position within the Swiss healthcare non-profit sector, focusing on awareness and advocacy for epilepsy.