Security Directory

M

Město Ostrov

ostrov.cz

10

Město Ostrov operates an official municipal website serving the residents and stakeholders of the town Ostrov in the Czech Republic. The site provides comprehensive information about city governance, news updates, legal documents, event calendars, and contact details for various municipal departments. It targets local citizens, businesses, and visitors seeking official information and services. The website is well-branded and consistent with government standards, reflecting a medium-sized municipal entity founded in 1998. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Swiper.js for UI components, Google reCAPTCHA for bot protection, and Google Translate for multilingual support. It is hosted by WEDOS, a known Czech hosting provider, and uses HTTPS with good SSL configuration. The site is mobile-optimized and includes accessibility features, though some improvements are possible. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and integrates Google Analytics with user consent. However, explicit security headers like CSP and X-Frame-Options are not visibly configured, and no public security or incident response policies are published. No vulnerabilities or suspicious patterns were detected. WHOIS data confirms domain legitimacy and long-term registration consistent with municipal use. Overall, the website demonstrates a good balance of content quality, technical implementation, security posture, privacy compliance, and business credibility. It is a trustworthy and professional government portal with room for minor security and accessibility enhancements.

DECLIMA s.r.o. is a Czech company specializing in smart building technologies and energy management solutions, primarily serving private and commercial customers in the Litomyšl region. Their services include energy measurement and control, project design, coordination of trades, financing assistance, automation with Loxone systems, installation, training, and servicing. The company positions itself as a comprehensive provider from project inception to ongoing monitoring and support. Technically, the website is built on WordPress with modern SEO and analytics tools, showing a good level of digital maturity. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though some advanced security headers are missing. The absence of WHOIS data limits domain trust assessment, but the professional web presence and clear contact information support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

S

SIESTA SOLUTION s.r.o.

siesta-labs.com

10

Siesta Labs is a Czech Republic based innovation lab and startup studio founded in 2020, specializing in software development and startup incubation. Their services include AI, web and mobile applications, system architecture, and business consulting. The company targets innovators, startups, and businesses seeking scalable digital solutions. The website reflects a professional and consistent brand with clear navigation and relevant content. Technically, the site uses modern frameworks like Bootstrap and integrates analytics tools such as Microsoft Clarity, Google Analytics, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is solid with HTTPS and secure forms, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic with privacy and terms documents available but lacking cookie consent mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

M

Místní akční skupina Bobrava

masbobrava.cz

43

Místní akční skupina Bobrava is a Czech regional non-profit organization focused on supporting local municipalities, schools, entrepreneurs, non-profits, and the general public within the Bobrava region. The organization provides information on funding opportunities, promotes regional products and services, and engages the community through news updates and events. Their website reflects a professional and community-oriented approach with clear navigation and relevant content. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap, and it employs Google reCAPTCHA for form security and a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust assessment, but the website's content and structure suggest legitimacy. Overall, the site is well-maintained, user-friendly, and compliant with privacy regulations.

E

ENERGO GROUP s.r.o.

energogroup.cz

10

ENERGO GROUP s.r.o. is a Czech Republic based company specializing in turnkey photovoltaic solar power plant installations, primarily targeting residential and commercial customers interested in roof-mounted solar energy solutions. The company emphasizes quality, safety, and reliability with over 12 years of experience in the energy sector. Their website reflects a professional business presence with clear branding and a focus on renewable energy services. Technically, the website is built on WordPress using Elementor and integrates modern tools such as Google Analytics, Google Tag Manager, and Cookiebot for analytics and cookie consent management. The site is mobile optimized and SEO friendly, leveraging Yoast SEO and structured data for enhanced search visibility. Security-wise, the website enforces HTTPS and employs cookie consent mechanisms, but lacks some security headers and explicit security policies. WHOIS data is not publicly available, indicating privacy protection, which is common for businesses but slightly reduces transparency. Overall, the website is professional, secure, and compliant with privacy regulations, though improvements in explicit privacy policy publication and security headers are recommended.

O

Obec Potštejn

potstejn.cz

10

Obec Potštejn operates a municipal government website serving the local community of Potštejn in the Czech Republic. The site provides residents and visitors with access to official documents, public notices, tourism information, event management, and online municipal services. The website is built on WordPress with popular plugins such as WooCommerce and Events Manager, indicating a moderate level of digital maturity. The design is professional and consistent, with good mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced, but lacks some important security headers and explicit privacy and cookie policies, which are critical for compliance and user trust. Overall, the domain registration and WHOIS data align well with the website's claims, supporting its legitimacy.

W

Energie od lidí k lidem | Wattlink

wattlink.cz

54

Wattlink.cz is a newly established Czech energy platform focused on peer-to-peer energy exchange, as suggested by its slogan 'Energie od lidí k lidem'. The website is hosted on DigitalOcean and uses modern web technologies such as Google Tag Manager and Font Awesome for analytics and UI icons. However, the site currently lacks comprehensive content, including privacy policies, cookie consent mechanisms, terms of service, and contact information, which are critical for user trust and regulatory compliance. The technical infrastructure appears basic but functional, with moderate performance and mobile optimization. Security posture is weak due to the absence of security headers and visible security policies. Overall, the site is accessible and legitimate but requires significant improvements in privacy, security, and business transparency to enhance credibility and compliance.

T

Transference

transference.cz

10

Transference is a Czech-based company specializing in photovoltaic systems, including solar power plants, carports, and battery energy storage solutions. The company targets commercial, public sector, and developer clients, offering comprehensive services from design to installation and administrative support. Their market position is supported by a professional website, client testimonials, and project references, indicating a solid presence in the renewable energy sector. Technically, the website is built on WordPress with Elementor, using modern web technologies and security best practices such as HTTPS and security headers. However, the absence of explicit privacy and cookie policies, as well as incident response information, indicates areas for compliance improvement. Overall, the security posture is good with no detected vulnerabilities or blocking mechanisms. The website is safe for general audiences and demonstrates a trustworthy business presence.

E

EnerCo Solutions

enercosolutions.cz

10

EnerCo Solutions is a Czech-based company specializing in the development of advanced software solutions leveraging machine learning algorithms to optimize community energy systems and enhance the efficiency of renewable energy sources. Founded in 2023, the company targets businesses, apartment buildings, and municipalities with tailored energy optimization services and a proprietary software product named EnerCa. Their market position is that of a niche provider focused on community energy optimization, supported by a network of industry partners. Technically, the website is built on a modern React and Next.js stack, hosted likely with Wedos, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforced, though lacking some advanced security headers and explicit incident response policies. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the company presents a professional and trustworthy digital presence with clear contact channels and partner affiliations.

U

Profesionálové s odpovědností | UNICONN CZ

uniconn.cz

6

The website uniconn.cz represents a newly registered domain (2023) with a professional business-oriented title but minimal content available. The site uses modern frontend technologies such as Nuxt.js and Tailwind CSS, indicating a contemporary technical infrastructure. However, the content is basic with no visible privacy, cookie, or terms of service policies, and no contact information or social media links are provided. Security posture is weak due to lack of security headers and absence of incident response or vulnerability disclosure information. Overall, the site appears to be in early development or minimal deployment stage with limited business and security maturity.

E

ENERKOM Slovácko, z.s.

enerkomslovacko.cz

58

ENERKOM Slovácko, z.s. is a small non-profit association focused on promoting community energy and sustainable development in the Slovácko region of the Czech Republic. The organization advocates for renewable energy sources, decentralization of energy production, and active member collaboration to improve quality of life and environmental conditions. Their key services include community energy initiatives, consulting, and partnerships. The website reflects a professional and regionally focused entity with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Owl Carousel, Google reCAPTCHA v3, and the Nette PHP framework. The site is mobile-optimized with good SEO practices and uses Google Fonts for typography. Hosting is managed through a Czech registrar with appropriate DNS configuration. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA to protect forms. Cookie consent is implemented with granular user controls and detailed disclosures. However, security headers such as CSP, HSTS, and X-Frame-Options are not detected, and no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is trustworthy and professionally maintained, with strong privacy compliance and a clear business purpose. Recommendations include enhancing HTTP security headers, publishing incident response contacts, and improving accessibility features to further strengthen security posture and user trust.

E

Ekowatt

ekowatt.cz

46

Ekowatt is a Czech-based consulting company specializing in energy, economics, and environmental advisory services. Established since 1998, it offers a broad range of services including energy audits, building certifications (LEED, BREEAM, WELL, DGNB), energy performance certificates, economic optimization studies, and carbon footprint calculations. The company targets businesses and organizations seeking to improve energy efficiency and environmental compliance. The website is professionally designed using WordPress with Elementor and Astra theme, providing a good user experience and mobile optimization. Privacy and cookie compliance are well implemented with a visible consent mechanism and comprehensive privacy policy. Security posture is adequate with HTTPS enabled, though additional security headers and explicit security policies could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, indicating stable and accessible infrastructure. Overall, Ekowatt presents a credible and professional online presence aligned with its business domain.

R

Renards

renards.cz

52

Renards is a Czech-based consulting firm specializing in EU subsidy and grant advisory services. The company offers comprehensive support in preparing funding applications and provides expert guidance across a broad spectrum of EU funding areas. Their target audience primarily includes businesses and organizations seeking financial support from EU programs. The website reflects a small-sized enterprise with a professional online presence, established since at least 2018. Technically, the website is built on WordPress and leverages modern tools such as Yoast SEO for search optimization, Google Tag Manager for analytics, and Cookiebot for cookie consent management. The site demonstrates good mobile optimization and a moderate performance profile. However, some technical improvements could be made, such as implementing additional security headers and publishing explicit privacy and security policies. From a security perspective, the site enforces HTTPS and uses a comprehensive cookie consent mechanism with granular user controls, indicating a good privacy compliance posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the overall digital footprint and business content suggest a legitimate and trustworthy operation. Overall, Renards presents a solid digital presence with room for enhancements in privacy transparency and security hardening. The business appears credible and focused on its niche market, with a well-structured website supporting its consulting services.

A

Asociace developeru

wedevelop.cz

10

The website represents Asociace developeru, a Czech real estate development association acting as a voice for the development community in the Czech Republic. It focuses on advocacy for transparent and predictable development conditions, fostering cooperation between private and public sectors, and improving the public image of developers. The site is professionally designed using WordPress with modern plugins and frameworks, indicating a moderate level of digital maturity. Google Analytics is used for visitor tracking, but explicit privacy and cookie policies are not found, which is a compliance gap. Security posture is generally good with HTTPS enabled, but lacks visible security headers and has minor UX issues with video playback. Overall, the site is legitimate and trustworthy, though WHOIS data is unavailable, likely due to privacy protection.

H

Hnutí DUHA

hnutiduha.cz

52

Hnutí DUHA is a well-established Czech environmental non-profit organization focused on promoting clean environment, biodiversity, and sustainable economy. The organization engages in advocacy, public campaigns, educational initiatives, and community events. Their website reflects a mature digital presence with clear branding, multiple social media channels, and relevant content for their audience. Technically, the site runs on Drupal 7 with standard web technologies and integrates Google Analytics for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, though modernization of the CMS and enhanced privacy and security measures are recommended.

E

ECM System Solutions s.r.o.

ecmsystem.cz

51

ECM System Solutions s.r.o. is a Czech-based company specializing in comprehensive energy management solutions tailored to various sectors including companies, municipalities, energy communities, and residential buildings. With 16 years of market presence and over 150 implementations, the company offers key services such as energy dispatch management, attendance tracking, and custom system development. It operates as part of the larger LAMA ENERGY GROUP, enhancing its market position and trustworthiness. Technically, the website employs modern JavaScript frameworks including jQuery and Naja for AJAX handling, integrates Google reCAPTCHA v3 for form security, and uses Google Tag Manager for analytics and tracking. The site is hosted under a Czech registrar and shows good mobile optimization and SEO practices, although no explicit CMS is detected. From a security perspective, the website enforces HTTPS, uses reCAPTCHA to protect forms, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and security.txt files. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a professional, trustworthy, and secure digital presence consistent with its business claims. The domain age and WHOIS data support the legitimacy and history of the company. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts.

D

Domy Sobě - Pomáháme bytovým domům šetřit

domysobe.cz

66

Domy Sobě is a Czech Republic based service provider focused on helping apartment buildings save money, likely through consulting or operational services. The website is built on the Webflow platform and integrates modern web technologies including Google Tag Manager and Cookiebot for cookie consent management. The site is accessible without WAF or security challenges and employs HTTPS. However, the absence of publicly available WHOIS data and lack of visible privacy policy or terms of service pages reduce transparency and trust. The cookie consent mechanism is comprehensive, supporting GDPR compliance with granular user controls. The site uses multiple third-party analytics and advertising services such as Google Analytics, Facebook Pixel, and Hotjar, indicating extensive user tracking.

F

Frank Bold

frankbold.org

46

Frank Bold is a Czech-based expert group specializing in legal services, sustainability consulting, and public interest advocacy. Established in 2013, it operates multiple offices across Central Europe and combines legal expertise with consulting in green finance, energy, and public affairs. The organization is recognized as a certified B Corporation and holds a strong market position in the Czech Republic, particularly in construction, energy, and environmental law. Their business model integrates paid services with free public legal advice and active legislative advocacy. Technically, the website is built on Drupal CMS, employs modern analytics tools, and implements a cookie consent mechanism, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNSSEC and security headers. Overall, the site is professional, trustworthy, and well-aligned with the organization's mission and market presence.

B

Bonterra

networkforgood.com

73

Bonterra is a purpose-built software company specializing in fundraising and social good solutions for nonprofits. Founded in 2021, it has quickly positioned itself as the second-largest social good software provider globally, targeting small nonprofits and social good organizations with SaaS offerings that include fundraising software and built-in coaching. The website demonstrates a mature digital presence with a modern tech stack including React and WordPress, and integrates multiple marketing and analytics tools such as Marketo, Microsoft Clarity, and Facebook Pixel. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS registration data is a concern for domain transparency but does not negate the professional and trustworthy appearance of the site. Overall, Bonterra presents a credible and professional business with a strong market position in the nonprofit technology sector.

G

GoldKnights

lastoricru.com

35

The Last Oricru website represents a small indie video game developer and publisher focused on an action RPG game emphasizing storytelling and player choices. The site is professionally designed using WordPress and integrates modern web technologies and analytics tools. The business is positioned as a niche player in the gaming industry with a clear target audience of gamers interested in story-driven RPGs with coop features. The domain registration and hosting align with the company's Czech origins and business timeline, indicating legitimacy and transparency. However, the website lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS enabled but missing key security headers and DNSSEC. Overall, the site is functional, trustworthy, and safe for general audiences but would benefit from enhanced privacy compliance and security hardening.

Silicagame.com is the official website for Silica, a sci-fi hybrid RTS/FPS game developed under Bohemia Interactive's incubator program. The site targets gamers interested in immersive strategy and shooter experiences, offering digital sales via Steam and Bohemia Store. The website is built on modern web technologies including Next.js and React, with integrations for analytics and marketing tools such as Google Analytics, Microsoft Clarity, Matomo, and CookieHub for cookie consent management. The site demonstrates good design quality, mobile optimization, and SEO practices, providing a professional user experience. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the domain registration is consistent and legitimate, supporting the business claims. The site is safe for general audiences with no adult content detected.

R

Red Hook Studios

darkestdungeon.com

55

Red Hook Studios operates the website www.darkestdungeon.com as the official platform for their game Darkest Dungeon and related content. The site targets gamers and enthusiasts of indie games, providing information about the studio and its products. The technical infrastructure leverages modern web technologies including Nuxt.js, Vue.js, GSAP for animations, and Tailwind CSS for styling, indicating a contemporary and responsive design approach. The presence of consent management via Osano CMP reflects some attention to privacy compliance, though explicit privacy and cookie policies were not detected in the provided content. Security posture appears moderate with HTTPS implied, but no explicit security headers were found in the data. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or recent registration, which impacts trustworthiness. Overall, the website is professionally designed and functional but would benefit from enhanced transparency in privacy, contact information, and security disclosures.

N

Nintendo

nintendo.com

81

Nintendo is a globally recognized leader in the video game industry, offering a wide range of gaming consoles, software, and digital services. The official German website serves as a localized portal providing product information, account management, and customer support tailored for German-speaking users. The site reflects Nintendo's strong market position and commitment to user engagement through a professional and well-branded online presence. Technically, the website employs modern web technologies, including CDN delivery, asynchronous JavaScript loading, and cookie consent frameworks, ensuring fast performance and compliance with privacy regulations such as GDPR. Security measures are robust, with HTTPS enforced and multiple security headers implemented, contributing to a high security posture. No critical vulnerabilities or suspicious activities were detected. The absence of WHOIS data is noted but likely due to privacy or registry policies rather than malicious intent. Overall, the website demonstrates a mature digital infrastructure aligned with Nintendo's enterprise status and global brand reputation.

B

Beat Games

beatsaber.com

63

Beat Saber is a well-established VR rhythm game developed by Beat Games, founded in 2017. The website serves as a comprehensive platform for promoting the game, offering music packs, original soundtracks, and directing users to purchase options across major VR and gaming platforms such as Steam, Meta Quest Store, and PlayStation Store. The target audience primarily consists of VR gamers and music game enthusiasts. The business model focuses on digital sales and downloadable content, supported by a strong social media presence and multiple industry awards that reinforce its market leadership. Technically, the website employs modern web technologies including Bootstrap for responsive design, Typekit for fonts, and HTML5 video elements for multimedia content. Hosting is indicated by Facebook DNS servers, suggesting professional infrastructure. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS (implied by external store links) and does not expose sensitive data. However, it lacks explicit security headers and published security or incident response policies, which are areas for enhancement. The WHOIS data is consistent and trustworthy, with domain registration dating back to 2017, aligning with the company's founding and product timeline. Overall, the website is professional, trustworthy, and content-rich, with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance user trust and regulatory adherence.

P

PratiMe

pratime.rs

44

PratiMe is a Serbian-based company specializing in GPS satellite vehicle tracking and fleet management solutions. Their platform offers real-time vehicle monitoring, fuel consumption control, driver behavior analytics, and comprehensive fleet management tools. The company targets businesses and fleet operators seeking to optimize operational efficiency and reduce costs through advanced telematics. The website is professionally designed, mobile-optimized, and provides clear navigation and contact channels, reflecting a mature digital presence for a company founded in 2020. Technically, the website employs modern web technologies including Bootstrap, jQuery, GSAP animations, and a 3D globe visualization library (Cobe). It integrates Google Fonts and uses a cookie consent mechanism to comply with privacy regulations. While the site is performant and accessible, there is room for improvement in security hardening, particularly in enabling DNSSEC and implementing security headers such as CSP and HSTS. From a security perspective, the site uses HTTPS and has a contact form with client-side validation, but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of a privacy policy and terms of service is a notable compliance gap. WHOIS data shows transparent and consistent domain registration aligned with the business location and sector, supporting legitimacy. Overall, PratiMe presents a trustworthy and professional online presence with strong business credibility and technical implementation. Enhancing security policies, privacy compliance documentation, and DNS security would further strengthen their posture and trustworthiness.

Pluton Media d.o.o. Beograd is a Serbian digital media company with a minimal web presence currently displayed as a coming soon or placeholder page. The website provides basic company contact information including email and physical address but lacks detailed business descriptions or service listings. The technical infrastructure is based on WordPress with Bootstrap and jQuery libraries, indicating a standard but basic digital setup. The site lacks HTTPS and security headers, which negatively impacts its security posture. No privacy or cookie policies are present, limiting compliance with data protection regulations. Overall, the website is functional but minimal, with room for significant improvements in content, security, and compliance.

A

ARKANCE USA

arkance.us

70

ARKANCE USA is a technology and consulting company specializing in providing software solutions, training, and professional services to the Architecture, Engineering, and Construction (AEC) industry. They position themselves as a trusted partner delivering digital transformation through global expertise combined with local presence. Their offerings include Autodesk, Bluebeam, and FM software solutions, BIM services, consulting, and support contracts. The company serves a broad audience including architects, engineers, contractors, government agencies, and facilities managers. Technically, the website is built on modern frameworks like Next.js and React, with integrations for marketing and analytics tools such as Marketo, LinkedIn Insight, and Google Tag Manager. The site is well-optimized for performance, mobile, and SEO, with strong branding and professional content. Security posture is strong with HTTPS and security headers, though some policy pages like incident response are missing. WHOIS data is not publicly available, likely due to privacy protection, which is justified for this business type. Overall, the website reflects a mature, credible business with a solid digital presence and good security hygiene.

A

ARKANCE UK

arkance.world

69

ARKANCE UK is a medium-sized B2B service and solutions provider specializing in digitalization for the Architecture, Engineering, Construction (AEC), and manufacturing sectors. Established in 2018 as a subsidiary of the French Monnoyeur Group, ARKANCE positions itself as a major global partner offering local presence and proven expertise to enhance project efficiency, quality, and profitability. The website reflects a professional and consistent brand image targeting industry professionals seeking technology partnerships to build smarter.

P

Pixar Animation Studios

pixar.com

68

Pixar Animation Studios is a globally recognized leader in animated feature film production, delivering high-quality media content to a broad general audience. The website reflects a professional and consistent brand presence, leveraging the Squarespace platform for content management and delivery. The technical infrastructure is modern and includes essential features such as SSL encryption and cookie consent mechanisms, though some security headers are missing. The absence of WHOIS data suggests privacy protection or registry restrictions, which is common for prominent brands. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security best practices. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and providing clear contact information for incident response.

G

GrowSmart

growsmart.cz

62

GrowSmart is a specialized digital marketing agency focused on video campaigns, website development, and paid advertising services. The company positions itself as an expert in these areas, emphasizing precision, transparency, and execution that delivers results. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow, Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and business registration details. Security posture is strong with HTTPS and security headers implemented, but privacy compliance could be improved by adding a dedicated privacy policy and clearer contact information. Overall, the website presents a trustworthy and professional front for its target audience of businesses seeking marketing services.

T

Tigo Energy

tigoenergy.com

65

Tigo Energy is a company specializing in intelligent solar energy systems, focusing on increasing energy output, improving visibility, and enhancing safety through reliable and flexible MLPE solutions. The website targets solar energy system installers and businesses, offering hardware and software solutions to optimize solar installations. The company positions itself as a specialized provider in the solar energy sector with a medium-sized business profile. Technically, the website is built on modern web technologies including Webflow CMS, integrates multiple analytics and marketing tools such as Google Analytics, Matomo, HubSpot, and employs a comprehensive cookie consent mechanism. The site is mobile optimized and demonstrates good SEO and accessibility practices. Security-wise, the website enforces HTTPS and uses reCAPTCHA, but lacks explicit security headers and a published security policy or incident response contacts. The absence of WHOIS data for the domain raises some concerns about registration transparency, although the website content and technology usage suggest a legitimate business. Overall, the website scores well in content quality, technical implementation, and security posture but should improve privacy policy visibility and WHOIS transparency to enhance trust.

S

Solar Solutions GmbH

aeg-industrialsolar.de

59

AEG Solar, operated by Solar Solutions GmbH, is a medium-sized company specializing in solar energy products including solar modules, inverters, and energy storage systems. The company positions itself as a trusted brand with widespread recognition among installers and customers, targeting homeowners, businesses, and project developers seeking sustainable energy solutions. Their business model focuses on manufacturing and distributing holistic photovoltaic solutions to empower energy independence and environmental responsibility. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by One.com A/S. The site demonstrates good digital maturity with responsive design, SEO optimization, and cookie consent mechanisms compliant with GDPR. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and some recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and user consent mechanisms. However, the absence of a published security policy or incident response contact is noted. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic improvements in DNS security, security headers, and incident response transparency would enhance its security posture and trustworthiness.

G

Growatt European Distributor

growatt.tech

52

Growatt.tech operates as a European distributor specializing in photovoltaic inverters and energy storage solutions under the Growatt brand. The company targets European customers, installers, and businesses seeking reliable and innovative solar energy products. Their online presence includes a comprehensive e-commerce platform with product categories, downloads, training resources, and account management features. The business is relatively young, founded in 2022, with a domain age consistent with this timeline. The website demonstrates a professional and consistent brand image with good content quality and user experience.

B

BluenetNTS

bluenet.as

51

BluenetNTS is a Czech Republic-based company specializing in comprehensive energy savings solutions, including the installation of photovoltaic systems and heat pumps for residential buildings and businesses. The company offers end-to-end services from project planning to subsidy consulting, targeting residential complexes, municipalities, and commercial clients. Their market position is that of an established regional player in renewable energy solutions, supported by customer references and media presence. Technically, the website is built on WordPress with Elementor and employs modern SEO and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and GDPR cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, with room for improvement in transparency and security documentation.

Benekovterm s.r.o. is a Czech company specializing in manufacturing and selling high-quality automatic solid fuel boilers and hybrid heating technologies, including pellet boilers combined with heat pumps and renewable energy solutions such as photovoltaic systems. The company has a long tradition dating back to 1949 and positions itself as a leader in innovation within the Czech energy sector. Their website provides comprehensive product information, customer references, and multiple contact channels, reflecting a mature business presence. Technically, the website uses common JavaScript libraries and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the active and professional website. Overall, the site is trustworthy and well-maintained, serving a clear target audience of residential and commercial customers interested in energy-efficient heating solutions.

B

Bc. Martin Hůlek

martinhulek.cz

9

The website www.martinhulek.cz represents Bc. Martin Hůlek, a freelance fullstack web developer based in the Czech Republic. The business focuses on delivering custom web development services including responsive websites, e-commerce platforms, tailored web applications, ongoing maintenance, and consulting. The site positions itself as a specialist in modern, secure, and user-friendly web solutions aimed at businesses and individuals seeking professional digital presence. The portfolio includes at least one e-shop project, indicating practical experience in commercial web development. Technically, the website employs modern frontend technologies such as Bootstrap 5, jQuery, FontAwesome, and Google Tag Manager for analytics and cookie consent management. The site is mobile-optimized with responsive design and good SEO practices evident from meta tags and structured navigation. Performance appears fast with asynchronous script loading and minimal external dependencies. However, no CMS or hosting provider details are disclosed. From a security perspective, the site uses HTTPS (implied by external Google Tag Manager scripts loaded over HTTPS), and implements a cookie consent modal, indicating awareness of privacy regulations. However, no explicit privacy policy or terms of service pages were found, and no HTTP security headers were detected in the provided data. The WHOIS lookup failed to return any domain registration data, which reduces trustworthiness and raises questions about domain legitimacy. No vulnerabilities or exposed sensitive data were observed in the content. Overall, the website is professional and functional, suitable for a small freelance business. The main risks relate to missing WHOIS transparency and incomplete privacy compliance documentation. Strategic improvements in security headers, privacy policy publication, and domain registration transparency would enhance trust and compliance.

V

VENTA spol. s r.o.

koupelny-venta.cz

10

VENTA spol. s r.o. operates a comprehensive e-commerce platform focused on bathroom equipment, heating, ventilation, renewable energy systems, and related installation services primarily serving the Czech Republic. The company has a longstanding tradition since 1991 and offers a broad range of products alongside consulting, turnkey installations, subsidy handling, and after-sales service. The website reflects a mature digital presence with detailed product catalogs, clear navigation, and customer engagement tools such as live chat and customer reviews. Technically, the site employs modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is generally good with HTTPS enforced and reCAPTCHA implemented, though there is room for improvement in HTTP security headers and published security policies. The absence of WHOIS data limits domain trust assessment but the website content and business information appear professional and credible. Overall, the site is well-positioned in its market niche with a solid digital infrastructure and compliance with privacy regulations.

P

PH3A

ph3a.com.br

77

PH3A is a Brazilian technology company specializing in innovative solutions for credit recovery, fraud analysis, database management, CRM, payment gateways, and e-commerce platforms. The company targets businesses requiring these specialized technology services, positioning itself as a niche B2B provider in the Brazilian market. The website reflects a professional and consistent brand image with clear service offerings and a focus on technology-driven business solutions. The technical infrastructure leverages modern web technologies including Bootstrap and Svelte, hosted on Amazon AWS, and integrates multiple third-party marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Zoho CRM. The site implements a comprehensive cookie consent mechanism aligned with GDPR requirements, indicating a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and use of CSRF tokens, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, PH3A demonstrates a good level of digital maturity and security awareness appropriate for its business domain.

G

Game Dev Graz

gamedevgraz.at

38

Game Dev Graz is a small non-profit association founded in 2015 that supports the game development community and gaming culture in Styria, Austria. It organizes various community events such as meetups, game jams, expos, and awards to foster collaboration and growth in the local game development ecosystem. The website is built on WordPress using a modern theme and common JavaScript libraries, providing a good user experience with clear navigation and mobile optimization. However, it lacks formal privacy and cookie policies, and no direct contact emails or phone numbers are published, relying mainly on a contact form. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Overall, the site is trustworthy and professional but could improve compliance and security practices.

LEVEL.cz is the official website of LEVEL, a well-established Czech gaming magazine published by Naked Dog, s.r.o. The site offers subscriptions, digital and print magazine issues, advertising opportunities, and access to an extensive archive of past issues. The target audience is primarily Czech gamers and gaming enthusiasts. The website is built on WordPress, using common plugins such as Contact Form 7 and ElasticPress, hosted via Gransy. The site is professionally designed with good mobile optimization and clear navigation, though it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and well-positioned in its niche.

K

Kapnetix s.r.o.

kapnetix.ai

58

Kapnetix s.r.o. is a technology company specializing in AI-powered tools for motion capture professionals. Their website presents a focused business offering innovative AI solutions such as single camera 3D pose estimation and automated motion capture cleanup, targeting animation teams and game developers. The company positions itself as a niche innovator with a small but experienced team and notable industry awards. Technically, the website is built on Webflow CMS with modern integrations including Google Tag Manager and Leadfeeder for analytics and marketing. The site is well-designed, mobile-optimized, and includes embedded video content to demonstrate product capabilities. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers or published security policies. WHOIS data is unavailable due to privacy protection, which is common for small tech firms. Overall, the site is professional and trustworthy with moderate risk due to limited public security disclosures.

S

SuperScale

superscale.com

70

SuperScale is a technology company specializing in providing advanced analytics and AI-driven insights for mobile games. Their platform integrates data from multiple sources to empower game studios and marketers to optimize performance and profitability. The company has a strong market presence with over 150 games and 60 studios using their services, supported by a network of trusted partners. Technically, the website is built on WordPress with Elementor and integrates HubSpot for forms and analytics, alongside Google Tag Manager and Hotjar for tracking and user behavior analysis. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and security headers could be improved. Overall, the site is professional, well-branded, and compliant with GDPR, offering a good user experience and clear business credibility.

W

Wube Software

factorio.com

63

Factorio.com is the official website for the game Factorio, developed by Wube Software. The site provides comprehensive information about the game, its expansions, community resources, and purchasing options. The business operates primarily in the technology sector focused on gaming, with a strong market position supported by over 3.5 million sales and a dedicated community. The website supports multiple platforms for sales including Steam, GOG, and direct shop sales, and offers additional services such as mod portals and community forums. Technically, the website uses modern web technologies including jQuery, HTMX, and FontAwesome, hosted behind Cloudflare for performance and security. The site is moderately optimized for performance and mobile devices, with good SEO and basic accessibility features. However, some security best practices such as DNSSEC and security headers are not implemented, and there is no visible cookie consent mechanism, which may impact GDPR compliance. From a security perspective, the site uses HTTPS and includes CSRF tokens for AJAX requests, indicating a baseline security posture. The domain registration is consistent with the business history and shows no suspicious patterns. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security maturity. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing security headers, implementing cookie consent for privacy compliance, publishing security policies, and improving contact information transparency to further strengthen trust and compliance.

C

Context Heroes s.r.o.

contextheroes.com

71

Context Heroes s.r.o. is a Czech-based company specializing in bespoke translation and localization services, primarily targeting video games, apps, software, and product markets. The company positions itself as a trusted partner with a focus on delivering contextually accurate translations to help clients expand internationally. Their website reflects a professional and modern digital presence, leveraging a custom CMS platform and modern web technologies to provide a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security best practices like security headers and incident response information are absent. The lack of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy assessments. Overall, the company demonstrates strong business credibility and digital maturity, with room for improvement in transparency and security documentation.

W

Warezio s.r.o.

warezio.com

48

Warezio s.r.o. is a Czech Republic-based small technology company specializing in anti-piracy solutions targeting diverse sectors including Television/VOD, live streaming, software, gaming, and legal firms. Founded in 2022, the company positions itself as a niche provider offering comprehensive anti-piracy services to digital content providers. The website reflects a professional and consistent brand image with clear contact information and a focused business description. Technically, the website is built using the Astro framework and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Hosting and DNS are managed via Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile optimized and SEO friendly but lacks some accessibility features. From a security perspective, the site uses HTTPS and reputable DNS providers but lacks important security headers and published security policies. No privacy or cookie policies are present, indicating gaps in privacy compliance. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and security posture. Overall, the website is safe, professional, and credible but would benefit from enhanced privacy compliance, security best practices, and transparency regarding security policies. Strategic improvements in these areas will strengthen the company’s trustworthiness and regulatory compliance.

Filuta AI is a technology startup specializing in AI-driven automated game testing solutions. Leveraging advanced AI planning agents originally developed for deep space exploration, the company offers adaptive, goal-driven testing frameworks that enable continuous and comprehensive QA for game developers and related professionals. Their market position is that of an innovative pioneer in automated game testing, targeting game developers, QA leads, designers, and automation engineers. The company is relatively new, founded in 2022, and operates primarily in the technology sector with a small team of highly qualified experts. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, with good performance and mobile optimization. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Business credibility is supported by testimonials, partnerships, and a professional web presence. Overall, the website is trustworthy and professional, with no signs of malicious content or suspicious activity.

A

ANOMALIA

anomalia.cz

54

ANOMALIA is a professional training provider specializing in animation, games, and VFX education since 2008. The company offers bootcamps and mentorship from industry veterans affiliated with renowned studios such as Pixar and Disney. The website is built on WordPress with modern web technologies and includes analytics and marketing tools like Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS and cookie consent mechanisms, though explicit privacy and terms pages are missing. The domain WHOIS data is privacy protected, which is common for this business type. Overall, the site presents a professional and trustworthy educational service with room for improvement in privacy disclosures and security headers.

Č

Česká spořitelna, a.s.

ittrendy.cz

50

IT Trendy is a corporate blog and community platform operated by Česká spořitelna, a leading Czech bank, focusing on information technology trends and innovations. The website targets IT professionals, technology enthusiasts, and banking sector employees, providing high-quality articles, educational content, and community engagement. The platform supports professional growth and knowledge sharing within the bank and the broader IT community. Technically, the website employs modern web technologies including Alpine.js, Google Tag Manager, and optimized image formats, hosted by Active24. It demonstrates excellent mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though lacks a dedicated security policy or incident response contact. Overall, the domain registration is consistent and transparent, reinforcing business credibility. The website is safe, professional, and trustworthy, with no signs of malicious content or vulnerabilities.

E

Exit Games GmbH

photonengine.com

74

Photon Engine, operated by Exit Games GmbH, is a leading provider of multiplayer game backend services, offering a comprehensive suite of products including Photon Fusion, Quantum, Realtime, Chat, and Voice. The company targets game developers and studios worldwide, supporting over 1.4 billion monthly players and more than 1 million developers. Their business model is SaaS-based, providing scalable cloud infrastructure and communication tools for multiplayer games across multiple platforms including mobile, PC, consoles, and VR/AR. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, fast performance, and excellent mobile optimization. The use of Google Tag Manager and Cloudflare Insights indicates active analytics and performance monitoring. The site is well-structured with comprehensive documentation and multilingual support, enhancing accessibility and user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and a public security policy or incident response contacts are not evident, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the strong market presence and trust indicators. Overall, Photon Engine presents a professional, trustworthy, and technically sound platform with strong compliance and privacy practices. Strategic enhancements in security transparency and contact availability would further strengthen their security posture and user trust.

F

Flying Rat Studio

flying-rat.online

61

Flying Rat Studio is a small, Prague-based game development studio specializing in co-development, porting, and optimization of games for multiple platforms including VR and consoles. They collaborate with well-known studios and work on internal projects focused on gameplay and fun. The website is professionally designed, providing detailed project descriptions and links to major game stores, reflecting a credible and niche market position. Technically, the site uses modern web technologies such as JavaScript and Babylon.js, with evidence of Bootstrap framework usage. The site is mobile optimized and SEO friendly but lacks some accessibility features. Security posture is moderate with no visible vulnerabilities but missing security headers and privacy policies. WHOIS data is unavailable or protected, which is common for small studios but reduces transparency. Overall, the site is trustworthy and professional but could improve compliance and security practices.