Security Directory

M

MediMedi

medimedi.cz

52

MediMedi is a Czech-based e-commerce company specializing in the sale of medical diagnostic equipment, laboratory supplies, protective healthcare products, and supplements. The company targets healthcare professionals, clinics, senior homes, and general households, positioning itself as a niche supplier in the healthcare sector within the Czech Republic. Their website is built on the Shoptet e-commerce platform, featuring a professional design with clear navigation and product categorization. The site supports multiple currencies and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. From a security perspective, the website enforces HTTPS and uses CSRF tokens in forms, which are positive indicators. However, the use of an outdated jQuery version and the absence of some security headers such as Content-Security-Policy and X-Frame-Options present potential vulnerabilities. The lack of a visible privacy policy page and incident response contacts suggests room for improvement in compliance and transparency. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website demonstrates a good balance of business functionality and technical implementation but would benefit from updates to its security posture and privacy compliance to enhance trustworthiness and reduce risk.

C

Central Médiacsoport Zrt.

mc.hu

50

Magazin Centrum, operated by Central Médiacsoport Zrt., is a leading Hungarian magazine publisher offering a comprehensive subscription platform for both print and digital magazines. The website mc.hu provides a user-friendly interface with clear navigation, multiple subscription options, and promotional offers, targeting Hungarian magazine readers. The technical infrastructure leverages modern web technologies including Next.js, Google Analytics, Hotjar, and a GDPR-compliant consent management platform, ensuring a mature digital presence. Security posture is strong with HTTPS enforcement, reCAPTCHA integration, and privacy policies in place, although some security headers could be enhanced. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with data protection regulations.

ZEMAN maso - uzeniny, a.s. operates a regional retail business specializing in fresh meat, traditional smoked meats, and delicacies sourced from their own production facility in Příbram, Czech Republic. The company targets general consumers seeking quality meat products through physical butcher shops and an online e-shop. Their market position is that of an established regional player with a focus on quality and tradition. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript, Google Fonts, Google Tag Manager, Facebook Pixel, and Smartlook for analytics and user behavior tracking. The site is moderately optimized for mobile devices and SEO, with a good user experience and clear navigation. However, some accessibility and security header improvements are recommended. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and an explicit privacy policy page. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, though the website content and business presence appear legitimate. Overall, the website scores well in content quality and business credibility but should improve privacy compliance and security best practices. Strategic recommendations include adding a privacy policy, enhancing security headers, and verifying domain registration details to strengthen trust and compliance.

Uzeniny Příbram, a.s. is a Czech meat processing company operating production plants in Příbram and Zábřeh na Moravě. The company focuses on pork and beef slaughtering and producing high-quality meat products such as hams and specialties with reduced sodium content. The website provides basic company and production information primarily targeting general consumers interested in their meat products. Technically, the website uses standard web technologies including Google Fonts, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is accessible, uses HTTPS, and implements a cookie consent mechanism, but lacks a privacy policy and security headers, which are important for compliance and security posture. No WHOIS data was found, which limits domain trust verification and reduces overall legitimacy confidence. The website does not expose any critical security vulnerabilities but could improve in privacy compliance and security best practices.

M

MUDr. Zuzana Plesníková

zubar-zborovice.cz

52

The website represents a small local dental clinic operated by MUDr. Zuzana Plesníková in Zborovice, Czech Republic. It offers preventive, therapeutic, and restorative dental services targeting local patients. The site is built on WordPress using the Divi theme, with standard plugins and tracking tools such as Google Analytics and Google Tag Manager. The technical infrastructure is modern and functional, with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and formal privacy policies. WHOIS data is unavailable, likely due to privacy protection, which limits domain trust verification. Overall, the site is professional and trustworthy for its business scope but could improve compliance and security transparency.

M

Motoforza

motoforzafairings.com

61

Motoforza is a Czech Republic based manufacturer and retailer specializing in composite motorcycle fairings and accessories. With over 30 years of experience, the company serves a niche market of motorcycle enthusiasts and racers by offering high-quality aftermarket parts tested in professional racing series. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product categories. Technically, the site employs modern analytics and marketing tools including Google Analytics, Facebook Pixel, and Microsoft Clarity, alongside live chat support. Security posture is solid with HTTPS enforced and secure form handling, though improvements are needed in cookie consent and security headers. The absence of WHOIS registration data is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the business presents a credible and professional online presence with room for enhanced privacy compliance and security transparency.

S

Synpo a.s.

synpo.cz

58

Synpo a.s. is a Czech chemical company with over 70 years of tradition specializing in applied research and production of resins, varnishes, paints, adhesives, sealants, and polymers. The company serves both small and multinational companies, offering a broad range of products and services including accredited laboratories and custom production. Their market position is strong within the manufacturing sector, supported by a professional website and active social media presence. Technically, the website is built on the Solidpixels CMS platform, uses modern tracking tools like Google Analytics and Tag Manager, and is secured with HTTPS. However, the absence of WHOIS data and privacy policy pages slightly reduces trustworthiness. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

L

LUKON BULBS

lukon-bulbs.eu

56

Lukon bulbs is a Czech-based e-commerce business specializing in the sale of plants, particularly lilies and irises, boasting over 60 years of experience in plant breeding and sales. The website offers a large catalog of over 500 varieties of lilies and irises and more than 2000 plants in total, targeting gardening enthusiasts and professional horticulturists. The business model is focused on direct online sales with additional customer support and catalog distribution. Technically, the website uses a custom-built platform with jQuery, bxSlider, and Fancybox libraries, integrated with Google Analytics and advertising tools. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS and consent banners, but lacks explicit security policies and modern security headers. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

BrnoKontejnery.cz is a Czech Republic-based small business specializing in container transport, rental, earthworks, waste removal, construction machinery rental, and related services primarily serving Brno and surrounding regions. The website presents a professional and consistent brand image with clear service offerings and customer testimonials, targeting both individual and business customers in the construction and logistics sectors. The domain age and WHOIS data support the legitimacy and established presence of the business. Technically, the website uses a modern but standard technology stack including jQuery, Bootstrap, Owl Carousel, and Google Tag Manager for analytics. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, and no CMS or hosting provider details are explicitly detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic with a privacy policy and cookie banner present, but no incident response or vulnerability disclosure policies are found. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The security posture is adequate but could be improved by adding security headers and formal policies. The business credibility is strong given the consistent WHOIS data and clear contact information. The AI overall score reflects a good quality website with room for security and privacy enhancements.

G

Groupe WINNCARE

winncare.it

47

Groupe WINNCARE is a specialized manufacturer and distributor of medical devices, focusing on hospital beds, therapeutic mattresses, patient lifting equipment, and care facility furniture. The company holds a strong position in the European healthcare equipment market, serving care providers and individuals with reduced autonomy. Their website is multilingual and professionally designed, reflecting a medium-sized enterprise with a clear business model centered on quality medical products and services. Technically, the site employs modern web technologies including jQuery, Bootstrap, and advanced sliders, with integrated analytics tools such as Matomo, Google Analytics, and Hotjar, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit published security policies or incident response contacts, suggesting room for improvement in transparency and security governance. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience with good content quality and navigation.

W

Winncare

winncare.uk

55

Winncare UK is a healthcare solutions provider specializing in the design and manufacture of innovative lifting and patient handling equipment, pressure ulcer prevention products, and bariatric specialist rentals. With over 40 years of experience, the company positions itself as a leading European healthcare equipment manufacturer, serving a broad audience including healthcare providers, caregivers, and medical institutions. The website reflects a professional and comprehensive product and service offering, supported by strategic partnerships and acquisitions such as Five Mobility. Technically, the site is built on WordPress with modern plugins and SEO tools, providing good mobile optimization and user experience. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies. The WHOIS data for the domain www.winncare.uk is invalid, indicating potential domain registration issues that should be addressed to improve trust. Overall, the website is safe, professional, and well-structured but would benefit from enhanced privacy compliance and clearer contact information.

D

Darujme.cz

darujme.cz

59

Darujme.cz is the leading online donation platform in the Czech Republic, facilitating donations for over 1500 organizations and municipalities. The platform offers personal and corporate fundraising campaigns, enabling NGOs, schools, churches, and companies to raise funds efficiently online. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, it leverages WordPress CMS, AWS hosting, and modern analytics tools like Google Analytics and Microsoft Clarity, with a strong emphasis on privacy compliance through cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure payment processing, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly impacts trust but the presence of clear contact information and reputable partners supports legitimacy. Overall, Darujme.cz presents a trustworthy, well-maintained platform with good business credibility and technical maturity.

A

ACTIVA spol. s r.o.

activacik.sk

55

ACTIVA spol. s r.o. operates the website activacik.sk, an established e-commerce platform specializing in school and office supplies primarily targeting Slovak and Czech markets. The company has a strong market presence since 1992 and offers a wide range of products including creative toys, school backpacks, and stationery. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses modern web technologies such as Google Tag Manager, React components, and AWS hosting, ensuring reliable performance and scalability. Security posture is strong with HTTPS enforced and cookie consent mechanisms implemented, although some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the site is trustworthy, well-maintained, and aligned with business goals.

C

ESG reporting firem | CRIF-ESG.cz

crif-esg.cz

41

The website www.crif-esg.cz presents itself as a provider of ESG reporting and certification tools targeted at companies required to report on environmental, social, and governance activities. The content is professionally presented in Czech language, focusing on simplifying ESG reporting processes and offering competitive advantages to businesses. The technical infrastructure is based on WordPress with the Divi theme, incorporating modern analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag. The site demonstrates moderate digital maturity with good SEO and mobile optimization but lacks some accessibility features and explicit security policies. Security posture is moderate; HTTPS is implied but no security headers or incident response contacts are visible. The absence of WHOIS data is a significant concern, reducing domain trustworthiness and legitimacy. Overall, the site is functional and business-focused but would benefit from enhanced transparency and security measures.

SkyMinder.cz is a Czech Republic-based international credit and business information service operated by CRIF – Czech Credit Bureau, a. s. The platform provides comprehensive financial, credit, and commercial reports on over 200 million companies worldwide, targeting businesses that require reliable data on foreign partners. Integrated within the Cribis application, SkyMinder offers online access to reports from more than 160 countries, supplemented by investigative services in additional jurisdictions. The website demonstrates a professional and consistent brand presence with clear contact information and social media engagement.

C

CRIF - Czech Credit Bureau

mcribis.cz

49

CRIF - Czech Credit Bureau operates the Cribis.cz platform, providing comprehensive credit and risk information services primarily for businesses in the Czech and Slovak Republics. The platform offers tools for screening companies and individuals, including credit reports, relationship diagrams, monitoring services, and AML compliance checks. The company positions itself as a trusted partner for businesses seeking to mitigate risks associated with unreliable partners. Technically, the website is built on WordPress with modern technologies such as React and integrates multiple analytics and marketing tools, including Google Analytics and Microsoft Clarity. The site demonstrates good privacy compliance with a detailed cookie consent mechanism and a comprehensive privacy policy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers are not confirmed. The absence of WHOIS data is a notable gap, reducing domain registration trustworthiness, but the website content and business information appear professional and credible overall.

P

Pixelfield

pixelfield.cz

48

Pixelfield is a Czech Republic-based digital agency specializing in the development and design of mobile and web applications, virtual and augmented reality solutions, games, and custom software. Established in 2012, the company serves a diverse clientele including startups and established businesses, positioning itself as a reliable partner for digital product innovation. The website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the site employs modern tracking and analytics tools such as Google Analytics, Hotjar, and Oribi, and is hosted on cesky-hosting.eu with HTTPS enabled, ensuring secure communications. However, the absence of explicit privacy and cookie policies, security headers, and vulnerability disclosures indicates areas for compliance and security improvement. Overall, Pixelfield demonstrates a solid digital presence with room to enhance privacy compliance and security posture.

N

New Logic s.r.o.

newlogic.cz

71

New Logic s.r.o. is a Czech Republic-based full-service digital agency specializing in web development, e-commerce solutions, CRM and ERP systems, mobile applications, branding, and digital marketing. The company positions itself as a professional and experienced partner for businesses seeking comprehensive digital solutions, supported by a skilled team of consultants, designers, developers, and marketers. Their market presence is reinforced by a portfolio of successful projects and industry awards, targeting primarily business clients in need of tailored digital services. Technically, the website employs a modern technology stack including JavaScript frameworks, animation libraries, and advanced tracking and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for performance and mobile devices, featuring lazy loading and smooth scrolling. The use of a proprietary modular CMS indicates a custom approach to content management, enhancing flexibility and scalability. From a security perspective, the site enforces HTTPS, implements key security headers, and uses cookie consent mechanisms aligned with GDPR requirements. However, there is no publicly available dedicated security policy or incident response information, which could be improved to enhance transparency and trust. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website demonstrates a high level of professionalism, technical maturity, and compliance with privacy regulations. The absence of WHOIS data reduces transparency but does not significantly detract from the site's credibility given the quality of content and business indicators. Strategic recommendations include publishing a security policy, providing incident response contacts, and maintaining vigilance on third-party scripts.

E

ERA a.s.

era.cz

58

ERA a.s. is a globally recognized leader in next-generation surveillance and flight tracking solutions, specializing in multilateration and ADS-B technologies. The company serves a specialized market including air traffic management authorities, military and security agencies, and aviation industry stakeholders. With over 160 installations across 70 countries and 5 continents, ERA holds a strong market position supported by decades of tradition and experience. Their business model focuses on providing mission-critical surveillance systems and related services in a B2B context. Technically, the website demonstrates a mature digital infrastructure using modern web technologies such as HTML5, CSS3, JavaScript, and third-party libraries like Google Tag Manager and Picturefill for responsive images. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. However, there is room for improvement in security headers and accessibility compliance. From a security perspective, ERA's website enforces HTTPS and uses secure form submission methods, with no visible vulnerabilities or exposed sensitive data. The presence of ISO 27001 certification and partnerships with reputable companies like Airbus enhance trust. However, the absence of explicit security headers and incident response information suggests areas for enhancement. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, ERA's website reflects a professional, trustworthy, and well-maintained digital presence consistent with its industry standing. The lack of public WHOIS data due to privacy protection is justified given the company's international operations. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility to further strengthen the security posture and user trust.

P

Pixel Design s.r.o.

pixeldesign.cz

43

Pixel Design s.r.o. is a Czech-based creative web and graphic design studio specializing in custom website development, e-commerce solutions, internet marketing, and graphic design services. The company targets businesses and individuals primarily in the Pardubice, Hradec Králové, and Prague regions. Their website demonstrates a professional and modern digital presence with comprehensive service offerings and client references. Technically, the site uses modern web technologies including Google reCAPTCHA v3, Microsoft Clarity, and Google Tag Manager, and appears to be built on Fork CMS. Security posture is good with HTTPS enforced and spam protection on forms, though security headers are not evident and could be improved. Privacy compliance is strong with a clear cookie consent mechanism and a detailed privacy policy in Czech. The absence of WHOIS data limits domain registration trust assessment, but the business presence and content quality support legitimacy. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, making it a trustworthy digital asset for the company.

N

Nakladatelství JOTA, s.r.o.

jota.cz

52

Nakladatelství Jota, s.r.o. is a Czech publishing company operating an e-commerce platform specializing in a wide range of books including fiction, non-fiction, audiobooks, and e-books. The company targets Czech-speaking readers with diverse literary interests and maintains a professional online presence with clear contact information and active social media engagement. The website is well-designed, mobile-optimized, and provides comprehensive product information and customer engagement features such as newsletters and event calendars. Technically, the site employs modern tracking and advertising technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and Leadhub Pixel, indicating a mature digital marketing strategy. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers suggests room for improvement. Privacy and cookie policies are present and GDPR compliant, reflecting attention to regulatory requirements. The lack of WHOIS data limits domain trust assessment, but the overall professionalism and transparency of the site support a positive legitimacy evaluation.

N

Nakladatelství Portál

portal.cz

57

Nakladatelství Portál is a Czech publishing house website offering content related to books and magazines. The website presents a professional design with a focus on publishing services, targeting a general Czech-speaking audience. The technical infrastructure includes modern frontend technologies such as Bootstrap 4 and Google Tag Manager for analytics and cookie consent management. However, the absence of WHOIS data and registrant information raises concerns about domain legitimacy and transparency. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit privacy or terms of service documentation. Overall, the website is functional and safe but would benefit from enhanced transparency and security practices.

M

MEDIATE s.r.o.

cajeapotheke.cz

40

MEDIATE s.r.o. is a Czech family-owned company founded in 1996 specializing in the manufacture and supply of herbal teas, syrups, and dietary supplements primarily for pharmacies and healthy nutrition stores. The company maintains a strong market position in the Czech Republic and exports products internationally through exclusive partners. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, hosted likely by WEDOS, a Czech provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though explicit security policies and incident response contacts are not found. The domain is very recently registered, which is a minor discrepancy given the company's long history but does not indicate illegitimacy. Overall, the site is trustworthy and well-maintained.

SOFICO-CZ, a. s. is a Czech software company specializing in creating internet shops, ordering applications, and comprehensive information systems primarily for business clients. The company positions itself as a trusted provider to successful firms, supported by ISO 9001 and ISO/IEC 27001 certifications, indicating a strong commitment to quality and information security. Their website reflects a professional and consistent brand image targeting B2B customers seeking tailored internet projects. Technically, the website employs a moderately modern technology stack including jQuery, Google reCAPTCHA v3, Google Analytics, and Facebook Pixel, with good mobile optimization and SEO practices. However, some technologies like jQuery are outdated, and explicit security headers are missing, which could be improved. The site uses HTTPS exclusively and implements cookie consent mechanisms, demonstrating good privacy compliance. From a security perspective, the site benefits from ISO certifications and secure form handling with reCAPTCHA, but lacks visible security headers and a published incident response or vulnerability disclosure policy. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for this business type. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, secure, and compliant with privacy regulations, with minor technical improvements recommended. The risk level is low, and the company appears credible and trustworthy based on available data.

A

Alpiro s.r.o.

alpirossl.cz

47

Alpiro s.r.o. operates the website alpirossl.cz, offering a range of SSL certificates including domain validated, organization validated, extended validation, and S/MIME email signing certificates. The company targets businesses and website owners seeking affordable and reliable SSL solutions, emphasizing fast issuance and support for modern encryption standards. The website presents a professional and consistent brand image with clear navigation and good mobile optimization. Technically, the site uses standard web technologies such as jQuery, Google Analytics, and Google Tag Manager for tracking. The site is moderately performant and mobile-friendly but lacks advanced accessibility features and comprehensive SEO optimizations. No CMS or hosting provider information is discernible from the content. From a security perspective, the site enforces HTTPS and uses secure forms but lacks visible security headers and explicit privacy or cookie policies, which are compliance gaps. The absence of WHOIS data for the domain is a significant concern, reducing trust in domain legitimacy. No direct contact emails or phone numbers are provided, only a contact form. Overall, the security posture is moderate but could be improved with better transparency and compliance documentation. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, and clarify domain registration details to enhance trust and compliance.

H

Hotel České Žleby

hotelceskezleby.cz

36

Hotel České Žleby is a family-run hotel located in the Šumava region of the Czech Republic, offering comfortable accommodation and quality dining experiences. The website presents a professional and consistent brand image targeting general audiences interested in hospitality services in this region. The business appears to be small-sized and established since 2013, with a clear focus on local tourism and hospitality. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder, Google Tag Manager, and Cookiebot for cookie consent management. The site is hosted by REG-WEDOS, a known hosting provider, and uses HTTPS with good SSL configuration. Security posture is adequate but could be improved by adding security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service on the homepage. Overall, the website is safe, professional, and trustworthy with no signs of malicious or adult content.

C

Chata Šumava

chatasumava.cz

45

Chata Šumava is a small hospitality business offering accommodation in the Šumava region of the Czech Republic, specifically in Hojsova Stráž near Železná Ruda. The website presents family-friendly lodging options with amenities such as garden space, children's corner, and parking. It targets general tourists and families seeking affordable stays in a scenic mountain area. The business leverages local partnerships and maintains a presence on social media and review platforms like Hotel.cz, which awards it a quality certificate. Technically, the website uses a traditional web stack with jQuery, Flexslider, Fancybox, and Google Fonts. It integrates Google Analytics, Google Tag Manager, and Facebook SDK for tracking and marketing purposes. The site is moderately optimized for mobile and SEO, with a clear navigation structure and professional design. Hosting appears to be provided by a local Czech provider, ŠumavaNet.CZ. From a security perspective, the site uses HTTPS for external resources but lacks explicit security headers and cookie consent mechanisms, which are important for GDPR compliance. The contact form includes validation, and no sensitive data is exposed in the HTML. However, the absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Overall, the website is functional and professional for a small hospitality business but would benefit from improved security practices, explicit cookie consent, and transparency in domain registration to enhance trust and compliance.

B

Better Hotel

better-hotel.com

61

Better Hotel is a Czech-based company offering a modern, integrated hotel and restaurant management system. The platform is designed to simplify hotel operations including reservations, inventory, and restaurant management, serving over 350 Czech hoteliers. The website is professionally designed using WordPress and Elementor, with integrations for analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Cookie consent is managed via Cookiebot, indicating a commitment to privacy compliance. The technical infrastructure leverages Cloudflare for DNS and CDN services, ensuring good performance and security. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though improvements in security headers are recommended. The domain registration is consistent with the business profile, registered since 2015 with a reputable Czech registrar. Overall, the website presents a trustworthy and professional image suitable for its target hospitality market.

Z

Zest Brand

zestbrand.cz

55

Zest Brand is a small Czech company specializing in web development and advertising services, primarily targeting clients in the Tábor region. The website is built on WordPress using the Divi theme, indicating a modern and flexible technical infrastructure. The site employs Google Tag Manager and Google Analytics for user tracking and performance monitoring. While the website demonstrates good design quality and user experience, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate but could be improved by implementing security headers and publishing security policies. Overall, the website is functional and professional but would benefit from enhanced privacy and security measures to improve trust and compliance.

L

Lipno Region Tourism Society

lipensko.cz

55

Lipensko.cz is a regional tourism website operated by the Lipno Region Tourism Society, a non-profit entity promoting tourism in the Lipno area of the Czech Republic. The site offers comprehensive information on local attractions, activities, accommodation, events, and cultural heritage, targeting tourists including families, seniors, and adventure seekers. The business model focuses on regional tourism promotion and information dissemination, supported by partnerships with local and national tourism bodies. Technically, the website uses modern web technologies including Google Tag Manager, Google Analytics, Hotjar, and the Foundation framework, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and privacy/cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness from a registration perspective. Overall, the site is professional, content-rich, and trustworthy for its audience but would benefit from enhanced privacy compliance and security best practices.

J

Jihočeská hospodářská komora

jhk.cz

50

Jihočeská hospodářská komora is a regional non-profit organization based in the Czech Republic focused on supporting entrepreneurs and businesses in the South Bohemian region. The organization provides free consulting services, organizes educational seminars, promotes member companies, and facilitates networking opportunities. It holds a strong market position as a key regional player fostering business growth and export activities. The website reflects a professional and well-structured digital presence, leveraging modern web technologies and offering clear navigation and content relevant to its target audience of entrepreneurs, companies, and educational institutions. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active cookie consent mechanism. Overall, the website demonstrates a high level of professionalism and trustworthiness, supported by testimonials and partner affiliations.

R

Retailys.com s.r.o.

retailys.cz

39

Retailys.com s.r.o. operates the website retailys.cz, providing a SaaS platform for managing multiple e-commerce stores across different languages and currencies, with integration to major global marketplaces such as Amazon and eBay. The company targets online retailers seeking to expand internationally, offering tools for marketing automation and order consolidation. The website is professionally designed, SEO optimized, and includes comprehensive privacy and cookie policies compliant with GDPR. Technically, the site is built on WordPress with modern plugins and tracking technologies, including Google Analytics, Facebook Pixel, and Zoho SalesIQ. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and structure indicate a legitimate business. Contact is primarily via web forms and a contact page, with no direct emails or phone numbers publicly listed.

S

Sdružení historie hasičstva Stachy

muzeumstachy.cz

44

The website www.muzeumstachy.cz represents the Pošumavské hasičské muzeum Stachy, a small regional museum dedicated to the history of firefighting in the Pošumaví region of the Czech Republic. Operated by the Sdružení historie hasičstva Stachy, the site provides information about the museum's exhibitions, including a notable exhibit on fire cause investigation supported by the Jihočeský kraj. The museum targets general visitors interested in cultural heritage and firefighting history. The business model is non-profit and educational, focusing on local community engagement and historical preservation. Technically, the website is built on the Webnode CMS platform and leverages modern web technologies including HTML5, CSS3, JavaScript, and external services such as Facebook SDK and Google Tag Manager. Hosting is provided via Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. SEO and accessibility are basic but functional. The site lacks advanced security headers but enforces HTTPS, contributing to a reasonable security posture. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as missing WHOIS domain registration data, reduces overall trust and compliance posture. The lack of contact emails and phone numbers on the homepage limits direct communication channels. The site uses tracking scripts from Google and Facebook, but no explicit consent mechanisms or GDPR compliance indicators are present. Overall, the website is a legitimate cultural institution's online presence with good content quality and technical implementation but requires improvements in privacy compliance, security headers, and transparency of domain registration to enhance trustworthiness and regulatory adherence.

Č

ČEVAK a.s.

cevak.cz

61

ČEVAK a.s. is a Czech water utility company specializing in the operation and management of water supply and wastewater infrastructure. The company serves residential customers, municipalities, and water infrastructure owners, providing key services such as water and sewer connections, water quality testing, customer service, and technical statements. The website reflects a well-established regional utility with a professional online presence and ISO 27001 certification indicating a commitment to information security management. Technically, the website employs modern technologies including Google Tag Manager and Google Maps API, with good mobile optimization and accessibility features. The site uses HTTPS exclusively, ensuring secure communications, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, some security headers are not visibly implemented, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. From a security perspective, the site demonstrates good practices such as secure login portals and no exposed sensitive data. The absence of explicit incident response contacts and vulnerability disclosure mechanisms suggests areas for improvement. Overall, the security posture is solid but could be enhanced by adding security headers and publishing a security.txt file. The overall risk assessment is moderate with a good balance of content quality, technical implementation, and security. Strategic recommendations include improving transparency on security policies, enhancing WHOIS data visibility, and strengthening security headers to further bolster trust and compliance.

E

Educatius

educatius.mx

71

Educatius is a medium-sized educational consultancy specializing in placing international students into High School programs across the United States, United Kingdom, Ireland, and other countries. The company maintains a strong global presence with multiple country-specific domains and offers comprehensive student counseling and placement services. The website is built on WordPress with modern technologies and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, although formal security policies and incident response information are not publicly available. Overall, Educatius demonstrates a trustworthy and professional online presence suitable for its target audience of international students and their families.

S

STS Education

educatius.hu

65

STS Education is a specialized education consultancy focused on assisting international students with applications to high schools in the USA, United Kingdom, Ireland, and other countries. It operates as part of the Educatius Group, positioning itself as one of the largest organizations in this niche. The website is professionally designed, with clear navigation and good SEO practices, targeting Hungarian-speaking international students and their families. The business model revolves around consultancy and placement services, supported by digital brochures and consultation bookings.

E

Educatius

educatius.fi

77

Educatius is an established international educational exchange organization based in Finland, specializing in high school exchange programs for students. The website offers detailed program information for multiple countries and various exchange options, targeting students and families interested in study abroad experiences. The company maintains a consistent brand presence and partners with country-specific domains to support its global reach. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates advanced SEO and analytics tools such as Yoast SEO Premium, Google Tag Manager, and Facebook Pixel. Security posture is strong with HTTPS enforcement and appropriate security headers, complemented by a GDPR-compliant cookie consent mechanism. However, the absence of explicit privacy policy, terms of service, and direct contact information represents compliance and transparency gaps. Overall, the site is professional, secure, and user-friendly but would benefit from enhanced privacy and contact disclosures.

E

Educatius

educatius.dk

73

Educatius Denmark operates a professional website offering international high school exchange programs targeting Danish students. The site provides detailed program options across multiple countries including the USA, Canada, Australia, and several European destinations. The business is positioned as a medium-sized education exchange provider with a consistent brand presence and good content quality. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and OneTrust for cookie consent. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not evident in the HTML source. The absence of WHOIS data limits domain trust verification, but the website content and technical indicators suggest legitimacy. Privacy compliance is basic with a cookie banner but no clear privacy policy page detected. Overall, the site is professional, user-friendly, and trustworthy for its target audience.

S

STS Education

educatius.cz

64

STS Education is an education consultancy focused on assisting students with applications to international secondary schools, primarily in the USA, UK, Ireland, and other countries worldwide. The website is professionally designed, leveraging WordPress with modern plugins and tracking technologies to support marketing and analytics efforts. The company appears affiliated with the Educatius Group, which operates multiple regional education portals. Technically, the website is well-structured with good SEO practices and mobile optimization, although some accessibility features could be improved. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms policies. WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced compliance documentation and security hardening.

S

STS Education

educatius.be

63

STS Education is a Belgium-based education service provider specializing in international secondary school programs, helping students experience educational adventures in countries such as the United States, United Kingdom, and Ireland. The website is professionally designed using WordPress with modern technologies like Bootstrap and Yoast SEO Premium, indicating a mature digital presence. The company appears to be a subsidiary or part of the Educatius Group, reinforcing its market credibility. The site is well-optimized for SEO and mobile devices, with structured data enhancing search engine visibility. Security posture is strong with HTTPS enforced and appropriate security headers in place, alongside a GDPR-compliant cookie consent mechanism. However, the absence of explicit privacy policy, terms of service, and visible contact information slightly reduces trust and compliance scores.

Ú

Ústav zemědělské ekonomiky a informací

agronavigator.cz

59

Agronavigátor.cz is a well-established, government-affiliated informational portal operated by the Ústav zemědělské ekonomiky a informací (Institute of Agricultural Economics and Information) in the Czech Republic. The website serves as a comprehensive resource for agriculture and forestry professionals, including farmers, forest owners, accredited advisors, educators, and public officials. It provides legislative updates, educational materials, research insights, certification information, and event calendars, positioning itself as a trusted knowledge hub in the sector. Technically, the site is built on Drupal 10, leveraging modern web technologies such as jQuery and lazy loading libraries to optimize performance. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Hosting and domain registration are consistent with the business entity, with a domain age dating back to 2000, reinforcing its legitimacy. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR opt-out standards. However, explicit privacy policies and security headers are not present in the analyzed content, representing areas for improvement. No vulnerabilities or malicious content were detected, and the site maintains a good security posture overall. Overall, Agronavigátor.cz is a credible, professional, and secure portal serving a specialized audience in the Czech agricultural sector. Strategic enhancements in privacy disclosures and security policies would further strengthen its compliance and trustworthiness.

V

Vocento.com

vocento.com

61

Vocento.com is a leading Spanish media group specializing in communication, press, gastronomy, agencies, and classifieds. The company positions itself as an innovative and independent group delivering content and services across various territories in Spain. The website reflects a professional media business with a strong market presence and clear branding. Technically, the site uses WordPress CMS with modern technologies such as VideoJS for media playback and integrates Google Analytics and Tag Manager for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies in the provided content, which are areas for improvement. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is legitimate and professional but would benefit from enhanced privacy compliance and security best practices.

M

Mário Roženský

zakaznickapece.cz

45

The website zakaznickapece.cz is a professionally designed WordPress site focused on promoting a book and educational services related to customer care. The business is positioned as a niche expert in the Czech Republic, offering a book, e-book, and training events to improve customer service practices. Technically, the site uses modern web technologies including Google Tag Manager, Facebook Pixel, and a live chat solution (SupportBox), indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced but lacks some security headers and a formal vulnerability disclosure process. Privacy compliance is partial, with a privacy policy present but no explicit cookie consent mechanism. Overall, the site is trustworthy and well-maintained, with room for improvement in security and privacy practices.

E

Educatius

educatius.at

71

Educatius is an international education service provider specializing in placing students in high school programs abroad, primarily in the USA, UK, and other countries. The company targets international students seeking educational opportunities overseas and provides application support and consultancy services. The website is professionally designed, leveraging WordPress CMS with modern plugins and tracking technologies, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of explicit privacy and terms of service pages in the provided content is a minor compliance gap. Overall, the website reflects a legitimate and professional education consultancy with a global presence.

A

ACTIVA spol. s r.o.

potrebyprokancelar.cz

10

ACTIVA spol. s r.o. is a well-established Czech retail company specializing in office supplies, school and art materials, hygiene products, and refreshments. Founded in 1992, it operates multiple e-commerce platforms serving both B2B and B2C customers primarily in the Czech Republic and Slovakia. The company has a strong market presence with a broad product portfolio and recognized trust signals such as verified customer reviews and industry awards. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response contacts are absent. The lack of publicly available WHOIS data slightly reduces trustworthiness but does not detract from the professional presentation and operational legitimacy of the business.

A

ACTIVA spol. s r.o.

activacek.cz

10

ACTIVA spol. s r.o. operates the e-commerce website Activacek.cz, specializing in school and office supplies primarily targeting B2C customers such as students and parents in the Czech Republic. The company has a strong market presence with a history dating back to 1992 and operates multiple related online stores. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It integrates modern technologies including Google Tag Manager, Bing Ads, and React components, hosted on AWS infrastructure. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and incident response information are absent. Overall, the website demonstrates a mature digital presence with strong business credibility and trust indicators.

C

CRIF - Czech Credit Bureau, a.s.

informaceofirmach.cz

10

The website www.informaceofirmach.cz is a professional business information portal operated by CRIF - Czech Credit Bureau, a.s., providing comprehensive credit and financial health data on companies primarily in the Czech Republic and Slovakia. It serves a large user base including over 7000 active users and 1150 corporate clients, offering both free and premium services such as the Semafor Cribis rating and detailed company reports. The site is well-structured, mobile-optimized, and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, reCAPTCHA, and privacy compliance mechanisms, though some security headers could be improved. The absence of WHOIS data due to privacy protection slightly impacts trust but is justified given the business nature. Overall, the site is a credible and valuable resource for business risk assessment and partner verification.

C

Civil Society Now

civilsocietynow.org

9

Civil Society Now is a non-profit platform established in 2021, focusing on empowering civil society organizations and activists across multiple countries including Ukraine, Myanmar, Mongolia, and Nepal. The website offers membership sign-up forms and country-specific resources to support civil society engagement. The platform positions itself as a niche player in the non-profit sector, aiming to facilitate collaboration and information sharing among civil society actors. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by plugins such as Weglot for multilingual support and Cookiebot for cookie consent management. The infrastructure includes modern web technologies like jQuery and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and implements cookie consent with Google Consent Mode configured to restrict ad and analytics storage by default, reflecting a privacy-conscious approach. However, the absence of DNSSEC and security headers suggests room for improvement in hardening the security posture. No explicit privacy policy or terms of service pages were detected, which may impact compliance and user trust. Overall, the website presents a moderate risk profile with no critical security issues detected. Strategic recommendations include enabling DNSSEC, adding security headers, publishing comprehensive privacy and terms policies, and providing clear contact information to enhance trust and compliance.

The website 'Udržitelný svět' appears to be a newly launched online portal focused on sustainability topics, likely targeting Czech-speaking users given the language and locale settings. The site uses modern web technologies such as Angular and integrates cookie consent management via Cookiebot, alongside Google Tag Manager for analytics. However, the content is basic with limited business information, no visible privacy policy or terms of service, and no explicit contact details, which limits trust and credibility from a user perspective. The domain is newly registered in 2024, consistent with a new project or startup phase. Technically, the site shows moderate digital maturity with a modern tech stack but lacks visible security headers and DNSSEC is not enabled, which are areas for improvement. The cookie consent mechanism is well implemented, indicating some attention to GDPR compliance, but the absence of a dedicated privacy policy page and contact information reduces compliance confidence. No WAF or security challenge was detected, and the site content is fully accessible. From a security posture standpoint, the site benefits from HTTPS and domain transfer protection but lacks advanced security headers and incident response information. No vulnerabilities or suspicious patterns were detected in the provided data. Overall, the site scores moderately on AI-based evaluation, reflecting a functional but still maturing web presence. Strategically, the site should prioritize publishing comprehensive privacy and terms documents, enhancing security headers, enabling DNSSEC, and providing clear contact and incident response information to improve trust and compliance. These steps will strengthen the site's security posture and business credibility as it grows.