Security Directory

L

LESENSKY.CZ s.r.o.

lesensky.cz

68

LESENSKY.CZ s.r.o. is a Czech Republic based PR and marketing agency established in 2009, specializing in integrated PR and marketing services including strategy, public relations, marketing campaigns, and web projects. The company has a strong market position supported by multiple industry awards and a professional digital presence. Their website is built on Drupal 10, featuring modern technologies and comprehensive cookie and privacy compliance mechanisms. Security posture is strong with HTTPS, security headers, and secure forms, though no explicit security policy or incident response information is published. WHOIS data is unavailable, which slightly impacts domain transparency but does not detract from the business legitimacy indicated by the website content and client references. Overall, the company demonstrates a mature digital infrastructure and a professional approach to business and security.

H

H&M spol. s r.o.

ham.cz

57

H&M spol. s r.o. is a well-established family-owned manufacturing and retail company based in the Czech Republic, specializing in custom plastic, aluminum, and wooden windows and doors, as well as winter gardens and shading technology. The company holds a strong market position with over 100 references and a notable showroom in Prague, targeting residential and commercial customers seeking high-quality custom products. The website reflects a professional business model focused on manufacturing and retail within the construction and home improvement sectors. Technically, the website employs modern tracking and marketing tools such as Google Tag Manager, Facebook Pixel, and Seznam tracking scripts, alongside a cookie consent mechanism indicating GDPR awareness. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, no CMS or hosting provider details were detected, and accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found, but recommendations include implementing security headers and publishing a vulnerability disclosure policy to enhance security posture. Overall, the website is trustworthy, professionally designed, and compliant with basic privacy and cookie regulations. The domain WHOIS data confirms a long-standing registration consistent with the company's history, supporting legitimacy. Strategic improvements in security transparency and compliance documentation would further strengthen the company's digital maturity and trustworthiness.

R

REALSANT s.r.o.

realsant.cz

56

REALSANT s.r.o. is a Czech Republic based real estate development company with over 25 years of experience, specializing in residential and commercial property development, project management, and property services. The company operates as part of the PKS group, which enhances its market position and credibility. Their website presents a professional and comprehensive overview of their services, projects, and corporate information, targeting investors, buyers, and commercial clients in the real estate sector. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA, ensuring a responsive and user-friendly experience. Privacy and cookie policies are well implemented with clear consent mechanisms, reflecting good compliance with GDPR requirements. Security posture is generally strong with HTTPS and reCAPTCHA usage, though the absence of certain security headers and lack of incident response information suggest areas for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall professional presentation and detailed business information mitigate concerns. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response contacts, and verifying domain registration details to improve trust and compliance.

P

PKS stavby a.s.

pksstavby.cz

54

PKS stavby a.s. is a well-established Czech construction company with over 50 years of tradition and a strong market position among the top 20 construction firms in the Czech Republic. The company offers comprehensive construction services including building and engineering projects, supported by in-house production capabilities and a workforce of approximately 600 employees. The website reflects a professional corporate presence with clear business information, references, and media coverage. Technically, the site is built on WordPress and employs modern web technologies such as Google Analytics, Facebook Pixel, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and explicit consent mechanisms. Overall, the website and domain registration data align well, supporting the legitimacy and credibility of the business.

P

PKS holding a.s.

pks.cz

51

PKS holding a.s. is a large Czech holding company specializing in construction, manufacturing of windows and doors, developer and engineering activities, and leasing commercial spaces. The company operates multiple subsidiaries and serves both private and public investors, positioning itself as a strong regional player with a diversified portfolio. The website reflects a professional and consistent brand image with clear service offerings and references to major projects. Technically, the site uses xartCMS, integrates Google Tag Manager for analytics, and employs Mapy.cz for mapping services. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced, but lacks some advanced security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, but the website's content and linked domains indicate legitimacy. Overall, the site is safe, professional, and business-focused with no adult or questionable content.

T

Trans Technik SRL

trans-technik.ro

45

Trans Technik SRL is a Romanian company specializing in the distribution of materials and subassemblies for automotive bodyworks, representing a Czech company with nearly 30 years of experience. Their product range includes materials for vehicle superstructures, aluminum and steel profiles, door kits, tarpaulin systems, hydraulic systems, and more, targeting businesses in the transportation and automotive sectors. The website is built on WordPress with WooCommerce, using modern plugins and standard analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS and security headers implemented, though formal security policies and incident response contacts are absent. Privacy compliance is basic with a privacy policy and cookie consent present. Overall, the website is professional and trustworthy, supporting a small-sized business with a clear market focus.

T

ThePay, a.s.

thepay.eu

64

ThePay, a.s. operates a professional payment gateway platform targeting e-commerce merchants primarily in the Czech Republic and Slovakia. The company offers a variety of modern payment methods including card payments, PSD2-compliant payments, QR codes, Apple Pay, and Google Pay, supporting multiple currencies and recurring payments. The website reflects a mature business with over 3,000 clients and emphasizes ease of use with automated tariffs and fast implementation. Technically, the site uses modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Leady.cz, and is served over HTTPS with cookie consent mechanisms in place. However, the absence of explicit privacy policy and terms of service pages, as well as missing security headers, indicates room for improvement in privacy compliance and security posture. Overall, the site is well-designed, mobile-optimized, and trustworthy with PCI DSS certification displayed, but could benefit from enhanced transparency and security best practices.

I

International Gas Union

wgc2028.com

63

The website www.wgc2028.com serves as the official platform for the 30th World Gas Conference scheduled in Milan, Italy in June 2028. It is operated under the International Gas Union brand, a recognized entity in the global energy sector. The site provides event details, venue information, and calendar integration options, targeting industry professionals and stakeholders in the gas and energy sectors. The business model revolves around event organization and industry advocacy, positioning itself as a key player in the energy conference market. Technically, the website is built using modern web technologies including React and Next.js, hosted on Vercel, and managed via DatoCMS. It demonstrates good performance, mobile optimization, and accessibility standards. Privacy compliance is addressed through Cookiebot consent management and a dedicated privacy policy page. Analytics are implemented via Google Tag Manager, reflecting moderate user tracking. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, warranting further verification. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced transparency in domain registration and security policies to strengthen its credibility and compliance posture.

I

International Gas Union

igrc2027.com

64

The website www.igrc2027.com serves as the official platform for the International Gas Union's IGRC2027 event, focusing on the global gas industry's role in building sustainable and secure societies. The site targets industry professionals and stakeholders, providing event information and promoting the gas sector's importance. The business model centers on industry association and event hosting, positioning itself as a key global player in the energy sector. Technically, the site is built on a modern React and Next.js framework, hosted on Vercel, and integrates Cookiebot for GDPR-compliant cookie management and Google Analytics for traffic analysis. The site demonstrates good performance, mobile optimization, and basic accessibility features. Security posture is strong with HTTPS enforced and standard security headers implied, though explicit security policies and incident response information are absent. The lack of WHOIS data for the domain suggests either a new registration or privacy protection, which slightly impacts trust but is mitigated by the professional and consistent branding aligned with the International Gas Union. Overall, the site is trustworthy, compliant, and professionally maintained, with recommendations to enhance transparency around security policies and domain registration details.

I

IGU

lng2026.com

64

LNG2026 is a professionally developed event website representing the 21st International Conference & Exhibition on Liquefied Natural Gas, scheduled in Doha, Qatar in February 2026. The site serves as a comprehensive platform for industry professionals, offering detailed information on conference programs, sponsorship, exhibition opportunities, and networking. The business is positioned as a premier global LNG event organized under the International Gas Union (IGU), targeting energy sector stakeholders worldwide. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, and various marketing pixels, hosted likely via GoDaddy infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a consistent and professional design. However, there is room for improvement in security headers and privacy compliance mechanisms. Security posture is solid with HTTPS enforced and domain registration protections in place, but lacks advanced DNS security (DNSSEC) and visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website presents a low risk profile with strong business credibility and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

M

Ministerstvo průmyslu a obchodu

narodniportal.cz

54

The website 'Oficiální portál Rady Kvality ČR' is an official Czech government portal managed by the Ministry of Industry and Trade. It serves as a national information hub focused on quality management and corporate social responsibility (CSR) in the Czech Republic. The portal provides comprehensive information about the Quality Council of the Czech Republic, national quality policies, CSR initiatives, national awards, and related events. It targets organizations, businesses, and the general public interested in quality and CSR standards within the country. Technically, the site is built on WordPress 6.8.2 with modern plugins such as Yoast SEO Premium for search optimization, Google Tag Manager and Google Analytics for visitor tracking, and WP 2FA Premium for enhanced security. The site employs responsive design, lazy loading for images, and cookie consent mechanisms compliant with GDPR. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses two-factor authentication plugins, indicating a good security posture. However, no explicit security headers were detected in the HTML source, and there is no publicly available incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were found in the content. Privacy compliance is strong with a clear privacy policy and cookie consent banner. Overall, the website presents a trustworthy and professional government portal with good content quality and technical implementation. The lack of WHOIS data is noted but is consistent with government domain policies. Strategic recommendations include adding security headers, publishing incident response policies, and enhancing accessibility compliance to further strengthen the site's security and trustworthiness.

I

innogy Energo

innogy-energo.cz

67

innogy Energo is a major energy company operating in the Czech Republic, providing natural gas, electricity, and related services to approximately 1.7 million customers. The company emphasizes its extensive operational footprint with over 4000 employees and multiple service offerings including CNG filling stations, photovoltaics, and electromobility solutions. The website reflects a professional and consistent brand presence with clear navigation and comprehensive service information. Technically, the site leverages modern technologies such as Sitecore CMS, jQuery, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and bot protection via Cloudflare Turnstile, though explicit security headers and policies are not visible. Privacy compliance is well addressed with detailed cookie and privacy policies and a consent banner. Overall, the site demonstrates a solid security posture with room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data slightly impacts trust but is mitigated by the professional presentation and official contact details.

W

WP Debug Toolkit

wpdebugtoolkit.com

52

WP Debug Toolkit is a specialized WordPress debugging tool provider offering a plugin and an independent Viewer App that enables developers and site owners to view and filter WordPress error logs in real time without requiring SSH or FTP access. The company targets WordPress developers and site owners seeking efficient debugging solutions and offers lifetime deals to its customers. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence for a company founded in 2025. Technically, the site leverages WordPress with popular plugins such as Easy Digital Downloads and Yoast SEO, and uses Oxygen Builder for design. It integrates Google Ads and tracking tools but lacks a cookie consent mechanism, which is a privacy compliance gap. Security posture is good with HTTPS and domain transfer protection, but DNSSEC is not enabled and security headers are missing. No direct contact emails or phone numbers are provided, and no explicit security or incident response policies are published. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

O

ORLEN Unipetrol

orlenunipetrol.cz

57

ORLEN Unipetrol is a leading Czech energy company specializing in refining, petrochemical production, and retail fuel distribution. As part of the ORLEN Group, it holds a strong market position in Central Europe, serving business clients, investors, and the general public. The website reflects a mature corporate digital presence with structured content covering products, investor relations, media, and sustainability initiatives. Technically, the site is built on Microsoft SharePoint with modern JavaScript libraries and cookie consent management, though mobile optimization and SEO could be improved. Security posture is solid with HTTPS enforcement, cookie consent, and internal anti-corruption policies, but lacks explicit vulnerability disclosure mechanisms. Overall, the site is professional and trustworthy, though WHOIS data is unavailable, limiting domain legitimacy verification.

C

Coweo Technologies s.r.o.

jenfirmy.cz

62

Coweo Technologies s.r.o. operates JenFirmy.cz, the second largest job and company review portal in the Czech Republic, specializing in employee reviews, job listings, and recruitment advertising services. The company has been active since 2007 and targets job seekers and employers within the Czech market. The website demonstrates a professional and consistent brand presence with comprehensive content and strong social media integration. Technically, the website employs modern web technologies including React, Google Tag Manager, and Sentry for error tracking, hosted likely behind Cloudflare infrastructure. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and uses security headers effectively. However, it lacks a publicly available security policy and incident response contact details, which are recommended for enhanced transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is safe, professional, and trustworthy for general audiences. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the site's operational legitimacy. Strategic improvements include publishing security policies and incident response information to strengthen security posture and user confidence.

Q

QCM s.r.o.

vhodne-uverejneni.cz

55

Portál pro vhodné uveřejnění is a certified electronic tool operated by QCM s.r.o., serving as the largest public procurement portal in the Czech Republic. It provides a comprehensive platform for publishing and managing public contracts, targeting both contracting authorities and suppliers. The portal supports legal compliance with Czech procurement laws and offers additional services such as electronic forms and training. The website demonstrates a professional and consistent brand presence with clear contact information and active content updates.

E

EEA Grants

eeagrants.org

67

EEA Grants is a well-established European funding mechanism focused on supporting cooperation and development projects across multiple sectors including innovation, social inclusion, environment, culture, and governance. The organization operates primarily in the government and non-profit sectors, targeting public institutions and civil society organizations in beneficiary countries. The website reflects a professional and consistent brand presence with clear communication of its mission and services. Technically, the website is built on Drupal 10, leveraging modern web technologies and analytics tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized, accessible, and provides a good user experience with clear navigation and relevant content. However, some technical security enhancements such as enabling DNSSEC and implementing security headers are recommended. From a security perspective, the site demonstrates good practices including HTTPS usage and cookie consent mechanisms compliant with GDPR. The WHOIS data confirms the domain's legitimacy and long-standing presence, enhancing trustworthiness. Nonetheless, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security transparency and readiness. Overall, the website is credible, professional, and secure for its intended audience, with recommendations focused on strengthening security posture and compliance documentation.

K

KS

ks.no

66

KS is a prominent Norwegian membership organization representing all municipalities and county municipalities in Norway. It focuses on advocating for an efficient and independent municipal sector that meets the needs of residents. The website reflects a well-established organization with a clear market position as the leading voice for the Norwegian municipal sector, offering services such as legal advice, research, statistics, training, and digital tools. The target audience primarily includes municipal officials and public sector stakeholders in Norway. Technically, the website employs a modern technology stack including various analytics and tracking tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Azure Application Insights. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and professional design. However, it lacks some privacy compliance features such as a cookie consent mechanism and visible security policies. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of security headers and incident response information are areas for improvement. The WHOIS data is not publicly available, likely due to privacy protection, but the website content and contact information strongly support legitimacy and trustworthiness. Overall, KS's website demonstrates a strong business and technical foundation with minor gaps in privacy compliance and security transparency. Strategic improvements in these areas would enhance trust and regulatory adherence.

V

VLTAVA LABE MEDIA a.s.

mojepredplatne.cz

55

Mojepředplatné.cz is an established Czech online subscription platform operated by VLTAVA LABE MEDIA a.s., offering a broad portfolio of magazine and newspaper subscriptions. The platform targets Czech-speaking consumers seeking convenient access to print and digital media products. The website is professionally designed with good content quality and consistent branding, reflecting its position as a leading media subscription service in the Czech Republic. Technically, the site employs a modern JavaScript stack with popular libraries and integrates multiple marketing and analytics tools with consent management, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though improvements could be made by implementing additional security headers and publishing explicit security policies. The absence of WHOIS data limits transparency but does not detract significantly from the site's legitimacy given its affiliation with a reputable media company. Overall, the site presents a trustworthy and user-friendly experience with moderate technical and security maturity.

B

Běž.cz

bez.cz

56

Běž.cz is a specialized retail e-commerce website focused on running and outdoor gear, including shoes, clothing, and equipment. The company operates both online and through physical stores located in Prague and Frýdek-Místek, targeting outdoor and running enthusiasts primarily in the Czech Republic. The website presents a professional and consistent brand image with comprehensive product offerings and clear navigation. Technical infrastructure is based on the Shoptet e-commerce platform, utilizing common web technologies such as jQuery, Google Tag Manager, Microsoft Clarity, and MailerLite for marketing and analytics. The site is secured with HTTPS and implements cookie consent mechanisms compliant with GDPR regulations. However, WHOIS data for the domain is unavailable, which slightly reduces transparency but is common for Czech domains.

E

European Unified ID

euid.eu

63

European Unified ID (EUID) is an open-source identity solution designed for the European digital advertising ecosystem. It leverages encrypted email and phone number data to provide a privacy-conscious, secure, and accurate identity standard. The website positions itself as a key player enabling personalization, targeting, and measurement for advertisers, publishers, DSPs, and data providers. The presence of major partners such as Adobe, Google, and Salesforce underscores its industry relevance and collaborative approach. Technically, the site is built using modern frameworks like Docusaurus and integrates tools such as Algolia for search and Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies or incident response information, which could be improved to enhance trust and compliance. Overall, the website is professional and well-structured, though it would benefit from publishing comprehensive privacy and terms of service documents to strengthen privacy compliance and user trust.

Galileo Corporation s.r.o. is a Czech company specializing in digital communication solutions for municipalities, cities, schools, and public organizations. Their flagship offerings include a mobile application (V OBRAZE), SMS and email communication tools, integration with social media, digital official boards, and AI products. The company serves over 2500 clients, positioning itself as a trusted partner in the public sector digitalization space. The website reflects a professional and consistent brand image with clear messaging tailored to government and public institutions. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and Swiper.js, and incorporates analytics and cookie consent tools, indicating a mature digital infrastructure. Security posture is good with HTTPS and anti-spam measures on forms, though some security headers are not confirmed and could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the professional web presence and business transparency.

G

Galileo Corporation s.r.o.

igalileo.sk

54

Galileo Corporation s.r.o. is a well-established technology company specializing in digital solutions for municipalities, cities, schools, and contributory organizations primarily in Slovakia and the Czech Republic. With over 23 years of experience, the company offers a comprehensive suite of services including website development, digital official boards, citizen communication platforms, and AI-powered assistants and chatbots. Their market position is strengthened by official partnerships and a focus on compliance with public administration requirements. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Swiper.js, with a custom CMS backend. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced, CAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website projects professionalism, trustworthiness, and a strong business credibility in the public sector technology space.

M

Ministerstvo pôdohospodárstva a rozvoja vidieka Slovenskej republiky

mpsr.sk

62

The website www.mpsr.sk is the official online presence of the Ministry of Agriculture and Rural Development of the Slovak Republic. It serves as a comprehensive information portal providing updates, press releases, policy documents, and resources related to agriculture, rural development, food industry, and related governmental activities. The site targets Slovak citizens, agricultural stakeholders, policymakers, and media professionals, offering a government-backed platform for transparency and public engagement. The ministry is positioned as a key governmental authority with a long operational history since 1998. Technically, the website employs a custom CMS with modern web technologies including jQuery, Nivo Lightbox, SlickNav for responsive navigation, and Font Awesome for icons. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing, with a clear cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS and uses consent-based tracking scripts. However, it lacks explicit security policy pages and incident response contacts, and no advanced security headers were detected. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data confirms the domain's legitimacy and consistency with the ministry's identity. Overall, the website is a trustworthy, well-maintained government portal with good content quality and compliance posture. Strategic improvements could include publishing a dedicated security policy, incident response contacts, and implementing additional security headers to enhance protection and transparency.

P

Page Builder s.r.o.

pobo.cz

51

Pobo.cz is a Czech-based SaaS company, Page Builder s.r.o., offering an advanced drag & drop page builder tool integrated with AI and A/B testing capabilities aimed at e-commerce businesses. The platform enables rapid creation of product descriptions, category pages, and blog content optimized for SEO and sales conversion. With over 1200 active e-shops using their service and strong client testimonials, Pobo holds a solid position in the Czech e-commerce technology market. Technically, the website employs modern JavaScript frameworks and integrates Google Tag Manager, Google Optimize, and Freshchat for analytics and customer engagement. Hosting is provided by VasHosting.cz, and the site is well-optimized for mobile devices with good SEO practices. However, some security best practices such as security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data limits domain trust assessment, though the website content and business information appear professional and credible. Overall, Pobo.cz presents a trustworthy and professional e-commerce tool provider with room for improvement in security transparency and privacy compliance. Strategic enhancements in these areas would strengthen their market credibility and user trust.

B

BdThemes

bdthemes.com

77

BdThemes is a specialized WordPress product development company based in Bangladesh, founded in 2011. The company focuses on creating WordPress themes, plugins, and Elementor addons, targeting WordPress users and developers globally. Their market position is that of an established niche player with a portfolio of popular plugins and themes, supported by a dedicated online store and partner ecosystem. The website demonstrates a professional and modern design with comprehensive content and clear navigation, optimized for SEO and mobile devices. Technically, the site is built on WordPress with Elementor and uses modern web technologies including Google Tag Manager and Cloudflare for DNS and domain registration. The infrastructure supports good performance and moderate user tracking through analytics and marketing tools. The site employs HTTPS with a good SSL configuration but lacks DNSSEC and some advanced security headers, indicating room for improvement in security hardening. From a security perspective, the website shows good practices such as HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure information, which are important for mature security posture and compliance. The domain registration is consistent and trustworthy, with no suspicious patterns detected. Overall, BdThemes presents a low-risk profile with a strong business credibility and good technical implementation. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security policies, and enhancing incident response readiness to further strengthen trust and compliance.

Č

Česká spořitelna, a.s.

investicnicentrum.cz

66

The website 'Investiční centrum' is operated by Česká spořitelna, a.s., a leading Czech bank, providing comprehensive investment information, market data, and financial products. It serves investors and clients seeking detailed insights into stocks, bonds, funds, ETFs, and market trends. The site is well-branded, professionally designed, and offers extensive educational and research content, positioning it as a trusted financial resource in the Czech Republic. Technically, the site uses modern web technologies including GEM CMS, JavaScript frameworks, and integrates Google Tag Manager and Evergage for analytics and marketing. It is optimized for desktop and mobile with good performance and accessibility features. Security is robust with HTTPS enforced and standard security headers present, though explicit security policies and incident response details are not published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Contact information is transparent with official company emails and phone numbers. The lack of WHOIS data is likely due to privacy protection but does not detract from the site's legitimacy given the strong brand and content. Overall, the site presents a low-risk profile with high trustworthiness and professionalism, suitable for its financial services audience.

Č

Česká spořitelna, a.s.

business24.cz

54

Česká spořitelna operates the BUSINESS 24 Internetbanking platform, providing secure online banking services tailored for business clients in the Czech Republic. The platform supports advanced login mechanisms including client certificate authentication, enhancing security for corporate users. The website is professionally designed with clear navigation and consistent branding, targeting business customers who require reliable and secure financial services. The presence of official bank domains and contact information reinforces its legitimacy. Technically, the site leverages JavaServer Faces with Apache MyFaces Trinidad framework, integrating modern JavaScript libraries and third-party analytics tools such as Google Tag Manager and Split.io. While the site shows moderate performance and basic mobile optimization, it lacks visible advanced security headers in the provided HTML content. The cookie consent mechanism is GDPR compliant, reflecting attention to privacy regulations. Security posture is solid with HTTPS enforced and client certificate login, but could be improved by implementing additional security headers and publishing explicit security policies. The absence of WHOIS data limits domain trust assessment, though the website content and branding strongly indicate a legitimate financial institution. Overall, the site presents a trustworthy and professional banking portal with room for technical and security enhancements. Strategic recommendations include enhancing security headers, improving mobile and accessibility features, publishing clear security and incident response policies, and ensuring the client certificate extension installation process is secure and user-friendly.

N

Nadace České spořitelny

denproskolu.cz

65

Den pro školu is a Czech non-profit educational initiative supported by Nadace České spořitelny, aiming to connect teachers with volunteers from various professional fields to enrich classroom learning. The website presents a well-structured, content-rich platform with clear calls to action for teachers and volunteers, supported by testimonials and governmental endorsements. Technically, the site uses modern web technologies including the GEM CMS platform, Google Tag Manager for analytics, and is hosted on Erste Group's CDN infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but lacks a clearly accessible privacy policy page. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for non-profit entities. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

S

Skoala

skoala.cz

64

Skoala.cz is a Czech educational platform dedicated to enhancing financial literacy among primary school teachers and students. The platform offers free access to thematic methodologies, educational videos, and interactive games designed to facilitate engaging and effective financial education. The website is professionally designed with a clear focus on usability and accessibility for its target audience. Technically, the site leverages modern web technologies such as Next.js and React, hosted with Cloudflare DNS and registered via a Czech registrar, ensuring regional consistency and reliability. Security posture is adequate with HTTPS enforced, though improvements are recommended in security headers and explicit privacy and terms documentation. Overall, the platform presents a trustworthy and valuable resource for financial education in the Czech Republic.

F

Foxentry

foxentry.cz

61

Foxentry is a Czech-based technology company specializing in intelligent data validation and correction services aimed primarily at e-commerce businesses, CRM systems, and logistics providers. Their platform offers a suite of services including address autocompletion, email and phone number validation, company data enrichment, and AI-driven data cleansing. The company positions itself as a market leader in the Czech Republic with a strong client base including reputable brands. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing tools, facilitating easy deployment via Google Tag Manager and popular e-commerce platforms.

R

Rozinet s.r.o.

regionalnipotravina.cz

54

The website regionalnipotravina.gov.cz represents a government-backed initiative by the Czech Ministry of Agriculture to certify and promote high-quality regional food products. The site is designed to support local producers and encourage consumers to seek out certified regional foods. The business model is focused on quality certification and regional promotion, positioning itself as a trusted national brand within the food sector. The website is professionally branded and consistent with government standards, targeting domestic consumers and producers in the Czech Republic. Technically, the site leverages modern web technologies including Blazor WebAssembly, jQuery, and Bootstrap, indicating a moderate level of digital maturity. The site includes advanced UI components such as calendars, galleries, and dropdowns, and integrates tracking tools like Google Analytics and Microsoft Clarity for user behavior insights. Mobile optimization and SEO appear adequate, though accessibility could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, reflecting basic privacy compliance. However, no privacy policy or terms of service pages were found, and no security headers were detected, which are areas for improvement. No forms or contact information are present, limiting direct user interaction and support channels. The WHOIS data is unavailable, which reduces transparency but the official government domain and content mitigate concerns about legitimacy. Overall, the website is functional, professional, and aligned with its government-backed mission but would benefit from enhanced privacy disclosures, security headers, and contact information to improve trust and compliance.

A

Úvodní stránka | Akademie kvality

akademiekvality.cz

60

Akademie kvality is a Czech educational platform dedicated to promoting awareness and knowledge about quality food products. The website offers a variety of content including articles, recipes, quizzes, and information about recognized food quality labels. It targets a general audience interested in food quality and healthy eating, positioning itself as a niche resource within the Czech Republic. The platform also engages users through competitions and community stories, enhancing its educational mission. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Facebook SDK, and other JavaScript libraries to provide interactive features and analytics. The site is mobile-optimized with good SEO practices and a clear navigation structure, although some accessibility features could be improved. The presence of cookie consent and privacy policies indicates attention to privacy compliance. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain registration insights, but the overall professionalism and trust signals suggest a legitimate and well-maintained site. Overall, Akademie kvality presents a solid digital presence with good content quality and privacy compliance. Strategic improvements in security headers and explicit incident response policies could further enhance its security posture and trustworthiness.

Z

Zařízení služeb MZe s.p.o.

medovesnidane.cz

50

Medové snídaně is an educational project focused on promoting healthy lifestyles, proper nutrition habits, and the importance of bees and honey to children in kindergartens and primary schools. Supported and funded by the Czech Ministry of Agriculture, the project offers interactive lectures and activities that engage children with the natural world and beekeeping. The website is professionally designed using WordPress with Elementor and Astra theme, providing a good user experience and mobile optimization. Contact information and social media presence are clearly provided, enhancing business credibility. However, the absence of a privacy policy and security headers slightly reduces the overall security posture. WHOIS data is unavailable, likely due to privacy protection, which is common but slightly impacts trust.

R

Rhine-Ruhr 2025

rhineruhr2025.com

70

Rhine-Ruhr 2025 is the official organizer of the FISU World University Games scheduled for July 2025 across multiple German cities. The website serves as a comprehensive portal for event information, including schedules, sports, festival activities, news, and ticketing. It targets students, athletes, volunteers, media, and spectators, providing essential services such as ticket sales and volunteer coordination. Technically, the site is built on modern frameworks like Next.js and Material-UI, ensuring a responsive and visually appealing user experience. Security posture is solid with HTTPS and security headers implemented, though visible privacy and cookie policies are absent, representing a compliance gap. Overall, the site is professional and trustworthy, with legitimate WHOIS data supporting its authenticity.

The website www.cz-pl.eu serves as the official portal for the Interreg Czechia – Poland cross-border cooperation program, facilitating project funding, information dissemination, and stakeholder engagement between Czech and Polish border regions. The program focuses on environmental protection, transportation development, SME growth, and strengthening cross-border community ties. The site is professionally designed with consistent branding and clear navigation, targeting applicants, project recipients, and governmental/non-profit entities involved in regional cooperation. Technically, the website employs modern web technologies including JavaScript, CSS, Google Fonts, and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. No CMS or hosting provider details are explicitly detected. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks visible security headers and formal privacy/cookie policies. Security-wise, the site shows no signs of vulnerabilities or malicious content. However, the absence of privacy and cookie policies, as well as lack of incident response or vulnerability disclosure information, indicates room for compliance and transparency improvements. WHOIS data is unavailable due to EURid privacy restrictions, but the domain and content appear legitimate and consistent with an official government-backed program. Overall, the website is trustworthy, professional, and serves its informational and administrative purpose well. Strategic improvements in privacy compliance, security headers, and accessibility would enhance its security posture and user trust.

P

Parádní kraj

paradnikraj.cz

48

Parádní kraj is a regional development and innovation initiative focused on the Pardubice region in the Czech Republic. It supports businesses, researchers, students, and municipalities by providing opportunities for growth, education, and innovation. The website serves as a platform to promote regional projects, funding opportunities, and partnerships with government and other organizations. The site is professionally designed with clear navigation and content relevant to its target audience. Technically, it is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is evident with a GDPR policy and cookie banner. Overall, the site is trustworthy and well-positioned as a government-backed regional development resource.

Č

Česká komora architektů

ceskacenazaarchitekturu.cz

44

The website ceskacenazaarchitekturu.cz serves as the official portal for the Czech Architecture Award 2025, organized by the Czech Chamber of Architects. It showcases the best architectural realizations built in the Czech Republic over the last five years, providing information about the competition, timelines, nominees, and public voting. The site targets architects, industry professionals, and the general public interested in architecture within the Czech Republic. The business model is non-profit and focused on promoting architectural excellence and public engagement through exhibitions and awards. Technically, the website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted on DigitalOcean, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with preloading of scripts and responsive design elements. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no explicit security headers were detected, and there is a lack of visible privacy and cookie policies, which are important for GDPR compliance. No vulnerability disclosures or incident response contacts are provided, indicating room for improvement in security transparency and user trust. Overall, the website is professional and trustworthy, with consistent branding and relevant content. The domain registration data aligns well with the business purpose and history, supporting legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, enhancing accessibility, and publishing vulnerability disclosure and incident response information to strengthen security posture and compliance.

R

Regiony nás baví

regionynasbavi.cz

49

Regiony nás baví is a Czech regional event promotion website established in 2020, focusing on cultural and social activities within the Czech Republic. The platform targets the general public interested in local events and community engagement. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. Hosting is provided by Active24, with content delivery enhanced by Cloudfront CDN and Google Fonts integration. Security posture is solid with HTTPS enforced and multiple security headers present, though formal security policies and incident response contacts are absent. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and an active consent mechanism. Overall, the website presents a professional and trustworthy front with moderate tracking and good user experience.

L

LA TAUPE, s.r.o.

lataupe.cz

55

LaTaupe is a Czech creative studio specializing in brand construction, graphic design, AI consulting and implementation, web design, and production services. The company targets businesses seeking comprehensive marketing and digital transformation solutions, including AI integration. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern JavaScript libraries like jQuery and Google Tag Manager, and implements cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS enforced and form validation, though some security headers are missing and no incident response policy is published. The absence of WHOIS data raises concerns about domain legitimacy, but the professional presentation and business details mitigate risk. Overall, the site is well-structured, user-friendly, and trustworthy for its business domain.

C

CARE Česká republika

care.cz

34

CARE Česká republika is a well-established Czech non-profit organization focused on humanitarian aid and charitable projects, including crisis relief efforts such as those in Sudan. The website serves as a platform for information dissemination, donation collection, and engagement with supporters. It operates a charity e-shop and donation campaigns, targeting the general public and donors interested in humanitarian causes. The organization has a credible market position within the Czech Republic's non-profit sector, supported by a domain registered since 2005 and consistent WHOIS data. Technically, the website is built on WordPress with WooCommerce, enhanced by the Breakdance theme and plugins. It integrates modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and Google Pay for payment processing. The site demonstrates good SEO practices with structured data and meta tags, and it is mobile optimized with a moderate performance profile. Hosting is provided by wedos.cz, a Czech hosting provider, aligning with the organization's location. From a security perspective, the site enforces HTTPS and uses security tokens in forms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partial; while a cookie consent mechanism is present, no privacy policy or terms of service pages were found in the provided data. Contact information is limited to donation forms without direct emails or phone numbers, which may impact user trust and compliance. Overall, the website is trustworthy and professionally maintained, with room for improvement in privacy disclosures and security headers. The risk level is moderate, primarily due to incomplete privacy documentation and limited direct contact information. Strategic enhancements in these areas would strengthen compliance and user confidence.

P

PKF APOGEO Group

pkfapogeo.cz

50

PKF APOGEO Group is a professional consulting and auditing firm based in the Czech Republic, affiliated with the global PKF network that spans over 530 offices worldwide. The company offers comprehensive consulting services targeting businesses seeking expert financial and advisory support. Their market position is strengthened by their membership in PKF Global, providing international reach and credibility. The website reflects a professional image with good design and clear navigation, suitable for their target business audience. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, and integrates multiple analytics and tracking tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS and multiple security headers implemented, though the absence of visible privacy and cookie policies suggests room for improvement in compliance. The WHOIS data is privacy-protected, which is common for professional firms but slightly reduces transparency. Overall, the website is trustworthy and professional, with moderate to good scores across content, technical, and security dimensions.

N

Národní rozvojová banka, a.s.

nrb.cz

68

Národní rozvojová banka (NRB) is a Czech national development bank focused on supporting business growth, innovation, and sustainable development in the Czech Republic. The website presents a professional and comprehensive overview of their financial products, including loans, guarantees, and advisory services targeted at businesses, entrepreneurs, and the public sector. The bank maintains partnerships with key government ministries and agencies, reinforcing its role as a strategic financial institution. Technically, the website is built on WordPress with modern plugins and technologies, ensuring good SEO, mobile responsiveness, and user experience. Security measures such as HTTPS and Google reCAPTCHA are implemented, though explicit security policies and incident response contacts are not published. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy of the site. Overall, NRB's digital presence is strong, professional, and aligned with its mission to finance a better Czech Republic.

K

Konfederace zaměstnavatelských a podnikatelských svazů České republiky

kzps.cz

44

Konfederace zaměstnavatelských a podnikatelských svazů České republiky (KZPS) is the largest employer and business association in the Czech Republic, representing 140 member associations and over 23,000 entities with approximately 1.75 million employees. The organization advocates for its members' interests in legislative matters and participates actively in tripartite negotiations. The website reflects a professional and consistent brand presence, targeting employers and business associations within the Czech market. Founded in 2003, KZPS has a well-established market position and a comprehensive digital presence.

A

ANTECOM s.r.o.

antecom.cz

41

ANTECOM s.r.o. is a Czech-based publishing and communication agency established in 2008, with a core team experienced in public relations, marketing communication, and advertising since the early 1990s. The company publishes specialized magazines such as TRADE NEWS and AGE MANAGEMENT, targeting business professionals and stakeholders interested in trade, export, and intergenerational cooperation. The website reflects a professional business presence with good content quality and consistent branding, supported by a network of reputable partners and supporters.

V

Vítězslav Válka

vitavalka.cz

37

Vítězslav Válka is a seasoned UI/UX designer and web developer based in the Czech Republic, offering specialized design services including corporate applications, web design, and consulting with over 20 years of experience. The website positions him as a reliable and professional service provider with a strong portfolio and client testimonials, targeting businesses and professionals seeking high-quality design solutions. Technically, the site is built on WordPress, uses modern web technologies, and is hosted by Wedos, with good performance and mobile optimization. Security posture is adequate with HTTPS enabled and secure form handling, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the domain registration is consistent with the business claims, and no suspicious patterns were detected, indicating a trustworthy online presence.

R

Refsite

refsite.info

57

Refsite is an independent Czech portal dedicated to sharing references and reviews of companies, services, and products primarily in the energy sector. It serves as a trusted platform recommended by the Czech State Environmental Fund and the Nová zelená úsporám program, highlighting its credibility and market position. The website offers various services including company comparisons, access to specialists, energy savings catalogs, and calculators, targeting consumers and businesses interested in energy efficiency and renewable solutions. Technically, the website is built using modern web technologies such as React and Next.js, hosted partially on Google Cloud Storage for static assets. It employs Google Tag Manager for analytics and SmartSupp Chat for customer interaction, indicating a mature digital infrastructure. The site is mobile-optimized with good accessibility and SEO practices, providing a positive user experience. From a security perspective, the site uses HTTPS and shows good SSL configuration. However, it lacks explicit security headers and does not provide visible privacy or cookie policies, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected but registered with a reputable registrar, supporting legitimacy. Overall, Refsite presents a professional and trustworthy online presence with strong business credibility in the energy sector. Strategic recommendations include enhancing privacy compliance, adding clear contact and incident response information, and implementing comprehensive security headers to further strengthen its security posture.

M

Michaela Mikovcová

regional.cz

59

The website www.regional.cz represents a small Czech web development business operated by Michaela Mikovcová, specializing in responsive web design, custom web applications, SEO optimization, and related hosting and email services. The business targets entrepreneurs, non-profits, small firms, and individuals seeking tailored web solutions. The site demonstrates a good level of technical maturity with a custom CMS, use of modern web technologies such as PHP, MySQL, jQuery, and integration with Google Analytics and Tag Manager for analytics and marketing purposes. The website is mobile-optimized and accessible, with clear navigation and professional content presentation. From a security perspective, the site employs HTTPS with a valid SSL certificate and displays a cookie consent banner aligned with GDPR requirements. However, explicit security headers are missing, and no incident response or vulnerability disclosure information is provided. The absence of WHOIS data for the domain reduces trust in domain legitimacy, although the website content and SSL presence suggest a legitimate business. Contact information is limited to a phone number, with no company email address visible. Overall, the website is well-structured and professional, with moderate security posture and good privacy compliance. Strategic improvements in security headers, incident response transparency, and domain registration clarity would enhance trust and security posture.

R

Regzone

regzone.info

77

Regzone is a professional domain registration and hosting service provider operating primarily in the Czech Republic and Slovakia region, with a broad offering of over 800 TLDs including popular domains like .com, .cz, and .eu. The company is part of the ZONER a.s. group, which includes multiple related brands and subsidiaries, indicating a well-established presence in the technology and hosting market. Their services include domain registration, DNS management with DNSSEC, free SSL certificates, email hosting, and a REST API for domain management, targeting both individual and business customers. The website is well-designed, mobile-optimized, and provides clear navigation and comprehensive content.