Security Directory

S

Státní léčebné lázně Janské Lázně

janskelazne.com

60

Státní léčebné lázně Janské Lázně operates as a well-established spa and wellness center in the Czech Republic, offering a broad range of health treatments, wellness stays, and rehabilitation services. The website is professionally designed, multilingual, and targets patients, wellness seekers, and tourists. The business model focuses on healthcare and hospitality services with a strong market position in the spa industry. Technically, the site is built on WordPress with Elementor, integrating modern web technologies and analytics tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. WHOIS data is missing, which raises some concerns about domain legitimacy, though the website content and structure suggest a legitimate business. Overall, the site demonstrates good digital maturity but could improve in security and compliance documentation.

Z

ZOO Dvůr Králové a. s.

zoodvurkralove.cz

48

Safari Park Dvůr Králové is a well-established zoological park in the Czech Republic, specializing in African wildlife conservation and visitor engagement through educational and experiential offerings. The website reflects a medium-sized non-profit organization with a strong local and tourist audience focus. The digital infrastructure employs modern JavaScript libraries and analytics tools, with a CMS platform tailored for content management. While the site is accessible and professionally designed, it lacks explicit privacy and terms of service documentation, which are critical for compliance and trust. Security posture is adequate with HTTPS and cookie consent but could be improved with additional security headers and incident response information. Overall, the site demonstrates good business credibility and user experience but should enhance privacy and security transparency.

K

K+K Ski School s.r.o.

ski-school.cz

48

K+K Ski School s.r.o. is a well-established ski school operating primarily in the eastern Krkonoše region of the Czech Republic, with branches in Janské Lázně and Pec pod Sněžkou. The company offers a broad range of winter sports instruction including skiing, snowboarding, telemark, and ski mountaineering, complemented by summer activities such as a large rope park and equipment rentals. Their market position is that of a regional leader with a strong local presence and diversified service offerings targeting families, schools, and corporate clients. Technically, the website employs a modern but custom technology stack including jQuery, Owl Carousel, Google Analytics, Google Tag Manager, Facebook Pixel, and Adform tracking. The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and reCAPTCHA for form protection, but lacks visible security headers and published security policies or incident response information. The absence of explicit cookie consent mechanisms and incomplete WHOIS data reduce the overall trust and privacy compliance posture. Overall, the website is professional and trustworthy in content and business presentation but would benefit from enhanced transparency in domain registration, improved security headers, and stronger privacy compliance measures to reduce risk and increase user trust.

E

EURO REAL - BOHEMIA s.r.o.

euroreal.cz

57

EURO REAL - BOHEMIA s.r.o. is a Czech Republic based real estate agency specializing in property sales and purchases, primarily residential. The company has an established online presence since 2002, indicating a stable market position. Their website offers comprehensive services including property listings, client testimonials, and multiple contact channels, targeting individuals and families seeking real estate solutions. Technically, the website employs modern JavaScript frameworks such as Vue.js and jQuery, integrates Google Analytics and Tag Manager for tracking, and uses Leaflet.js for map functionalities. The site is hosted on cesky-hosting.eu and demonstrates good mobile optimization and user experience. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA on forms, and provides detailed cookie consent management, reflecting a strong privacy posture. However, explicit security policies and incident response information are absent, and security headers are not explicitly detected. Overall, the website is professional, trustworthy, and compliant with GDPR, with room for improvement in security transparency and technical headers.

S

SkiResort ČERNÁ HORA – PEC

skiresort.cz

50

SkiResort ČERNÁ HORA – PEC operates as the largest ski resort in the Czech Republic, offering extensive skiing terrain across six interconnected ski areas. The business targets winter sports enthusiasts, families, and tourists, providing services such as ski pass sales, ski schools, equipment rental, and accommodation. The website demonstrates a mature digital presence with modern technologies, interactive booking forms, and comprehensive content. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the professional branding and partner affiliations. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving transparency around data protection officers and incident response.

P

Pluxee

pluxee.cz

66

Pluxee is a digital benefits provider focused on offering employee benefits for dining and leisure activities, primarily serving the Czech market. The company positions itself as a world leader in quality of life services, with a large network of over 73,000 accepting locations and millions of users benefiting from its services. The website reflects a professional and consistent brand image, targeting general audiences interested in digital benefit solutions. Technically, the site is built on Drupal CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks visible security headers and published security policies, which are areas for improvement. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and structure suggest a credible business. Overall, the site is well-designed, mobile-optimized, and provides a good user experience, but could enhance transparency and security documentation to strengthen trust and compliance.

A

Apprix Oy

apprix.fi

68

Apprix Oy is a Finnish pioneer in interactive and participatory eLearning solutions, offering a proprietary platform called Apprix Builder® alongside content production and integration services. The company targets Finnish businesses and organizations seeking scalable and engaging digital training solutions. Their website is professionally designed using WordPress and Elementor, featuring multilingual support and clear navigation. The technical infrastructure includes modern web technologies and compliance with cookie consent regulations. Security posture is solid with HTTPS and cookie management, though some security headers could be improved. Contact information is transparent with multiple phone numbers and a contact form, but no explicit security policy or incident response details are published. Overall, the website reflects a credible, established small business in the education sector with good digital maturity and compliance.

T

Tietokeskus

tietokeskus.fi

75

Tietokeskus is a Finnish IT service provider specializing in outsourced IT solutions, cybersecurity consulting, cloud services, and device lifecycle management primarily targeting SMEs and public sector organizations in Finland. The company positions itself as a reliable local partner with a strong team of certified professionals. The website reflects a mature digital presence with comprehensive service descriptions and a clear focus on customer engagement. Technically, the site is built on WordPress with modern SEO and compliance tools such as Yoast SEO and Cookiebot, ensuring GDPR compliance and user consent management. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policy and incident response information are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Р

Регіональна Газова Компанія

rgc.ua

57

Регіональна Газова Компанія (РГК) є провідним українським підприємством у сфері газорозподілу, виробництва газового обладнання та інжинірингових послуг. Компанія обслуговує значну частину газової інфраструктури України, пропонуючи інноваційні рішення, включаючи проекти з чистої енергії, такі як водень та біометан. РГК має сильну позицію на ринку, підтримує кілька дочірніх сервісних доменів і активно комунікує через соціальні мережі. Технічно сайт використовує сучасні веб-технології, включаючи Google Analytics та Tag Manager, має адаптивний дизайн і базові SEO та доступності. З точки зору безпеки, сайт використовує HTTPS, але не має розширених захисних заголовків або публічних політик безпеки. Відсутні контактні дані для інцидентів безпеки. Загалом, сайт є професійним, безпечним і орієнтованим на бізнес аудиторію.

G

Gas Networks Ireland

gasnetworks.ie

70

Gas Networks Ireland is a large, essential utility company operating the national gas network in Ireland, with a strategic focus on transitioning to renewable gases such as biomethane and green hydrogen. The company serves a broad audience including residential customers, businesses, large energy users, and the transport sector. Their website reflects a mature and professional digital presence with comprehensive information on services, safety, and corporate governance. Technically, the site is built on Drupal CMS, employs modern web technologies, and is optimized for mobile and accessibility. Security posture is strong with HTTPS, content security policies, and secure forms, though explicit security policies and incident response details are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high trustworthiness and professionalism, supporting the company's market position as a key energy infrastructure provider in Ireland.

F

FranceGaz

francegaz.fr

46

FranceGaz is a professional syndicate representing the French gas industry, focusing on accelerating the energy transition through certification, standardization, and training services. The website is well-structured, uses modern web technologies including WordPress and React, and integrates SEO best practices with Yoast SEO and Google Tag Manager for analytics. The content is primarily in French and targets professionals and stakeholders in the French energy sector. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is not publicly available, which reduces transparency but the website content and branding appear professional and consistent with a legitimate business entity. Overall, the site demonstrates a good level of digital maturity but would benefit from enhanced privacy compliance and security disclosures.

E

Evida

evida.dk

64

Evida is Denmark's national gas distributor, specializing in the distribution and integration of green gases such as biogas and hydrogen. The company plays a pivotal role in Denmark's energy transition by enabling sustainable gas supply and supporting environmental goals. Their website reflects a professional and consistent brand presence, targeting both consumers and professional stakeholders in the energy sector. The site provides comprehensive information on services, sustainability efforts, and customer support, emphasizing transparency and engagement.

E

Energigas Sverige

energigas.se

57

Energigas Sverige is a well-established Swedish industry association representing actors in the energy gas sector, including biogas, vehicle gas, LPG, natural gas, syngas, and hydrogen. Founded in 2003, it serves as a central hub for advocacy, information dissemination, event organization, and publication of industry standards and guidelines. The website reflects a professional and consistent brand presence targeting stakeholders and members within the Swedish energy gas market. Technically, the site uses modern web technologies such as Google Tag Manager, Google Maps API, and a cookie consent mechanism, likely built on the Umbraco CMS platform and hosted by Loopia AB. The site is mobile-optimized with good SEO and accessibility basics. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in DNSSEC, security headers, and published security policies. Privacy compliance is partial, with cookie consent implemented but no explicit privacy or terms of service pages found. Overall, the site is trustworthy and professionally maintained, with a high legitimacy score based on domain age and WHOIS data.

E

Enaon eda

ena-on.com

72

Enaon eda is a recently established company (2023) operating in the energy sector in Greece, specializing in natural gas distribution and related services. The company offers a comprehensive range of services including gas connection, ancillary and optional services, safety and emergency support, and maintains a partner network. The website reflects a professional corporate presence with clear branding and structured content targeting general consumers and business clients in the natural gas market. Technically, the website is built on WordPress with Elementor and integrates modern tools such as Google Tag Manager and WP Rocket for performance and analytics. The hosting infrastructure utilizes Azure DNS, indicating a reliable hosting environment. Security posture is solid with HTTPS enforced, Content Security Policy header present, and domain registration protections enabled, although DNSSEC is not yet enabled. Privacy compliance is well addressed with accessible GDPR and cookie policies and a consent mechanism in place. No critical vulnerabilities or blocking mechanisms were detected, and the website content is safe for general audiences. Overall, the site demonstrates a mature digital presence for a new entrant in the energy distribution market.

Distrigaz Sud Rețele is a leading natural gas distribution company in Romania, providing essential infrastructure and services to millions of customers. The company emphasizes customer support, digital transformation through its ePortalDGSR platform, and commitment to safety and environmental responsibility. The website reflects a mature digital presence with comprehensive information and user-friendly navigation. Technically, the site is built on WordPress with modern JavaScript libraries such as jQuery, Select2, and Slick Slider. It employs Google Tag Manager and CookiePro for analytics and consent management, indicating a good level of digital maturity. Mobile optimization and accessibility are well addressed. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms. However, HTTP security headers are not explicitly detected, and no public security policy or incident response contacts are found. The WHOIS data is privacy protected, which is common for Romanian domains but limits transparency. No critical vulnerabilities or suspicious content were identified. Overall, the site is professional, trustworthy, and compliant with GDPR requirements. The main risk is the lack of visible security headers and incident response information, which could be improved to enhance trust and resilience.

O

OIK TV

oiktv.cz

45

OIK TV operates as a regional news portal serving the foothills of the Orlické hory in the Czech Republic. The website provides a variety of news content including local events, sports, culture, and crime reports, targeting residents and viewers interested in regional information. The business model centers on media content delivery through articles, videos, and live streaming, supported by advertising. The site maintains a consistent brand presence and regularly updates content, indicating an active media outlet with a small operational scale. Technically, the website is built on WordPress CMS with popular plugins such as Visual Composer and Events Manager, leveraging Bootstrap and FontAwesome for styling and icons. It integrates Google Analytics and Google Tag Manager for tracking and uses Google Adsense for advertising. The site is mobile-optimized and has a moderate performance profile. However, some accessibility and security best practices could be improved, such as implementing comprehensive security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML. Yet, it lacks several security headers that could enhance protection against common web threats. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, although the website content and social media presence suggest legitimate operations. Privacy compliance is partially addressed with a GDPR page, but no explicit cookie consent banner is present. Overall, OIK TV presents a functional and content-rich regional media website with room for improvement in security and privacy compliance. The lack of WHOIS data is a notable risk factor that should be addressed to enhance trustworthiness. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, and verifying domain registration details to strengthen the site's security posture and compliance standing.

A

Albatros Media a.s.

kmc.cz

60

The website kmc.cz represents the Klub mladých čtenářů (Young Readers Club) operated under the parent company Albatros Media a.s., a well-established Czech publishing house. The club focuses on promoting reading among children and students from preschool to high school, providing catalogs, educational materials, and organizing events and competitions. The site is professionally designed with clear navigation and content relevant to its target audience of children, educators, and schools. Technically, the site uses modern JavaScript libraries such as jQuery and React, integrates Google Tag Manager and Cookiebot for analytics and consent management, and employs HTTPS with CSRF protection on forms. However, some security best practices like security headers and explicit incident response contacts are missing. The WHOIS data for the domain is unavailable, which limits trust verification, but the strong branding and content quality support legitimacy. Overall, the site is secure, compliant with GDPR, and serves its educational mission effectively.

S

Spolek milců čaje s.r.o.

tea.cz

40

The website www.tea.cz represents a specialized Czech e-commerce business focused on the sale and direct import of fine teas under the brand Dobrá čajovna, operated by Spolek milců čaje s.r.o. It targets tea enthusiasts and consumers interested in premium tea products, offering a curated selection of teas from various countries. The business model is retail e-commerce with community engagement and franchise opportunities. The site is well-branded and consistent, with clear contact information and social media presence, positioning it as a niche market player in the tea retail sector. Technically, the website is built on the PrestaShop platform, leveraging modern web technologies including jQuery, Bootstrap, Google Tag Manager, and PayPal integration. The site is mobile-optimized with good SEO practices and moderate performance. Security is enforced via HTTPS with secure forms, though some security headers are missing. Privacy compliance is partially addressed with a GDPR policy page, but lacks a visible cookie consent mechanism. Security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and incident response information suggests room for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is typical for small retail businesses. Overall, the website is professional, trustworthy, and safe for general audiences. Recommendations include implementing cookie consent banners, adding security headers, publishing a security policy and incident response contacts, and improving WHOIS transparency if possible to enhance trust and compliance.

C

Contipro a.s.

geloren.cz

54

Geloren.cz is the official e-commerce website for Geloren, a brand of joint health supplements produced by Contipro a.s., a Czech biotechnology company established in 1990. The company specializes in the production of hyaluronic acid and related products for both human and veterinary use. The website offers a range of dietary supplements and veterinary products, targeting consumers seeking joint care solutions. The business model is direct-to-consumer e-commerce, leveraging the Shoptet platform for online sales and marketing. Contipro holds a strong market position as a leading Czech manufacturer and a significant global player in hyaluronic acid production. Technically, the website employs a modern e-commerce stack including jQuery, Google Tag Manager, Facebook SDK, and Slick Carousel, hosted on the Shoptet platform. The site is mobile-optimized, accessible, and SEO-friendly with proper metadata and structured data. Performance is moderate with room for improvement. Security posture is good with HTTPS enforced and CSRF protections on forms, though explicit security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The security posture is solid but could be enhanced by adding security headers and explicit incident response contacts. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness. However, the website content and business information align with a legitimate and established company. Overall, the site is professional, trustworthy, and compliant with relevant regulations, serving its target audience effectively.

D

DR. THEISS CZ s.r.o.

drtheiss.cz

55

DR. THEISS CZ s.r.o. operates a professional website focused on healthcare, dietary supplements, and cosmetic products, targeting general consumers and pharmacies primarily in the Czech Republic and German markets. The company claims a strong market position as the third largest personal care brand in German pharmacies, emphasizing quality ingredients and natural science integration. The website is built on the Webflow platform, utilizing modern web technologies and standard marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and secure forms, but lacks advanced security headers and explicit privacy or security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for commercial entities. Overall, the website is trustworthy and professionally maintained, with room for improvement in privacy compliance and security best practices.

U

Usušil & syn

ususil.cz

52

Usušil & syn operates a professional e-commerce website specializing in 100% natural jerky meat products made without additives. The company targets consumers seeking high-protein, natural snacks and maintains a niche market position within the Czech Republic. The website is built on the Shoptet e-commerce platform, leveraging modern technologies such as jQuery, Google Analytics, Facebook SDK, and Amazon Cloudfront CDN for content delivery and tracking. Privacy and cookie consent mechanisms are implemented, reflecting GDPR compliance. However, the absence of WHOIS registration data reduces domain trustworthiness from a registration perspective. Security posture is generally good with HTTPS enforced and CSRF protections in place, but explicit security headers could be improved. Overall, the site presents a trustworthy and professional front for its business, though contact information is limited in the visible content.

S

SPORTISIMO s. r. o.

loap.cz

63

LOAP.CZ is a Czech Republic based e-commerce retailer specializing in outdoor and sportswear products. The company positions itself as a pioneer in the Czech outdoor fashion and equipment market with over 25 years of experience. The website offers a broad range of products including clothing, footwear, camping gear, and accessories targeting outdoor enthusiasts. The business model is direct-to-consumer retail with a focus on quality and affordability. The website is professionally designed, mobile optimized, and provides clear navigation and relevant content for its target audience.

S

Spain Tourism Official Website

spain.info

45

The website www.spain.info is the official tourism portal for Spain, operated under government auspices to provide comprehensive travel information, destination guides, and booking resources for tourists. It targets a global audience with multilingual support and extensive content on culture, nature, gastronomy, and practical travel tips. The site employs a modern technical infrastructure including Bootstrap, jQuery, Leaflet maps, and integrates Google Analytics and Facebook SDK for marketing and analytics purposes. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. WHOIS data is not publicly available, likely due to privacy protection, but the domain's legitimacy is supported by consistent branding and government association. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

C

CERGE-EI Foundation

cerge-ei-foundation.org

64

The CERGE-EI Foundation is a U.S.-based non-profit organization dedicated to supporting modern economics education in post-transition and transition economies, particularly in Central and Eastern Europe, Central Asia, and the Southern Caucasus. The foundation offers programs such as faculty development, teaching fellowships, distance learning, and study abroad opportunities, positioning itself as a niche educational supporter in its regional market. The website is professionally designed using the Wix platform, featuring structured data for local business information and basic SEO optimizations. Technically, the site employs modern JavaScript polyfills and Wix's Thunderbolt framework, with moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published privacy or terms of service pages. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits but reduces domain trust verification. Overall, the site is safe, professional, and trustworthy, with room for improvement in privacy disclosures and security hardening.

S

Správa železnic, státní organizace

vrtky.cz

59

The website vrtky.cz serves as an official public information portal for the Czech Republic's high-speed rail infrastructure project, managed by Správa železnic, a state organization. It provides comprehensive information about the development, planning, and updates of high-speed rail lines (VRT) aimed at improving transportation efficiency and regional mobility. The site targets Czech residents, transport professionals, and government stakeholders, offering news, maps, and project details. Technically, the site is built on the Liferay CMS platform and employs modern web technologies including jQuery, Slick Carousel, and Google Tag Manager. It integrates analytics and marketing tools such as Google Analytics and Facebook Pixel, and implements cookie consent mechanisms in compliance with GDPR. The site is mobile-optimized and features a professional design with clear navigation. From a security perspective, the website uses HTTPS with good SSL configuration and basic security best practices. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no published security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, vrtky.cz is a trustworthy and professionally maintained government-related website with a strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve security posture and transparency.

K

Klinker Centrum s.r.o.

klinkercentrum.cz

64

Klinker Centrum s.r.o. is a well-established Czech company specializing in the supply and realization of clay brick facades, including facing bricks, brick cladding, paving bricks, and fired roofing tiles. With over 25 years of experience, the company positions itself as a market leader in the Czech Republic, offering comprehensive services from product supply to facade realization. The website reflects a mature digital presence with professional design, clear navigation, and active content updates including news and a magazine section. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, alongside security measures like Google reCAPTCHA and cookie consent mechanisms. However, the absence of WHOIS data and lack of visible HTTP security headers suggest areas for improvement in domain transparency and security hardening. Overall, the site is safe, GDPR compliant, and provides multiple contact channels, supporting both B2B and B2C customer engagement.

C

Cegra

cegra.cz

55

Cegra is a Czech Republic-based technology company specializing in supporting computer graphics and BIM (Building Information Modeling) technologies. The company offers a range of services including software sales, hardware for Archicad, training courses, consulting, and technical support. Positioned as a regional leader in BIM support, Cegra targets architects, BIM professionals, students, and educators. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with a modern tech stack including Gravity Forms, Yoast SEO, Google Tag Manager, and various analytics tools such as Microsoft Clarity and Smartlook. The site is mobile-optimized and performs moderately well. Privacy compliance is well addressed with comprehensive cookie and privacy policies and consent mechanisms. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's business claims, indicating legitimacy. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and incident response transparency would enhance the security posture further.

A

Aluprof SA

aluprof.eu

53

Aluprof SA is a leading manufacturer of aluminum systems for windows, doors, facades, and sun protection solutions, serving a broad international market with a strong presence in Europe and the USA. The company emphasizes innovation, energy efficiency, and sustainable development, supported by a comprehensive portfolio of certified products and a professional digital presence. The website demonstrates a mature technical infrastructure using modern web technologies and tracking tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, CSRF protection, and no exposed sensitive data, though improvements can be made in cookie consent and security policy transparency. Overall, Aluprof presents a trustworthy and professional business with a well-structured online presence.

C

CorCo Systems a.s.

corrency.cz

59

Corrency.cz is a Czech Republic-based platform operated by CorCo Systems a.s. that focuses on revitalizing local economies through municipal projects supporting residents, children, seniors, and cultural activities. The platform collaborates with government bodies and financial institutions, positioning itself as a niche solution for regional economic development. The website demonstrates a good level of digital maturity with modern technologies such as Google Analytics, Microsoft Clarity, and Bootstrap frameworks, alongside a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS and nonce usage, though improvements in security headers and incident response transparency are recommended. The absence of WHOIS data limits domain trust verification, but the presence of credible partnerships and testimonials supports legitimacy. Overall, the site is professional, user-friendly, and trustworthy with moderate technical performance and good privacy compliance.

L

Lex Aš

lexas.cz

52

Lex Aš is a regional development initiative focused on revitalizing the Aš area in the Czech Republic through the establishment of a special economic zone and regulatory sandboxes. The website presents a clear business model aimed at supporting local businesses and improving quality of life in a structurally challenged region. Technically, the site uses modern web technologies including Mapbox GL JS for interactive maps and Google Tag Manager for analytics, though the analytics ID is not set. Security posture is moderate with HTTPS enabled but lacks explicit security headers and cookie consent mechanisms. The domain registration is recent but consistent with the project's timeline and shows no suspicious patterns. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

M

Město Aš

info-as.cz

52

The website www.info-as.cz serves as an official tourism and local information portal for the city of Aš in the Czech Republic. It provides comprehensive details about local activities, events, cultural sites, accommodation, and gastronomy, targeting tourists, families, and local visitors. The site is well-structured with clear navigation and offers multilingual support. It integrates modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, with a cookie consent mechanism ensuring GDPR compliance. However, the absence of WHOIS data limits transparency regarding domain ownership, which slightly impacts trustworthiness. Technically, the website employs a modern tech stack including jQuery, Swiper.js, and LightGallery, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS enforced and consent management in place, but lacks explicit security headers and dedicated security or incident response policies. Contact information is available via a GDPR-compliant form, though no direct company emails or phone numbers are explicitly listed. Social media presence on Instagram and Facebook enhances engagement and trust. Overall, the site is professional, content-rich, and user-friendly, suitable for its purpose as a local tourism hub. The main risk lies in the lack of domain registration transparency and missing formal security policies. Strategic improvements in security headers, terms of service, and WHOIS transparency would enhance credibility and security posture.

S

Sencito

chytrejsiobec.cz

49

Sencito is a technology company specializing in smart IoT solutions for municipalities, offering a range of sensors, modules, and a mobile application to enable smarter community management. Their market position is focused on small to medium municipalities primarily in the Czech Republic and surrounding regions, providing affordable and easy-to-deploy IoT infrastructure. The website is professionally designed, multilingual, and provides detailed information about their products and services, targeting both municipal authorities and citizens. Technically, the website uses modern JavaScript libraries such as jQuery, Blueimp Gallery, Owl Carousel, and AOS for animations, alongside Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and includes cookie consent mechanisms, indicating a moderate level of digital maturity. However, no CMS or hosting provider details were identified. From a security perspective, the site enforces HTTPS and uses encrypted connections. Cookie consent and spam protection on forms are implemented. However, no explicit security headers were detected, and there is no published security policy or incident response information, which are areas for improvement. The absence of WHOIS data reduces transparency but does not indicate malicious intent. Overall, the website presents a trustworthy and professional front for a niche IoT technology provider, with moderate security posture and good privacy compliance. Strategic improvements in security policy transparency and technical security headers would enhance trust and compliance.

P

Prima Obchod s.r.o.

prima-obchod.cz

9

Prima Obchod s.r.o. operates an e-commerce website specializing in textile haberdashery, fashion and clothing accessories, and crafting supplies primarily targeting consumers in the Czech Republic. The website presents a professional and well-structured online retail platform with a broad product catalog and clear navigation. The business appears to be a medium-sized retail entity with a strong local market presence and positive customer trust indicators such as a high recommendation rate. Technically, the website employs modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and Bing UET, alongside consent management mechanisms to comply with privacy regulations. The site is mobile-optimized and SEO-friendly, offering a good user experience. Security-wise, the site enforces HTTPS and uses cookie consent scripts but lacks advanced security headers and explicit security policies or incident response information, which could be improved. The absence of WHOIS data for the domain is a notable concern, reducing the trust score for domain legitimacy. Overall, the website is functional, professional, and safe for general audiences, but would benefit from enhanced transparency in domain registration and security practices.

L

Los Kachlos s.r.o.

loskachlos.cz

49

Los Kachlos s.r.o. is a well-established Czech company specializing in the import and retail of premium design tiles and coverings from Spain and Italy since 1996. The company operates multiple physical showrooms across Czech Republic and Slovakia and offers a comprehensive product range including retro, vintage, large format, and technical tiles for various interior and exterior applications. Their business model combines retail, wholesale, e-commerce, and design consultancy services, positioning them as a market leader in their niche. Technically, the website is built on a mature platform (iCard.cz) using Bootstrap and Vue.js, with modern analytics and marketing integrations. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies are missing. The absence of WHOIS data limits domain trust analysis, but the website content and business information appear professional and credible. Privacy policy and terms of service pages are not found, indicating room for compliance improvement.

A

Asociace výrobců minerální izolace (AVMI)

avmi.cz

57

The website www.avmi.cz represents the Asociace výrobců minerální izolace (AVMI), an association focused on mineral and thermal insulation for buildings. The site provides information about insulation materials such as mineral wool, polystyrene, and PUR foam, targeting general audiences interested in building insulation solutions. The business appears to be a small association operating primarily in the Czech Republic, with a professional web presence built on the Wix platform. Technical infrastructure relies on Wix's hosting and content management system, with standard JavaScript libraries and analytics tools such as Google Tag Manager and Sentry for error monitoring. Security posture is moderate, with HTTPS implied but lacking explicit security headers and privacy policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and design indicate a legitimate business entity. Overall, the site is safe, professional, and relevant to its industry, but improvements in privacy compliance and security best practices are recommended.

Biogen Slovakia s.r.o. operates as a subsidiary of the global biotechnology leader Biogen Inc., focusing on innovative therapies for neurological and rare diseases. The website serves healthcare professionals and patients in Slovakia, providing comprehensive information about therapeutic areas, corporate responsibility, and career opportunities. The digital infrastructure is built on Adobe Experience Manager, leveraging modern JavaScript libraries and cookie consent management tools to ensure compliance and user experience. Security posture is solid with HTTPS enforcement and cookie management, though some HTTP security headers could be improved. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, enhancing trust. Overall, the website reflects a professional and credible corporate presence with good technical implementation and user experience.

S

Sloneek

sloneek.com

66

Sloneek is a modern HR SaaS platform offering a comprehensive suite of employee management tools including core HR functions, time management, performance management, payroll, and AI-driven surveys. The company targets SMEs and startups, positioning itself as an all-in-one HR solution with a strong emphasis on user experience and data-driven decision making. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site leverages WordPress with multiple analytics and marketing integrations, ensuring robust tracking and user engagement insights. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain raises some legitimacy concerns, but the active social media presence and comprehensive content support the business's credibility. Overall, Sloneek presents as a trustworthy and professional HR software provider with room for improvement in transparency and security disclosures.

S

Strom - shop

stromshop.cz

71

Stromshop.cz is an established e-commerce platform specializing in the sale of John Deere branded products in the Czech Republic. Founded in 2013, it serves as the official John Deere online shop offering a wide range of products including garden machinery, clothing, toys, and accessories. The website demonstrates a consistent brand presence and targets consumers interested in John Deere merchandise. Technically, the site uses ASP.NET WebForms with Kentico CMS, integrates Google Tag Manager and reCAPTCHA for tracking and security, and shows moderate performance with good mobile optimization. Security practices include HTTPS and CSRF protection, though some security headers are not explicitly confirmed. Privacy and cookie policies are present, indicating basic GDPR compliance, but no explicit security policy or incident response information is found. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Socialsharks s.r.o.

socialsharks.cz

45

Socialsharks s.r.o. is a Prague-based creative and digital marketing agency specializing in social media marketing and comprehensive digital strategies. Established as the first agency in the Czech Republic focused on social media marketing, it serves a broad client base with services including creative concept development, digital campaigns, production, and community management. The company positions itself as a market leader with a medium-sized team and a strong presence in the Czech market and a branch in Georgia. Technically, the website employs modern frameworks like Bootstrap and integrates Google Tag Manager and CookieHub for analytics and cookie consent, respectively. The site is mobile-optimized and professionally designed, offering a good user experience and clear navigation. Security-wise, the site uses HTTPS but lacks advanced security headers and published security policies, indicating room for improvement. The absence of WHOIS data reduces domain trust but does not detract from the professional presentation and business credibility. Overall, the website is safe, compliant with basic privacy and cookie consent requirements, and demonstrates a solid digital maturity level.

H

Najděte si skvělého terapeuta — Hedepy online terapie

hedepy.cz

10

Hedepy.cz is an established online therapy platform founded in 2020, offering clients access to a wide network of vetted therapists primarily in the Czech Republic and other European countries. The platform emphasizes personalized therapist matching and provides a mobile app for convenient access to therapy sessions. With over 50,000 clients served and 700+ therapists, Hedepy positions itself as a trusted player in the online mental health space. The website content is professionally designed, mobile-optimized, and includes positive client testimonials and insurance partnerships, enhancing its credibility. Technically, the website leverages modern web technologies including React and Next.js, hosted on Vercel, with integrated error monitoring via Sentry and analytics through Google Tag Manager. The platform supports multiple languages and regional domains, indicating a mature digital infrastructure. Performance and SEO optimizations are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses monitoring tools but lacks visible security headers and published security policies or incident response contacts. Privacy and cookie policies are not clearly accessible, which is a compliance gap. No vulnerabilities or suspicious domains were detected, and no WAF or blocking mechanisms interfere with content access. Overall, Hedepy.cz demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

T

Testuj.to s.r.o.

testuj.to

71

Testuj.to s.r.o. operates a Czech Republic-based marketing platform that leverages micro-influencer communities to provide authentic product testing and reviews. The platform enables users to test products for free or at discounted prices and share their experiences to assist other consumers and product manufacturers. The company positions itself as the largest tester community in the Czech market, focusing on user-generated content as a marketing tool. Technically, the website is built on a modern React and Next.js stack, integrating multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates good mobile optimization, SEO practices, and security posture with HTTPS and security headers properly configured. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information and social media presence enhancing trust. However, the site lacks a publicly available security policy and incident response information, which could improve transparency and security readiness. Overall, the website is professional, trustworthy, and well-positioned in its niche, with moderate to good technical maturity and security practices.

A

Amazing places for your holiday | Amazing Places

amazingplaces.cz

57

The website 'Amazing Places' offers curated travel content focused on handpicked holiday destinations within the Czech Republic. It targets general audiences interested in exploring unique and interesting places for vacations. The business model appears to be content curation and travel inspiration, likely monetized through advertising or affiliate partnerships, though no explicit monetization details are visible. The site uses modern web technologies including Vue.js and Vuetify, with integration of Google Analytics and Tag Manager for visitor tracking. The technical infrastructure is moderately mature, with good mobile optimization and SEO practices, but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data limits the ability to verify domain ownership and registration legitimacy, introducing moderate risk in trust assessment. Overall, the site is functional and professional but could improve in transparency and security compliance.

V

VS Consult

vsconsult.cz

64

VS Consult is a small Czech digital marketing consultancy specializing in PPC advertising, SEO optimization, social media management, and web design services tailored for small to large businesses. The website presents a professional and consistent brand image with clear service offerings and client testimonials, positioning itself as a niche player in the Czech digital marketing sector. Technically, the site is built on WordPress with modern plugins and frameworks such as Yoast SEO, Beaver Builder, and Bootstrap 4, ensuring good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though additional security headers and explicit security policies are absent. The lack of WHOIS data reduces domain trustworthiness, but the accessible content and professional presentation mitigate concerns. Overall, the site is well-structured, user-friendly, and trustworthy for its intended audience.

C

Cech akumulace a fotovoltaiky, z.s.

caft.cz

43

Cech akumulace a fotovoltaiky (CAFT) is a Czech professional association dedicated to photovoltaic and energy storage professionals. The organization provides membership services, professional training, legislative updates, and networking opportunities. With over 200 members and 11 years of presence in the Czech Republic, CAFT holds a reputable position in the sustainable energy sector. The website reflects a well-structured, professionally designed platform that effectively communicates the association's mission and services. Technically, the site is built on WordPress with modern SEO and GDPR compliance tools, ensuring good performance and privacy adherence. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. Overall, the digital presence supports CAFT's credibility and outreach effectively.

A

ASOCIACE PRO VYUŽITÍ TEPELNÝCH ČERPADEL, Z.S.

avtc.cz

59

ASOCIACE PRO VYUŽITÍ TEPELNÝCH ČERPADEL, Z.S. operates as a Czech Republic-based association dedicated to promoting the use and quality of heat pumps as an alternative energy source. The website presents a professional and well-structured digital presence built on WordPress with Elementor, featuring educational programs, partner information, and industry news. The technical infrastructure includes modern web technologies and integrates cookie consent and analytics tools, reflecting a moderate to good digital maturity level. Security posture is solid with HTTPS and cookie consent but lacks explicit security policies or incident response details. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, though the website content and design suggest a credible organization. Strategic recommendations include enhancing privacy and security disclosures and verifying domain registration status to improve trust and compliance.

F

Fotobanka

fotobanka.cz

52

Fotobanka.cz is a well-established Czech online magazine and resource specializing in stock photography, royalty-free licenses, and affiliate marketing for major stock photo agencies. The site offers a large curated collection of affordable images, discount coupons, and detailed reviews, targeting photographers, advertisers, and publishers. Technically, the website is built on WordPress with modern plugins and CDN integration, providing good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The domain's long registration history and consistent WHOIS data support the site's legitimacy. Overall, the website presents a professional and trustworthy platform for stock photo resources in the Czech market.

Ximilar is a technology company specializing in visual AI solutions, offering image recognition, visual search, and custom AI tailored to business needs. Their platform enables no-code computer vision model creation and deployment, targeting businesses and developers across industries such as fashion, home decor, stock photos, and collectibles. The company positions itself as a flexible, modular, and easy-to-integrate SaaS provider with a strong emphasis on automation and customization. Technically, the website is built on WordPress with modern JavaScript frameworks like Alpine.js, and integrates marketing and analytics tools such as Google Tag Manager and Intercom. The site is well-optimized for SEO and mobile devices, featuring structured data and rich metadata. Performance is moderate with good accessibility and navigation. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response information. WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces transparency but is common in the tech SaaS sector. Overall, the website demonstrates a professional and trustworthy digital presence with room for improvement in privacy policy transparency and security disclosures. The risk profile is moderate with no critical vulnerabilities detected in the visible content.

C

Camperguru

camperguru.com

67

Camperguru is a specialized online platform founded in 2015 that curates and offers a verified collection of the best camping spots across Europe. The business targets camping enthusiasts and outdoor travelers, providing inspiration, detailed listings, and a mobile app companion for easier navigation and planning. The platform leverages a community-driven ambassador program to maintain high-quality content and unique outdoor stay options such as glamping, winery camping, and family-friendly sites. Technically, the website is built on WordPress with modern JavaScript frameworks and integrates Google Tag Manager for analytics. It is hosted with a reputable registrar and uses Cloudflare DNS, ensuring good performance and security. The site enforces HTTPS and includes a GDPR-compliant privacy and cookie policy with an opt-in consent mechanism. Security headers are not fully verified but the overall security posture is good with no visible vulnerabilities or exposed sensitive data. No direct contact information or terms of service were found, which could be improved for better business credibility. Overall, Camperguru presents a professional, trustworthy, and user-friendly platform with a strong market position in the European camping niche.

Ynovate is a Czech innovation network connecting eight professional innovation centres established by cities, regions, and universities. The network supports the development and acceleration of innovative businesses by fostering synergies, sharing contacts, and cooperating directly with entrepreneurs. The website presents a professional and well-structured platform with clear business focus on innovation support across Czech regions. Technically, the site uses Kentico CMS, Bootstrap framework, and integrates Google Tag Manager and Smartlook for analytics and user behavior tracking. The website is mobile optimized and provides good user experience with clear navigation and relevant content. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and explicit incident response policies suggests room for improvement. Privacy and cookie policies are present and indicate GDPR compliance. However, the lack of WHOIS data for the domain reduces trustworthiness and calls for further verification. Overall, the site is professional, trustworthy, and serves its business purpose effectively.

S

SCR design

scrdesign.sk

64

SCR design is a well-established digital studio specializing in UX/UI design, branding, and website development services. With over 13 years of experience, the company serves a diverse clientele including banking, real estate, and healthcare sectors. Their website demonstrates a strong market position with professional design, client testimonials, and a comprehensive service portfolio. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and user experience. Security posture is solid with HTTPS and reCAPTCHA implementations, though security headers could be improved. Privacy compliance is robust with detailed cookie and privacy policies and consent mechanisms. Overall, SCR design presents a credible and professional digital presence, though the lack of WHOIS data slightly impacts trust. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms.