Security Directory

S

Savez Društava Multiple Skleroze Hrvatske

sdmsh.hr

41

Savez Društava Multiple Skleroze Hrvatske is a Croatian non-profit organization dedicated to supporting individuals affected by multiple sclerosis. The organization provides educational resources, rehabilitation support, community engagement, and digital content such as podcasts and a digital library. Their website serves as a comprehensive platform for information dissemination and community connection, targeting patients, families, and healthcare professionals within Croatia. The business model relies on donations, sponsorships, and partnerships to fund their activities and projects. Technically, the website is built on WordPress using modern plugins including Gravity Forms, Slider Revolution, and WPBakery Page Builder. It integrates Google Maps and YouTube APIs and employs GDPR compliance tools such as cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting and domain registration are consistent with the organization's Croatian base. From a security perspective, the site enforces HTTPS and uses reputable plugins with no visible vulnerabilities. However, some security headers could be improved or explicitly implemented. The presence of GDPR-compliant privacy and cookie policies indicates a good privacy posture, though no explicit security policy or incident response information is found. Tracking includes Google Analytics and Facebook Pixel, with moderate user tracking. Overall, the website presents a trustworthy and professional digital presence for a healthcare non-profit organization. Recommendations include enhancing security headers, ensuring all lazy loading assets load correctly, and adding a security.txt file for vulnerability disclosures to further strengthen security and transparency.

О

Общественное объединение инвалидов "Помощь больным рассеянным склерозом"

msbelarus.com

35

The website represents a Belarusian non-profit organization dedicated to supporting individuals with multiple sclerosis. It provides information, advocacy, and assistance to patients and their families, focusing on awareness, employment support, social participation, and international cooperation. The organization appears small and community-focused, with a clear mission and active content updates. Technically, the site is built on WordPress with common plugins and frameworks, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy/cookie policies, indicating room for compliance improvement. The absence of WHOIS data for the domain is a notable anomaly, reducing domain trustworthiness despite the legitimate content and contact information. Overall, the site is professional and trustworthy from a content and business perspective but should address privacy and security best practices to enhance compliance and trust.

Ö

Österreichische Multiple Sklerose Gesellschaft

oemsg.at

58

The Österreichische Multiple Sklerose Gesellschaft (ÖMSG) is a well-established non-profit Dachverband (umbrella organization) for Multiple Sclerosis societies across Austria. Founded in 1962, it serves as a central information and support hub for people affected by MS and their families, providing education, awareness, and advocacy. The organization maintains a strong presence with comprehensive content, regional partner societies, and active social media channels. Technically, the website is built on WordPress with modern plugins for SEO, GDPR compliance, and user interaction, including Google reCAPTCHA for form security. The site is fully accessible, mobile-optimized, and uses HTTPS with a good security posture. However, WHOIS data is unavailable, likely due to privacy protection, which limits domain trust analysis. Overall, the site reflects a professional, trustworthy, and user-focused organization with a clear mission in healthcare support.

Č

Česká společnost klinické biochemie

cskb.cz

55

Česká společnost klinické biochemie (ČSKB) is a professional non-profit organization dedicated to the support, development, and standardization of clinical biochemistry in the Czech Republic. It provides education, quality standards, scientific research support, and dissemination of the latest knowledge in the field. The organization collaborates with international bodies and organizes numerous events annually to foster professional growth and innovation. The website reflects a mature digital presence with a well-structured events calendar, newsletter subscription, and sponsor partnerships. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, serving a specialized healthcare audience effectively.

S

Sdružení soukromých gynekologů ČR

ssg.cz

49

Sdružení soukromých gynekologů ČR is a professional association representing private gynecologists in the Czech Republic. The organization provides membership services, legal support, and organizes professional events and conferences to support its members. The website reflects a niche healthcare association with a clear focus on serving medical professionals in gynecology. The domain has been registered since 2000, indicating a well-established presence in the sector. Technically, the website uses a combination of legacy and modern JavaScript libraries including jQuery, Owl Carousel, and Google Maps API. While the site is functional and moderately optimized for performance and SEO, it shows some technical debt such as the use of outdated jQuery versions and lacks visible modern security headers. The cookie consent mechanism is implemented with granular user preferences, indicating some level of privacy compliance, although no explicit privacy policy or terms of service pages were found. From a security perspective, the site uses HTTPS (implied by base href and external links), but lacks explicit security headers and uses older JS libraries that may pose vulnerabilities. No incident response or security policy information is publicly available. The WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is professional and trustworthy but could improve its security posture and privacy transparency.

Sdružení praktických lékařů České Republiky (SPL ČR) is a professional association serving general practitioners in the Czech Republic. The website provides member-exclusive content, public information, and resources related to healthcare and professional development. It supports member registration, communication, and discussion forums, positioning itself as a key national association in the healthcare sector. Technically, the site is built on WordPress with a Bootstrap-based theme and common plugins for community and form management. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and multi-factor authentication. Privacy and cookie policies are present, though cookie consent mechanisms are missing. No terms of service or vulnerability disclosure policies were found. Overall, the site is professional, trustworthy, and well-aligned with its business purpose, but could improve security and privacy compliance aspects.

S

Společnost pro gastrointestinální onkologii ČLS JEP

sgo-cls.cz

60

Společnost pro gastrointestinální onkologii ČLS JEP is a Czech professional medical society specializing in gastrointestinal oncology. The organization focuses on multidisciplinary collaboration, education, and dissemination of knowledge through congresses, webinars, and an online library. The website serves as a portal for medical professionals to access educational resources and event information. Technically, the site is built on WordPress using common plugins and integrates Google Analytics with a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and a clear privacy policy page, which are areas for improvement. Overall, the site is professional, trustworthy, and well-targeted to its audience, though the absence of WHOIS data slightly reduces transparency.

Č

Česká gastroenterologická společnost ČLS JEP

cgs-cls.cz

56

Česká gastroenterologická společnost ČLS JEP is a professional medical society in the Czech Republic focused on gastroenterology. The organization provides educational resources, organizes congresses and conferences, and publishes guidelines for healthcare professionals. The website serves as a portal for members and interested parties to access event information, news, and educational materials. The target audience primarily consists of medical professionals specializing in gastroenterology. The business model is non-profit and centered on professional development and community building within the healthcare sector. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and Google reCAPTCHA for form security. It uses jQuery and Leaflet.js for interactive maps. The site is mobile-optimized and has good SEO practices with structured data and meta tags. Performance is moderate, with no major issues detected. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy and cookie policies are not explicitly found, which is a compliance gap. WHOIS data is missing, which reduces transparency and trustworthiness of the domain registration. Overall, the website is professional, content-rich, and serves its audience well. The main risks relate to missing privacy compliance documentation and lack of visible security headers. The absence of WHOIS data is a concern but does not necessarily indicate malicious intent. Strategic improvements in privacy disclosures and security hardening are recommended to enhance trust and compliance.

H

Hotel AGH Rožnov p. R.

hotel-agh.cz

57

Hotel AGH Rožnov p. R. is a well-established hospitality business located in Rožnov pod Radhoštěm, Czech Republic, with a history dating back to 1783. The hotel offers accommodation, dining, event hosting including conferences and weddings, and various stay packages targeting tourists and business travelers. The website reflects a professional and consistent brand image with clear service offerings and customer trust indicators such as high customer ratings and certifications. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, providing a good user experience with mobile optimization and clear navigation. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. Overall, the website is safe, accessible, and trustworthy but could improve in privacy compliance and security transparency.

O

Ogarek.cz

ogarek.cz

45

Ogarek.cz is a regional hospitality platform specializing in accommodation offerings in the Beskydy and Valašsko regions of the Czech Republic. The website provides listings of hotels, pensions, cottages, camps, and related tourism information including event calendars and travel tips. It also operates an e-commerce section for stay packages and gift vouchers, targeting tourists and travelers seeking quality accommodation in this area. The business appears to be a small-sized entity with a focused regional market presence. Technically, the website is built on WordPress with Elementor and WooCommerce, leveraging modern web technologies and SEO best practices such as structured data and Yoast SEO plugin. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled, but lacks explicit security headers which should be addressed. Privacy compliance is basic with a cookie consent mechanism present but no clear privacy policy or terms of service pages identified. No WHOIS data is available, likely due to privacy protection, which is common for small businesses. Overall, the site is safe, professional, and trustworthy for general audiences.

W

Wellness Hotel Energetic / Forman Adamec a.s.

hotel-energetic.cz

46

Wellness Resort Energetic, operated by Forman Adamec a.s., is a well-established hospitality business located in Rožnov pod Radhoštěm, Czech Republic. The resort offers a comprehensive range of services including accommodation, wellness, sports, gastronomy, and event hosting, targeting both leisure and corporate clients. The website reflects a mature digital presence with good content quality, clear navigation, and consistent branding. Technically, the site is built on WordPress using the Enfold theme, with standard integrations such as Google Analytics and Google Maps. Security posture is adequate with HTTPS enforced and some security best practices observed, though additional security headers could enhance protection. Privacy compliance is basic but includes a privacy policy and cookie consent mechanism. Overall, the business demonstrates credibility and professionalism with positive customer testimonials and clear contact information.

C

CHIRANA T. Injecta, s.r.o.

chirmax.cz

51

CHIRANA T. Injecta, s.r.o. is a Czech-based manufacturer specializing in surgical sutures, atraumatic needles, and surgical meshes. The company emphasizes advanced research and technology in producing over 1500 individual products, serving healthcare professionals and medical institutions. Their market position is supported by ISO 13485 certification and CE marking, indicating compliance with medical device quality standards. The website reflects a professional and consistent brand image with clear contact information and partner affiliations. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and Google Fonts, with a custom or unknown CMS. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid but could benefit from formal vulnerability disclosure policies and incident response contacts. Privacy compliance is well addressed with comprehensive privacy and cookie policies in Czech language, aligned with GDPR requirements. The absence of WHOIS data limits domain trust analysis, but the website's content and certifications support its legitimacy. Overall, the website is a reliable digital presence for a medium-sized healthcare manufacturing company, with good technical and security practices. Strategic improvements in security headers and transparency policies would further strengthen trust and compliance.

Vexim s.r.o. is a Czech-based international company specializing in the distribution of medical devices, primarily serving healthcare facilities and hospitals in the Czech Republic and countries of the former Yugoslavia. With over 20 years of market presence, Vexim offers a broad portfolio including orthopedics, spinal surgery equipment, hospital supplies, and area disinfection products. The company also engages in export activities and development projects, positioning itself as a reliable partner in the healthcare sector. The website reflects a professional and consistent brand image with clear contact information and product offerings. Technically, the site is built on WordPress with modern plugins and themes, providing good mobile optimization and user experience. However, it lacks published privacy and cookie policies, which are important for compliance.

S

SIDESS s.r.o.

sidess.org

60

SIDESS s.r.o. is a Czech Republic based healthcare supplier specializing in the exclusive distribution of POWERBONE medical devices and biomaterials. Founded in 2022, the company targets healthcare professionals and institutions, offering innovative surgical materials across multiple divisions including hospital large operations, stomatology, plastic surgery, and veterinary surgery. The website reflects a professional and consistent brand presence with clear business information and contact details. Technically, the site is built on WordPress with modern plugins for SEO and GDPR compliance, delivering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers and policies could be improved. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

R

RIVmedical

rivmedical.sk

38

RIVmedical is a specialized medical equipment provider focusing on neurosurgery, orthopedics, and traumatology products. Founded in 2017 and based in Slovakia, the company aims to provide the latest therapeutic methods to patients by collaborating with renowned specialists and producers. Their website reflects a professional and consistent brand image targeting healthcare professionals and patients. Technically, the website is built on WordPress using modern plugins and frameworks, hosted by WebHouse with DNSSEC and HTTPS properly configured, ensuring a secure browsing experience. However, the absence of privacy and cookie policies, as well as limited contact information, indicates areas for compliance improvement. Security posture is generally good but could benefit from additional security headers and incident response information. Overall, the website is trustworthy and functional with moderate risk and room for enhancement in privacy and security transparency.

O

ORTEX spol. s r. o.

ortexzlin.cz

35

Ortex Zlín is a Czech company specializing in the development, serial production, and sale of orthopedic braces and bandages primarily for postoperative, conservative treatment, and rehabilitation of damaged joints and ligaments. Established in 2004, the company operates a professional website built on WordPress with WooCommerce, targeting healthcare professionals and patients in need of orthopedic supports. The website features a clear product catalog, contact information, and complies with GDPR cookie consent requirements. Technically, the site uses modern web technologies including jQuery, Google Analytics, and Google Maps API, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms, though security headers and explicit incident response policies are absent. Overall, the site is trustworthy, professionally maintained, and aligned with its business objectives.

G

GPS Ofa s.r.o.

gps-ofa.cz

43

GPS Ofa s.r.o. is a Czech family-owned company established in 1995 specializing in the distribution and sale of premium healthcare materials and medical devices, including implants and orthopedic products. The company operates both B2B and B2C e-commerce platforms and holds an ISO 13485:2016 certification, underscoring its commitment to quality standards in medical device supply. The website reflects a professional presence with clear product catalogs and partner affiliations with reputable medical brands. Technically, the site employs common JavaScript libraries and frameworks such as jQuery and Bootstrap, providing a moderate performance and good mobile responsiveness. Security-wise, the site implements cookie consent mechanisms and GDPR-compliant privacy policies but lacks visible HTTP security headers and explicit security policies. The absence of WHOIS data for the domain reduces domain registration trust, though the business information and website content appear legitimate and professional. Overall, the site presents a solid digital footprint with room for security and technical enhancements.

B

BIONIK Stapro Group s.r.o.

bionik.cz

51

BIONIK Stapro Group s.r.o. is a Czech Republic-based specialist distributor of medical devices, focusing on ultrasound machines, surgical instruments, bone implants, and external fixators. Established in 1990, the company holds exclusive representation for several reputable medical brands and provides authorized warranty and post-warranty services. Their website targets healthcare professionals and medical facilities, offering detailed product information and news updates. Technically, the website is built on WordPress with Elementor, uses modern web technologies, and includes Google Analytics and reCAPTCHA for security and analytics. The site is well-optimized for SEO and mobile devices, with a clear cookie consent mechanism and GDPR-compliant privacy policy. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response information are absent. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations.

A

Arthrex s.r.o.

arthrex.cz

68

Arthrex s.r.o. is a subsidiary of Arthrex Inc., a global leader in medical technology specializing in orthopedic and sports medicine products. Operating in the Czech Republic and Slovakia since 2019, the company provides innovative surgical instruments, educational resources, and integrated solutions for healthcare professionals. The website reflects a professional and comprehensive digital presence, targeting surgeons and medical institutions with detailed product portfolios and contact information. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries such as jQuery, Splide.js, and Slick Carousel for interactive elements. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes, with a robust cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and features good SEO practices, though some accessibility improvements could be made. From a security perspective, the site enforces HTTPS and employs cookie consent with opt-in mechanisms. However, no explicit security headers were detected, and no dedicated security or incident response policies are published. The absence of WHOIS data limits domain trust verification, but the professional content and external references support legitimacy. Overall, the security posture is solid but could benefit from enhanced headers and transparency. The overall risk assessment is moderate-low, with recommendations to improve security headers, publish incident response and vulnerability disclosure policies, and enhance accessibility. The business credibility is high, supported by clear contact details, legal documentation, and consistent branding.

T

Teleflex Incorporated

teleflex.com

60

Teleflex Incorporated operates a global healthcare technology website providing regional access to its medical device products and services. The company is positioned as an established enterprise in the healthcare sector with a broad international presence across Americas, EMEA, and Asia Pacific. The website serves primarily healthcare professionals and regional distributors, offering localized content and contact points. Technically, the site uses a modern and common technology stack including jQuery, Bootstrap, and Font Awesome, with a CMS likely based on DotCMS. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. Privacy compliance is supported by a clear privacy policy and cookie consent banner powered by Osano, indicating GDPR awareness. No critical security issues or blocking mechanisms were detected, and the domain registration is consistent with a mature, legitimate business. Overall, the website is professional, secure, and trustworthy with room for improvement in security policy transparency and technical security hardening.

M

MedText

medtext.eu

56

MedText is a specialized communication platform designed to provide GDPR-compliant messaging solutions for healthcare organizations. The service targets healthcare providers who require secure, efficient, and compliant communication tools to improve patient care coordination. The website presents a professional and consistent brand image, emphasizing compliance certifications and user testimonials to build trust. The business model is subscription-based, focusing on organizational use rather than individual consumers. Technically, the website is built on OctoberCMS and leverages modern web technologies including Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security is well addressed with HTTPS enforcement and claims of end-to-end encryption, although some security headers are not explicitly detected in the HTML content. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent mechanism, and GDPR-focused messaging. The security posture is solid but could be improved by publishing explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is privacy protected, which is common and justified for this type of healthcare communication service. Overall, the domain and website appear legitimate and trustworthy. The overall risk is low, with recommendations to enhance security headers, publish incident response information, and consider a vulnerability disclosure policy to further strengthen trust and compliance.

M

MEDIPRAX CB s.r.o.

mediprax.cz

58

MEDIPRAX CB s.r.o. is a Czech Republic based company specializing in the sale and servicing of medical equipment. Established in 2000, it operates an e-commerce platform built on PrestaShop, targeting healthcare professionals and institutions within the Czech market. The website presents a professional and consistent brand image with clear business information and contact details. Technically, the site uses modern web technologies including HTTPS, Google Fonts, Font Awesome, and Material Icons, ensuring a good user experience with mobile responsiveness and moderate performance. Security posture is solid with HTTPS and tokenized forms, though it lacks explicit security headers and incident response information. Privacy compliance is addressed with a visible cookie consent mechanism and a privacy policy page in Czech, indicating GDPR awareness. Overall, the site is trustworthy, safe, and well-positioned within its niche healthcare retail sector.

A

AV MEDIA SYSTEMS, a.s.

avmedia.cz

44

AV MEDIA SYSTEMS, a.s. is a well-established Czech company specializing in audiovisual solutions and event technical services, with over 30 years of experience. The company serves a diverse clientele including businesses, educational institutions, government bodies, and cultural organizations. Their offerings include design, implementation, rental, and servicing of audiovisual technologies, as well as event production and creative audiovisual projects. The website reflects a mature digital presence with comprehensive content, clear navigation, and active engagement through social media and partnerships.

M

Medsol s.r.o.

medsol.cz

42

Medsol s.r.o. is a specialized healthcare technology company based in the Czech Republic, focusing on medical devices, clinical and hospital information systems, and intensive care solutions. Their website clearly targets healthcare professionals, restricting access to non-experts by legal disclaimer. The company offers products such as Metavision, consumables, defibrillators, and vital signs monitors, positioning itself as a niche provider in the healthcare technology sector within the Czech and Slovak markets. Technically, the website is built on WordPress with modern frontend libraries like Bootstrap and jQuery, and integrates Google Analytics and Sklik for marketing and tracking purposes. The site is mobile optimized and presents a professional design with clear navigation. Security-wise, HTTPS is enforced, but the absence of security headers and privacy/cookie policies indicates room for improvement. The lack of WHOIS data reduces domain trust, though the website content and structure suggest a legitimate business. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

S

SNOTY, s.r.o.

snoty.cz

48

SNOTY, s.r.o. is a Czech small business established in 1995 specializing in manufacturing promotional confectionery products such as hygienically packaged sugars, chocolate-covered almonds, biscuits, lollipops, and chocolates with custom advertising prints. The company holds a strong and stable market position in the Czech Republic, serving a diverse range of business customers seeking promotional items. The website is professionally designed with clear navigation and good mobile optimization, leveraging common web technologies including Bootstrap, jQuery, and Google Analytics. Security measures include Google reCaptcha integration, but lack of visible security headers and missing privacy and cookie policies indicate room for improvement. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with the business claims. Overall, the site presents a moderate security posture and good business credibility.

H

Handicap trade s.r.o.

handicaptrade.cz

40

Handicap trade s.r.o. is a Czech company specializing in the development, manufacture, and distribution of locomotion aids and medical supplies, including orthopedic braces, crutches, and rehabilitation products. The company holds a significant market position domestically, covering approximately one-third of the Czech market and exporting a portion of its production. The website reflects a professional business focused on healthcare products with a clear product catalog and user-friendly navigation. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, with Google Analytics integrated for visitor tracking. The site is mobile responsive and well-structured, though it lacks visible privacy and cookie policies, which impacts compliance and user trust. Security headers are not detected in the provided data, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS, but the absence of WHOIS data and security headers reduces the overall trustworthiness. No contact emails or phone numbers are explicitly provided, which may hinder user communication and trust. There is no evidence of a formal privacy policy or cookie consent mechanism, which is a compliance gap, especially under GDPR regulations. Overall, the website is functional and content-rich but requires enhancements in privacy compliance, security best practices, and transparency of contact information to improve its risk profile and user trust.

M

MEDIROL s.r.o.

medirol.cz

50

MEDIROL s.r.o. is a Czech Republic-based company specializing in the manufacturing and sale of medical transport equipment, including powered stretchers, roll-in stretchers, and transport chairs. The company targets healthcare providers and emergency services, offering solutions designed to improve patient transport safety and efficiency. The website presents a professional image with clear product categories and multilingual support, indicating a medium-sized enterprise with a specialized niche market position. Technically, the website is built on WordPress using the Avada theme and incorporates modern web technologies such as jQuery and Slider Revolution. The site is mobile-optimized and includes multilingual capabilities via TranslatePress. Performance is moderate, with good SEO and accessibility features, though some improvements could be made in accessibility and cookie consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration but lacks several security headers and explicit incident response contact information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. The absence of WHOIS data reduces trust slightly, but the professional website and business focus support legitimacy. Overall, the site is well-structured and professional but would benefit from enhanced security headers, clearer contact information, and improved privacy compliance to strengthen trust and compliance posture.

H

Hotel Galant

galant.cz

59

Hotel Galant operates as a four-star hospitality provider with two branches located in Mikulov and Lednice, Czech Republic. The business focuses on delivering accommodation, wellness, gastronomy, and event hosting services to tourists and travelers in the region. The website reflects a well-established local hotel brand with a clear market position and a comprehensive offering of services tailored to leisure and business guests. The company has been operational since 2006, consistent with the domain registration date, indicating a stable presence in the hospitality sector. From a technical perspective, the website is built on WordPress using the Oxygen Builder framework, enhanced with jQuery and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization, SEO practices, and a cookie consent mechanism compliant with GDPR requirements. Hosting appears to be managed by Pressidium, a reputable WordPress hosting provider, contributing to moderate performance and reliability. Security posture is solid with HTTPS enforced and cookie consent implemented, although explicit security headers and a published security policy are absent. No vulnerabilities or exposed sensitive data were detected. The absence of a security.txt or incident response contact suggests room for improvement in transparency and readiness. Overall, the site maintains a trustworthy and professional online presence suitable for its business domain. The risk assessment is low, with no signs of malicious activity or compliance violations. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen trust and resilience.

S

Silverchair

manuscriptcentral.com

62

Silverchair is an established enterprise technology company specializing in workflow management solutions for scholarly publishing. Their flagship product, ScholarOne Manuscripts, is trusted by prestigious academic publishers and associations worldwide. The company offers a suite of products including ScholarOne Conferences and Gateway, supported by a robust platform infrastructure. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their B2B audience. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager and reCAPTCHA, indicating a commitment to performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be enhanced. Overall, the site demonstrates high professionalism and trustworthiness, supporting Silverchair's market position as a leader in scholarly publishing technology.

L

Lázně Teplice nad Bečvou a.s.

ltnb.cz

49

Lázně Teplice nad Bečvou a.s. is a historic spa and rehabilitation center located in the Czech Republic, offering specialized healthcare services including treatment for circulatory and nervous system diseases, metabolic disorders, and post-surgical rehabilitation. The company targets both insured patients and self-paying clients, including pediatric care through its subsidiary. The website reflects a mature digital presence with modern technologies such as WordPress and Elementor, supported by Matomo analytics and Google Tag Manager for marketing and tracking. Privacy and cookie policies are well implemented, demonstrating GDPR compliance. Security posture is good with HTTPS and consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data is a notable anomaly that slightly impacts trust assessment but does not detract from the professional presentation and comprehensive business information available on the site.

L

Léčebné lázně Bohdaneč a.s.

llb.cz

39

Léčebné lázně Bohdaneč a.s. is a well-established healthcare spa company based in the Czech Republic, specializing in rehabilitation and spa treatments, particularly for patients recovering from orthopedic surgeries. The company has a long history dating back to 1897 and maintains a strong regional presence with a professional and content-rich website. Their services include spa care covered by insurance, medical spa services, and gift vouchers, targeting patients requiring specialized rehabilitative care. Technically, the website is built on WordPress with Elementor and integrates modern SEO and analytics tools, demonstrating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, supporting a positive business credibility profile.

I

Inca Collagen s.r.o.

incacollagen.cz

58

Inca Collagen s.r.o. operates a professional e-commerce website focused on selling 100% natural marine collagen products targeted at consumers interested in health, beauty, and wellness. The company has a clear market presence in the Czech Republic with a Slovak regional site, supported by positive customer testimonials and certifications. The website is built on the PrestaShop platform and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a mature digital marketing strategy. Privacy and cookie policies are well implemented, reflecting GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Overall, the site demonstrates good technical and business maturity with a solid security posture but could improve security headers and WHOIS transparency.

B

BTL zdravotnická technika, a.s.

btl.cz

56

BTL zdravotnická technika, a.s. is a well-established Czech healthcare technology company founded in 1993, specializing in the development and manufacturing of medical devices for physical therapy, cardiology, and aesthetic medicine. The company holds a strong market position as one of the largest global manufacturers in its sector, supported by ISO certification and a comprehensive product portfolio. The website targets medical professionals and specialists, providing detailed product information, authorized service options, and career opportunities. Technically, the website is built on a modern Ruby on Rails framework with integration of popular analytics and marketing tools such as Google Analytics, Facebook Pixel, and Seznam retargeting. It features a responsive design optimized for mobile devices and includes a robust cookie consent mechanism compliant with GDPR regulations. The site demonstrates good SEO and accessibility practices, although some security headers could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks explicit security policy or incident response contact information. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS data is noted but is common for corporate domains using privacy protection, and the overall legitimacy of the domain is supported by consistent business information and professional presentation. Overall, the website presents a professional, trustworthy, and compliant digital presence for BTL zdravotnická technika, a.s., with recommendations to enhance security headers and provide clearer incident response contacts to further strengthen its security posture.

J

Jihomoravská zdravotní, a.s.

sanatoriumpalava.cz

62

Sanatorium Pálava is a large-scale, specialized rehabilitation healthcare project in the South Moravian Region of the Czech Republic, operated by Jihomoravská zdravotní, a.s. The website presents a modern, well-structured digital presence with clear information about the project timeline, services, and team. The business is positioned as a unique regional healthcare provider with EU co-financing and government backing. Technically, the site uses WordPress with the Divi theme, modern JavaScript libraries, and GDPR-compliant cookie management, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

B

BIREME/OPAS/OMS

bvsalud.org

74

The website bvsalud.org serves as the Regional Portal of the Virtual Health Library (BVS), coordinated by BIREME, a specialized center of PAHO/WHO. It provides comprehensive access to scientific and technical health information for Latin America and the Caribbean, targeting health professionals, researchers, and policymakers. The portal offers key services including access to the LILACS database, DeCS/MeSH thesaurus, and various evidence-based decision support resources. The site is well-positioned as a trusted regional health information hub with strong institutional backing. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses various plugins for analytics, accessibility, and content management. It demonstrates good mobile optimization, accessibility features, and SEO practices. The hosting and DNS infrastructure is stable, though DNSSEC is not enabled. Analytics tools like Google Analytics and Hotjar are used with a clear cookie consent mechanism, indicating good privacy compliance. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-standing domain registration consistent with the organization's history, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its audience effectively. Strategic improvements could include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen its security posture.

K

Kite Medical Information

kitemedinfo.com

44

Kite Medical Information operates as an online medical resource providing scientific information about Gilead products, primarily targeting US healthcare professionals and patients. The website serves as an educational platform offering access to product-related scientific data without providing medical advice. The business is positioned as a niche healthcare information provider with a medium-sized operational scale, founded in 2019 and associated with Gilead Sciences. The website branding is consistent and professional, reflecting its healthcare industry focus. Technically, the website is built on WordPress with modern technologies including Bootstrap 5, Yoast SEO, and Google Analytics for tracking. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, some accessibility features are basic, and there is room for improvement in security headers and privacy compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protections. However, DNSSEC is not enabled, and no explicit security policies or incident response contacts are published. Google Analytics is implemented with opt-out capabilities, but privacy and cookie policies are absent, indicating gaps in compliance. No vulnerabilities or suspicious patterns were detected in the domain registration or site content. Overall, the website presents a trustworthy and professional front for healthcare information but would benefit from enhanced privacy compliance, security policy transparency, and DNS security improvements to strengthen its security posture and regulatory adherence.

Č

Česká advokátní komora

advokatnidenik.cz

62

Advokátní deník is an official Czech legal news portal published by the Czech Bar Association (Česká advokátní komora). It provides legal news, articles, legislative updates, and announcements targeted at legal professionals and the broader legal community in the Czech Republic. The website is well-positioned as a trusted source of legal information with a consistent brand and professional content quality. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various SEO and performance plugins. It is mobile optimized and uses structured data for enhanced SEO and social media integration. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is strong with GDPR-aligned cookie policies and consent banners. No direct contact emails or phone numbers are found on the homepage, but social media channels are active and official. Overall, the site is professional, trustworthy, and serves its niche effectively.

S

Society of Trust and Estate Practitioners (STEP)

steppca.org

64

The STEP Private Client Awards website represents a well-established professional awards platform within the private client legal and financial services industry. It serves a global audience of solicitors, lawyers, accountants, bankers, trust managers, and financial advisors, providing recognition through a rigorous judging process and high-profile events. The website content is rich, professionally presented, and consistent with the STEP brand, indicating a mature digital presence. Technically, the site is built on Drupal 11 with Bootstrap styling, leveraging modern JavaScript libraries for enhanced user experience. The site is mobile-optimized and accessible, with good SEO practices and multimedia content such as videos and image galleries. Hosting details are not explicit, but the site uses HTTPS with strong SSL configuration, ensuring secure communications. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partially addressed with a privacy policy and terms of use, but no cookie consent mechanism is evident. Analytics usage is moderate, primarily via Google Tag Manager, with no active Google Analytics ID detected. Overall, the website is trustworthy and professional, with a strong business credibility score. The absence of WHOIS data due to privacy protection is justified for this type of organization. Recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response information to improve compliance and trust.

C

CrazyCall Inc.

channels.app

58

Channels, operated by CrazyCall Inc., is a technology company offering a data-driven business phone system designed to enhance customer service and sales operations. The platform integrates with popular CRM and eCommerce tools, providing features such as international phone numbers, two-way SMS, and web call widgets. Positioned as a modern alternative to traditional phone systems, Channels targets businesses seeking to improve customer engagement and operational efficiency. The website is professionally designed with clear navigation and strong trust signals including customer testimonials and third-party review ratings. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Analytics, Amplitude, and Calendly integrations. The site is mobile optimized and SEO friendly, though accessibility could be improved. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks published security policies or incident response information. Overall, the domain registration is consistent with the business identity, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and implementing vulnerability disclosure mechanisms to further strengthen trust and compliance.

R

Rádio JIH

radiojih.cz

10

Rádio Jih is a regional radio broadcaster serving the southern Moravia region of the Czech Republic. The website offers online streaming, program schedules, playlists, contests, and local news content, positioning itself as a key media outlet for local audiences. The business model centers on media broadcasting with advertising and event promotion, supported by partnerships with local businesses. The site demonstrates a good level of digital maturity with a WordPress CMS infrastructure, integration of GDPR-compliant cookie consent mechanisms, and active social media engagement. Technically, the website uses modern web technologies including jQuery and WordPress plugins such as Complianz for GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with room for improvement in accessibility and additional security headers. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces domain trustworthiness, though the website content and compliance measures indicate legitimate operations. Overall, the website is professional, compliant with privacy regulations, and trustworthy for its audience. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to improve trust and compliance.

ETIFLEX, s.r.o. is a small family-owned printing company based in the Czech Republic specializing in the production of labels, particularly wine labels and packaging. The company emphasizes personalized service, quality materials, and comprehensive solutions from graphic design to final production. Their market position is that of a trusted specialist in label printing with a strong focus on the wine industry and related sectors. Technically, the website is built on Joomla CMS and uses common web technologies such as jQuery, Mootools, and Bootstrap. It is mobile responsive and includes tracking tools like Google Analytics and Facebook Pixel. Security posture is moderate with HTTPS enabled and email cloaking implemented, but lacks advanced security headers and explicit privacy or cookie policies. WHOIS data is unavailable, which reduces domain trust verification. Overall, the website is professional, content-rich, and safe for general audiences.

R

RENOCAR a.s.

renocar.cz

52

RENOCAR a.s. is an established authorized dealer and service provider for BMW, MINI, and BMW Motorrad vehicles operating primarily in the Czech Republic with multiple physical branches. The company offers a comprehensive range of services including new and used vehicle sales, authorized servicing, financial services, insurance, and test drives. Their market position is strong within the automotive retail sector, supported by consistent branding and a professional online presence. The website is well-designed, mobile-optimized, and integrates modern tracking and marketing tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response contacts are missing. The absence of WHOIS registration data is a notable gap, reducing domain registration trustworthiness but not detracting from the overall legitimacy indicated by the website content and structured data. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen trust and compliance.

The website www.eklasa.cz represents the official online presence of the KLASA national quality mark, a prestigious certification for Czech and Moravian food products. The platform serves both consumers and producers by providing information about certified products, news, and guidance on obtaining the KLASA mark. It holds a strong market position as a recognized national quality brand since 2003, promoting over 900 products from nearly 280 local producers. The business model revolves around certification, promotion, and quality assurance in the food sector within the Czech Republic. Technically, the website employs a moderate technology stack including jQuery, Google Analytics, Microsoft Clarity, and Facebook SDK for social integration and analytics. The site is mobile-optimized with a responsive design and includes a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details are evident, and some modern security headers are missing, indicating room for technical improvements. From a security perspective, the site uses HTTPS (assumed from external scripts loaded via HTTPS), implements cookie consent, and avoids exposing sensitive data. Yet, the absence of security headers and vulnerability disclosure mechanisms suggests a moderate security posture. The WHOIS data is unavailable, which raises concerns about domain registration transparency, though the website content and social media presence support legitimacy. Overall, the site is professionally designed, content-rich, and trustworthy for its intended audience. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving WHOIS transparency to bolster trust and compliance.

N

National Heritage Institute

zamek-valtice.cz

45

The website represents the official online presence of Valtice Castle, a significant cultural heritage site managed by the Czech National Heritage Institute. It provides comprehensive visitor information, including tours, events, and historical context, targeting tourists and cultural enthusiasts. The site is well-positioned as a government-operated heritage site with UNESCO World Heritage status, enhancing its credibility and trustworthiness. Technically, the website employs modern web technologies such as Leaflet.js for mapping, Google Analytics for visitor tracking, and asynchronous script loading to optimize performance. The site is mobile-optimized and accessible, with a clear navigation structure and consistent branding. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response information. WHOIS data confirms the domain's legitimacy and appropriate age for the business history. Overall, the site demonstrates a good balance of content quality, technical implementation, and privacy compliance, suitable for its government and cultural heritage context.

V

VARTA AG

varta-ag.com

73

VARTA AG is a well-established German company with a history spanning over 130 years, specializing in energy solutions including micro and household batteries, custom lithium-ion batteries, and industrial and home energy storage systems. The company targets both consumer and industrial markets, positioning itself as an innovative leader in battery technology. The website is professionally designed, built on TYPO3 CMS, and incorporates modern marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Hotjar. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data is a concern but likely due to privacy protection or registrar policies. Overall, the website reflects a credible and professional business presence with good technical and security standards.

V

Vinescapes

vinescapes.com

68

Vinescapes is a specialist consultancy and service provider focused on the wine industry, offering expertise in grape growing, winemaking, vineyard management, winery design, investment advice, training, and research. The company targets wine professionals, vineyard owners, and investors primarily in the UK market. The website is built on a modern WordPress platform using Elementor and WooCommerce, integrating various third-party services such as Google Analytics, AdRoll, and Maploom API for enhanced functionality and marketing. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not published. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service pages found. The absence of WHOIS registration data for the domain is a notable concern, suggesting the domain may be unregistered or privacy protected, which impacts trustworthiness. Overall, the site is professional, well-branded, and content-rich, but would benefit from improved transparency in privacy and security policies.

G

Grandes Vinos y Viñedos, S.A.

grandesvinos.com

54

Grandes Vinos y Viñedos, S.A. operates a professional winery and e-commerce platform focused on wines from the Cariñena region in Spain. The company emphasizes sustainable viticulture and cultural legacy, targeting wine consumers and enotourism visitors. The website is well-designed, mobile-optimized, and integrates modern technologies including WordPress, WooCommerce, and Google Tag Manager. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. Security posture is good with HTTPS and no evident vulnerabilities, though some security headers could be improved. The absence of WHOIS data for the domain is a concern for domain legitimacy verification but is offset by strong branding, certifications, and social media presence. Overall, the site presents a trustworthy and professional digital presence with moderate risk due to domain registration opacity.

M

Město Valtice

valtice.eu

54

The website valtice.eu serves as the official online presence for the town of Valtice in the Czech Republic. It provides comprehensive municipal information including city news, institutional contacts, tourism details, public documents, and event calendars. The site targets residents, visitors, and local businesses, positioning itself as a key resource for local government services and community engagement. The business model is typical of a government portal, focusing on information dissemination and public service. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Swiper, and a Botpress AI chatbot, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy policies, which are areas for improvement. From a security perspective, the site demonstrates good baseline practices such as HTTPS and cookie consent but lacks visible security headers and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is due to privacy protection by EURid, which is justified for a municipal website. Overall, valtice.eu is a trustworthy and professional municipal website with good content quality and user experience. Strategic improvements in security headers, privacy documentation, and vulnerability disclosure would enhance its security posture and compliance.

A

adSYSTEM

bezpecne.online

68

Bezpecne.online is an educational project operated by adSYSTEM focused on raising awareness and providing education in cybersecurity and online safety, primarily targeting a Czech-speaking general audience. The website offers knowledge resources, event calendars, and guidance on ICT security risks and privacy. The business operates as a small entity with a niche focus in the education and technology sectors, established around 2017. Technically, the site uses a custom or unknown CMS with jQuery and standard web technologies, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and cache control headers but lacks advanced security headers and formal privacy or cookie policies. Contact is limited to a web form with no direct emails or phone numbers visible. WHOIS data is consistent with the business identity, supporting legitimacy. Overall, the site is professional and trustworthy but could improve compliance and security transparency.