Security Directory

C

Cornèr Bank Ltd.

cornercard.ch

73

Cornèrcard is a Swiss financial services provider specializing in Visa and Mastercard credit cards, prepaid cards, and related financial products. The company targets private and business clients in Switzerland, offering a variety of card options including cashback, travel, and social cause cards. Cornèrcard is part of the Cornèr Group, a reputable financial group in Switzerland, and enjoys strong market positioning supported by customer satisfaction awards and recognitions. The website provides comprehensive information about products, services, and customer support, including a dedicated mobile app for card management.

DMO Lužické a Žitavské hory, z.s. operates a regional tourism website promoting the Lužické hory area, a scenic region on the Czech-German border known for its natural beauty, cultural heritage, and glassmaking tradition. The website offers guides, itineraries, accommodation and gastronomy information, and an e-shop for souvenirs, targeting tourists and nature enthusiasts. The business is positioned as a small, regional destination management organization supported by local and regional partners. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security measures include HTTPS, Google reCAPTCHA v3 on forms, and GDPR cookie consent, though security headers could be enhanced. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with moderate tracking and good user experience.

P

PositionEtt AB

biljetto.com

61

Biljetto is a Swedish technology company operating a specialized ticket sales platform designed to help event organizers sell tickets online with customizable options and exclusive sales sites. The platform supports a wide range of event types including concerts, courses, seminars, and attractions, and integrates with booking and cash register systems to facilitate both online and offline sales. The company positions itself as a scalable and flexible solution provider with over 25 years of experience in the industry. Technically, the website is built on WordPress using the Elementor framework, leveraging modern web technologies such as HTML5 video and Google reCAPTCHA v3 for security. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and anti-bot measures in place, though improvements like DNSSEC and a published security.txt file could enhance trust further. Overall, the website and business demonstrate a high level of professionalism and credibility, with clear contact information and customer testimonials supporting trust. No critical security or privacy issues were detected, and the content is safe for general audiences.

D

DigitaltMuseum

digitaltmuseum.se

58

DigitaltMuseum is a well-established digital platform founded in 2008 that aggregates collections from Norwegian and Swedish museums, providing public access to over four million cultural heritage items including photographs, artworks, and buildings. The platform targets museums, researchers, and the general public interested in cultural heritage, positioning itself as a leading resource in the Nordic region for digital museum collections. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Video.js for media playback, with hosting and DNS services provided by reputable providers such as Domeneshop AS and AWS Route53. Security measures include HTTPS enforcement, CSRF token usage, and Google reCAPTCHA integration, although DNSSEC is not enabled and explicit security headers are not visible in the HTML content. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content. Overall, the website demonstrates a high level of professionalism, content quality, and business credibility, with room for improvement in privacy policy transparency and security header implementation.

K

KINET - Váš IT partner

kinet.cz

49

KINET is a Czech Republic-based IT services company specializing in comprehensive IT infrastructure solutions, outsourcing, cloud services, hardware and software supply, and network security primarily targeting firms, schools, and municipalities. The company positions itself as a trusted IT partner with a strong portfolio of services including virtual servers, cloud storage, email services, and specialized educational technology solutions. Their website reflects a mature digital presence with professional design, clear navigation, and GDPR-compliant policies. Technically, the site is built on WordPress with modern plugins and includes security features like HTTPS and Google reCAPTCHA, though it lacks some advanced security headers and explicit incident response information. The absence of WHOIS data reduces domain trust but does not detract significantly from the overall professional appearance and business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.

A

Australasian Gaming Expo

austgamingexpo.com

40

The Australasian Gaming Expo (AGE) is a well-established event organizer specializing in the gaming and hospitality industry in Australia. The website serves as a comprehensive platform for event information, exhibitor details, visitor registration, and industry news. It targets professionals and businesses within the gaming and hospitality sectors, positioning itself as a cornerstone event in the Australasian market. The business model revolves around event hosting, exhibitor services, and networking facilitation. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates Google Analytics and Google reCAPTCHA for analytics and security. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. Hosting details are limited but the domain is registered with a reputable registrar and has a long history dating back to 2003. From a security perspective, the site uses HTTPS and implements reCAPTCHA for form protection, but lacks DNSSEC and explicit security headers. There is no visible cookie consent mechanism or detailed privacy compliance features, which could be improved. No incident response or vulnerability disclosure information is publicly available, indicating room for enhancement in security transparency. Overall, the website is professional, trustworthy, and serves its business purpose effectively. Strategic improvements in security headers, privacy compliance, and incident response transparency would strengthen its security posture and user trust.

C

Czechsporttravel.cz

czechsporttravel.cz

57

Czechsporttravel.cz is an online travel agency specializing in organizing travel packages and ticket sales for various sports events including football, hockey, tennis, Formula 1, and horse racing. The website targets sports enthusiasts primarily in the Czech Republic, offering a wide range of services such as air and bus travel packages, VIP tickets, sports camps, and concert tickets. The business appears to hold a niche market position with a medium-sized operation and consistent branding across its digital presence. Technically, the website employs a modern JavaScript technology stack including jQuery, various UI and carousel libraries, Google reCAPTCHA v3 for bot protection, and advanced analytics tools like Exponea and Google Tag Manager. The site is mobile optimized with good SEO practices and clear navigation, although accessibility features are basic. Performance is moderate, suitable for the content-rich nature of the site. From a security perspective, the site enforces HTTPS and uses bot mitigation and cookie consent mechanisms, indicating awareness of privacy and security requirements. However, it lacks some important security headers such as Content Security Policy, X-Frame-Options, and X-XSS-Protection, which could expose it to certain web vulnerabilities. No WHOIS data is available, likely due to privacy protection, which is common for commercial websites but limits domain trust analysis. Overall, the website is professional, trustworthy, and safe for general audiences. The main risks relate to missing security headers and absence of an explicit privacy policy page. Strategic improvements in these areas would enhance compliance and security posture.

P

Platon Technologies, s.r.o.

platon.net

62

Platon Technologies, s.r.o. is a Slovak-based technology company specializing in domain registration, web hosting, server infrastructure, SSL certificates, mass mailing, and CDN services. The company emphasizes fully managed services, owning its own data center and infrastructure, and guarantees high uptime. Their website reflects a professional and customer-focused approach with clear service offerings and contact channels. Technically, the site uses modern web technologies including jQuery, Bootstrap, FontAwesome, and Google reCAPTCHA v3 to secure forms. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and reCAPTCHA integration, but lacks some HTTP security headers and published security policies. WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, though the business information and contact details appear legitimate. Overall, the website is trustworthy and professionally maintained but could improve transparency and security documentation.

Município de Amarante operates as the official municipal government portal for the Amarante region in Portugal, providing a wide range of public services, news, cultural and tourism information, and citizen engagement tools. The website targets local residents, visitors, and investors, positioning itself as a trusted source of municipal information and services. Technically, the site is built on WordPress with modern JavaScript libraries and plugins, ensuring good mobile optimization, accessibility, and SEO compliance. Security posture is solid with HTTPS enforcement, security headers, and bot protection via Google reCAPTCHA, although explicit security policies and incident response information are absent. Overall, the site demonstrates a high level of professionalism and trustworthiness consistent with a government entity.

D

DMSB – Deutscher Motor Sport Bund e.V.

bahnsport-deutschland.de

57

Bahnsport Deutschland is the official website for the German motor sports federation's Bahnsport discipline, operated by the Deutscher Motor Sport Bund e.V. The site serves as a comprehensive information hub for enthusiasts, athletes, and clubs involved in motor sports in Germany, providing news, event schedules, results, and official documents. The website demonstrates a solid market position as a national governing body platform with a clear focus on accessibility and user experience. Technically, the site is built on TYPO3 CMS, employs modern web standards, and integrates accessibility tools to support diverse user needs. Security posture is strong with HTTPS enforcement, security headers, and bot protection via Google reCAPTCHA, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements could be made in transparency around security and vulnerability disclosures.

A

Asociace autoškol ČR, z.s.

asociaceautoskol.cz

47

Asociace autoškol ČR, z.s. is a Czech non-profit association dedicated to improving the quality and standards of driving schools and driver education in the Czech Republic. The organization provides educational seminars, develops innovative testing materials including hazard perception videos, and offers support services such as an ombudsman for driving schools and students. It maintains partnerships with government bodies and safety organizations, positioning itself as a key stakeholder in national driver education and road safety. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google services such as reCAPTCHA v3 and Google Analytics. The site is mobile-optimized with a good user experience and clear navigation. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements, although a formal privacy policy page is not found. From a security perspective, the site uses HTTPS and bot protection but lacks visible security headers and formal security policies. No critical vulnerabilities were detected in the content or scripts. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, but the professional presentation and official contact information mitigate concerns. Overall, the website is a credible and professional platform supporting a non-profit association with a clear mission in driver education. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance trust and compliance.

N

Natural.PT

natural.pt

56

Natural.PT is a Portuguese platform dedicated to promoting the country's protected natural areas, offering detailed information on pathways, places to stay, eat, and buy, as well as membership options for community engagement. The platform targets nature enthusiasts and tourists interested in sustainable exploration of Portugal's natural heritage. Technically, the website is a modern React single-page application utilizing Google Analytics, Google Tag Manager, and reCAPTCHA v3 for bot protection. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses reCAPTCHA, but lacks some security headers and explicit security policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, the website is trustworthy, professional, and serves its niche effectively.

C

Centro de Arbitragem de Conflitos de Consumo do Algarve (CIMAAL)

consumidoronline.pt

56

The Centro de Arbitragem de Conflitos de Consumo do Algarve (CIMAAL) operates as a regional consumer arbitration center in the Algarve region of Portugal, providing an accessible, low-cost, and efficient dispute resolution service between consumers and businesses. The website clearly targets local consumers and companies, offering information, complaint submission, and arbitration services under Portuguese law. The business model is public service-oriented, with strong ties to government and consumer protection entities, reinforcing its authoritative market position. Technically, the website is built on Joomla CMS with modern frontend frameworks like Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Integration of Google reCAPTCHA v3 and Google Analytics indicates a moderate level of digital maturity and user tracking, balanced with privacy compliance. The site is well-structured with multilingual support (Portuguese and English) and includes embedded data visualization via Power BI. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, with clear user consent mechanisms. Overall, the website presents a trustworthy and professional front for a government-related consumer arbitration service. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security posture and user trust.

C

Comité Olímpico de Portugal

comiteolimpicoportugal.pt

56

The Comité Olímpico de Portugal is the official Olympic Committee representing Portugal in Olympic sports. The organization focuses on athlete preparation, sports education, marketing, and promoting Olympic values nationally. The website reflects a medium-sized, government-affiliated non-profit entity with a strong national and international presence. Technically, the site is built on WordPress with Elementor and integrates modern web technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and bot protection, though some improvements in security headers and library updates are recommended. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

C

Centrum dopravního výzkumu, v. v. i.

kombinovanapreprava.cz

55

The website 'kombinovanapreprava.cz' represents the Centrum dopravního výzkumu, a research and informational center focused on continental combined transport. It provides transparent information, legislative guidance, and e-learning services with certification aimed at professionals and stakeholders in the transportation and logistics sectors. The site is built using modern web technologies including React, Gatsby, and Material UI, and incorporates Google reCAPTCHA v3 and Cookiebot for security and privacy compliance. The website is accessible without any WAF or security challenge blocking content. However, WHOIS data is unavailable, indicating privacy protection, which slightly reduces trustworthiness. The site lacks a visible privacy policy page and security.txt, which are recommended for compliance and security transparency.

M

Metodické centrum

metodickecentrum.cz

48

Metodické centrum is a Czech government-affiliated organization specializing in the preparation, coordination, and methodological guidance of therapeutic programs for drivers. It operates under the legal framework of Czech road traffic law and is part of the Centre for Transport Research. The website targets drivers required to attend these programs, lecturers, and related professionals, providing information, registration access, and educational resources. The site is professionally designed with clear navigation and good content relevance, supporting its official role. Technically, the website is built using modern technologies such as Gatsby and React, with Google reCAPTCHA v3 implemented for form security. The site is mobile-optimized and performs moderately well, though some accessibility improvements could be made. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published incident response policies. The WHOIS data is unavailable, which limits domain registration trust verification. However, the website's content, official references, and contact information strongly indicate legitimacy. No signs of blocking or WAF interference were detected, allowing full content analysis. Overall, the site demonstrates a solid security and privacy compliance posture appropriate for a government-related entity. Strategic recommendations include enhancing security headers, publishing security policies, improving accessibility, and establishing a vulnerability disclosure channel to further strengthen trust and compliance.

N

Nadační fond Proni

fondproni.cz

48

Nadační fond Proni is a Czech non-profit foundation dedicated to supporting families in childbirth and women's health in the Jihomoravský region. The organization focuses on building and supporting a modern gynecological and obstetric clinic, providing educational activities, and fundraising through donations. The website reflects a professional and consistent brand image with clear messaging targeted at women, families, healthcare professionals, and donors. Technically, the site employs modern web technologies including the Nette framework, jQuery, Google reCAPTCHA, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS and form protections, though the absence of explicit security headers and WHOIS data are notable gaps. Overall, the site is trustworthy and well-designed, but domain registration transparency should be improved to enhance credibility.

G

Gynekologicko-porodnická klinika Fakultní nemocnice Brno

gynporbrno.cz

44

The Gynekologicko-porodnická klinika Fakultní nemocnice Brno is a specialized healthcare provider focused on comprehensive gynecological and obstetric care within the Faculty Hospital Brno in the Czech Republic. The website presents a professional and well-structured digital presence highlighting multiple subspecialties and partnerships with related specialized centers. The target audience primarily consists of patients seeking expert women's health services. Technically, the site employs modern web technologies including jQuery, Nette Framework, and Google reCAPTCHA, ensuring a secure and interactive user experience. However, the absence of WHOIS data and privacy policy pages indicates areas for improvement in transparency and compliance. Security posture is solid with HTTPS and anti-bot measures but lacks some security headers and formal incident response information. Overall, the website is trustworthy and professional but would benefit from enhanced compliance documentation and security hardening.

P

Photon Energy Group

photonwater.com

48

Photon Water, a part of Photon Energy Group, offers specialized water treatment and environmental remediation solutions focusing on the removal of PFAS and other contaminants from water and soil. The company targets businesses and organizations requiring advanced water management technologies. The website presents a professional image with clear branding and relevant content, positioning itself as a niche player in the energy and environmental sectors. Technically, the website employs a modern JavaScript technology stack including Bootstrap, jQuery, and Google reCAPTCHA for bot protection. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices evident in meta tags and structured content. However, some accessibility features appear basic, and no CMS or hosting provider information is discernible. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, but lacks visible security headers and published privacy or security policies. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No contact information or incident response details are provided, limiting trust and compliance indicators. Overall, the website is functional and professional but would benefit from enhanced transparency, published policies, and improved security practices to strengthen trustworthiness and compliance posture.

The ABNT Coleção website serves as a digital platform managed by the Associação Brasileira de Normas Técnicas, providing centralized access to a wide range of technical standards from Brazil and other major countries. The platform targets businesses and professionals who require reliable and secure access to these standards, supporting compliance and technological advancement. The business model revolves around subscription-based access to these norms, positioning ABNT as a key national and international standards authority. Technically, the website is built on a mature ASP.NET WebForms framework with Telerik UI components, enhanced by modern libraries such as jQuery and Google reCAPTCHA v3 for security. While the technology stack is somewhat legacy, it is functional and integrates essential security features like HTTPS and bot protection. The site demonstrates moderate performance and basic mobile optimization, with room for improvements in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect login forms, but lacks explicit security headers and detailed security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture. Privacy compliance is basic, with cookie consent implemented and a privacy policy linked externally, though GDPR compliance is not explicitly confirmed. Overall, the website is professional, trustworthy, and aligned with its business purpose. Strategic recommendations include enhancing security headers, improving mobile and accessibility features, and publishing comprehensive security and incident response policies to strengthen trust and compliance.

A

Allio Group

allio-group.com

58

Allio Group is a European precision engineering company specializing in the design and manufacture of checking fixtures, tooling, prototypes, and models primarily for the automotive and aerospace industries. Established in 2006 with operations in Romania, France, and Portugal, the company serves major industrial clients with tailored manufacturing solutions. Their website reflects a professional and comprehensive presentation of their services and products, targeting B2B industrial customers. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA, with a GDPR-compliant cookie consent mechanism. Security posture is generally strong with HTTPS enforced and secure form handling, though some security headers and incident response policies are absent. The absence of WHOIS domain registration data is a notable concern, suggesting either privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, the website is well-structured, content-rich, and trustworthy from a business perspective, but would benefit from enhanced security transparency and WHOIS data verification.

V

Via Aurea s.r.o.

viaaurea.cz

54

Via Aurea s.r.o. is a Czech technology company specializing in web design, CMS, e-commerce solutions, hosting, and IT consulting services. The company targets businesses seeking professional digital solutions, including large portals and e-shops. Their market position is supported by a portfolio of notable clients and a focus on quality and comprehensive service delivery. Technically, the website employs modern JavaScript libraries, Google reCAPTCHA v3 for form security, and a custom CMS likely based on the Nette framework. The site is mobile optimized and uses standard SEO practices. Security posture is solid with HTTPS and anti-spam measures, though explicit security headers are missing. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional presentation and trust signals on the site.

F

Fakultní nemocnice Brno

preventivni-programy.cz

60

Fakultní nemocnice Brno operates a dedicated website for its preventive health programs, targeting a broad audience including families and individuals seeking early diagnosis and health maintenance. The hospital emphasizes personalized care and offers a variety of preventive services supported by experienced medical staff. The website is professionally designed with clear navigation and relevant content, reflecting a strong commitment to healthcare promotion. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google reCAPTCHA, and other libraries to ensure a responsive and interactive user experience. The site demonstrates good mobile optimization and basic accessibility features. Cookie consent and privacy compliance are well implemented, supporting GDPR requirements. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA to protect forms from spam. Cookie management is granular and transparent. However, explicit security headers and incident response information are not clearly present, representing areas for improvement. The absence of WHOIS registration data is a notable concern, though the website content and contact details strongly indicate legitimacy. Overall, the website presents a trustworthy and professional front for the hospital's preventive programs, with recommendations to enhance security policies, WHOIS transparency, and incident response disclosures to further strengthen trust and compliance.

C

Centrum reprodukční medicíny

cermedbrno.cz

44

Cermed is a specialized reproductive medicine center based in Brno, Czech Republic, offering fertility treatments, reproductive health protection, and donation programs for sperm and eggs. With over 40 years of experience and a strong market position, it serves couples and individuals seeking expert gynecological and fertility care. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Czech. Technically, it employs modern JavaScript libraries, Google Analytics, and reCAPTCHA for security and user experience. However, the absence of WHOIS data and security headers slightly reduces trustworthiness. Privacy compliance is well addressed with GDPR policies and cookie consent mechanisms. Overall, the site demonstrates a solid security posture but could improve transparency with explicit terms of service and incident response information.

B

Bea Awards

bea-awards.eu

50

BEA Awards is a niche event awards organization based in Belgium, focusing on recognizing excellence in the event industry. The website serves as a platform for event professionals to submit cases for awards, view past winners, and engage with partners. The site is primarily in Dutch with a French language option, targeting Belgian event stakeholders. The business model revolves around event organization and awards hosting, positioning itself as a specialized player in the Belgian event sector. Technically, the website is built on WordPress using the Blocksy theme and several popular plugins such as Yoast SEO, Jetpack, and Contact Form 7. It employs modern web technologies including Google reCAPTCHA v3 for bot protection and has a cookie consent mechanism in place. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the site benefits from HTTPS encryption and uses reCAPTCHA to secure forms. However, it lacks several security headers and does not provide publicly accessible security policies or incident response contacts. There is no vulnerability disclosure or security.txt file, which could improve transparency and trust. Privacy compliance is partial, with a cookie banner present but no dedicated privacy policy page found. Overall, the website is professional and functional with moderate security and privacy compliance. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance its security posture and trustworthiness.

Obec Viničné Šumice is a municipal government website serving the small community of Viničné Šumice in the Czech Republic. The site provides local news, official notices, contact information, and public service resources to residents and visitors. It positions itself as the authoritative source for municipal information and community engagement. The website is built on the IPO CMS platform and uses a technology stack including jQuery, jQuery UI, Google reCAPTCHA, and Google Fonts, indicating a moderately modern infrastructure with some legacy components. The site is mobile responsive and offers a clear navigation structure with good content relevance and professional presentation. Security posture is solid with HTTPS enforced and anti-bot measures in place, though it lacks some advanced security headers and formal policies such as a privacy policy or vulnerability disclosure. The absence of WHOIS data limits domain legitimacy verification, but the presence of official contact details and municipal branding supports trustworthiness. Overall, the website is functional, secure, and credible for its purpose, with room for improvement in privacy compliance and security best practices.

Obec Velatice is a small municipal government entity located near Brno, Czech Republic, providing local administrative services and community information to its approximately 765 residents. The website serves as an official portal for municipal announcements, financial documents, public notices, and local event information. It targets local citizens and visitors seeking information about the municipality. The site is professionally designed with consistent branding and clear navigation, supporting accessibility and mobile responsiveness. Technically, the website uses a combination of jQuery libraries, Google reCAPTCHA v3 for form security, and Matomo Analytics for privacy-conscious visitor tracking. It is built on the IPO CMS platform by Antee s.r.o., with HTTPS enforced ensuring secure communications. The site includes cookie consent mechanisms and a comprehensive privacy policy, reflecting good privacy compliance practices. From a security perspective, the site demonstrates solid fundamentals such as HTTPS and reCAPTCHA usage, but lacks explicit security headers and published incident response policies. The absence of WHOIS data for the domain reduces trustworthiness slightly, though the official contact details and government nature of the site mitigate concerns. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional municipal presence with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers and transparency around security policies would enhance its security posture further.

M

Městys Pozořice

pozorice.cz

55

The website pozorice.cz serves as the official online presence for the municipal government of Pozořice, Czech Republic. It provides residents and visitors with access to local government information, public notices, event calendars, and contact details for various municipal offices. The site is well-structured with clear navigation and a focus on community services, reflecting its role as a government portal. The domain's long registration history and consistent WHOIS data reinforce its legitimacy as an official municipal resource. Technically, the site employs a modern JavaScript stack including jQuery, Google reCAPTCHA, and cookie consent management, built on a Nette Framework-based CMS. While performance is moderate and mobile optimization is good, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS and spam protection, but lacks explicit security policies or incident response contacts. Privacy compliance is strong, with a clear GDPR policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

Obec Ostopovice operates as the official municipal government website for the village of Ostopovice in the Czech Republic. It provides residents and visitors with essential local government information, including administrative contacts, public notices, event calendars, and community services. The site targets local citizens and stakeholders interested in municipal affairs. Technically, the website employs a modern but straightforward technology stack including jQuery, Google reCAPTCHA, and Matomo analytics, running on the IPO CMS platform. The site is mobile responsive and includes basic accessibility features. Security posture is adequate with HTTPS enforced and use of CAPTCHA to protect forms, but lacks advanced security headers and published security policies. Privacy compliance is addressed with a cookie consent banner and a privacy/accessibility statement. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information align with a legitimate local government entity. Overall, the site is functional, trustworthy, and serves its community purpose effectively.

Obec Nebovidy is a small municipal government entity serving the Nebovidy community near Brno, Czech Republic. The website provides comprehensive local information including public notices, event calendars, and administrative contacts. It serves residents and visitors with relevant municipal services and community updates. The site is positioned as an official local government portal with a focus on transparency and community engagement. Technically, the website uses a mature technology stack including jQuery, jQuery UI, Google reCAPTCHA v3 for bot protection, and Matomo for privacy-conscious analytics. The site is built on the IPO CMS platform and hosted by antee.cz, showing moderate performance and good mobile responsiveness. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Cookie consent mechanisms are implemented in compliance with GDPR. However, there is no published security policy or incident response information, and security headers are not explicitly detected. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively supports the municipality's communication needs but could enhance its security posture by publishing dedicated security policies and improving HTTP security headers.

Obec Hostěnice is a municipal government website serving the small community of Hostěnice in the Brno-venkov district of the Czech Republic. The site provides local administrative information, public notices, event calendars, and community services. It targets residents and visitors interested in municipal affairs, local events, and public services. The website is well-structured and professionally presented, reflecting its role as an official government portal. Technically, the website uses a PHP-based CMS (IPO CMS by ANTEE s.r.o.) with a technology stack including jQuery, jQuery UI, Google reCAPTCHA, and Matomo analytics. The site is hosted on infrastructure associated with antee.cz and uses HTTPS with a good SSL configuration. Mobile optimization and accessibility are basic to good, with room for improvement in modernizing JavaScript libraries and enhancing accessibility features. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and integrates Google reCAPTCHA to protect forms. However, it lacks advanced security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie banner present but no explicit privacy policy page found. Contact information is complete and clearly presented, enhancing trust. Overall, the website is a trustworthy and legitimate municipal portal with good business credibility and moderate technical sophistication. Strategic improvements in security headers, privacy policy clarity, and technical modernization would enhance its security posture and compliance. The site is safe for general audiences and free from suspicious or adult content.

S

Sdružení Krajina

stopavkrajine.cz

45

Sdružení Krajina is a Czech non-profit organization dedicated to nature conservation and landscape management. Their website showcases various projects such as mowing wet meadows, restoring natural watercourses, and educational initiatives. The organization engages volunteers and local communities to preserve natural habitats. Technically, the website uses modern web technologies including Google Tag Manager, reCAPTCHA v3, Leaflet maps, and is likely powered by Perch CMS. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is used and reCAPTCHA protects forms, but explicit security headers and privacy policies are missing, indicating room for improvement. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits. Overall, the website is legitimate, informative, and safe, but could enhance compliance and security transparency.

V

Věčná loviště

vecnaloviste.cz

64

Věčná loviště is a Czech-based pet crematorium business established in 2008, offering comprehensive services including cremation, farewell ceremonies, animal transport, and euthanasia at home. The website is professionally designed using WordPress and integrates modern technologies such as Google Tag Manager and reCAPTCHA v3 for analytics and security. The business targets pet owners seeking dignified end-of-life services for their animals. The domain age and WHOIS data align well with the business claims, supporting legitimacy. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, although terms of service and incident response details are absent. Security posture is moderate with HTTPS enabled but lacks security headers and explicit security policies. Overall, the website presents a trustworthy and professional front for a niche service provider.

M

MilDef

mildef.com

72

MilDef Group AB is a well-established Swedish company founded in 2001, specializing in rugged IT solutions tailored for military, government, and critical infrastructure sectors. The company operates as a systems integrator providing a full spectrum of hardware, software, and services designed to withstand harsh environments and high-stakes operational contexts. Their market position is strong within defense and security domains, supported by a professional and content-rich website that clearly communicates their offerings and corporate identity. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and employs a comprehensive set of analytics and marketing tools including Google Analytics, HubSpot, and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security practices include HTTPS enforcement and use of Google reCAPTCHA, although DNSSEC is not enabled and some security headers appear to be missing. From a security posture perspective, the site demonstrates good practices but lacks explicit security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. The domain registration data is consistent with the business claims, showing a long-standing and legitimate presence. Overall, MilDef's website reflects a professional, trustworthy, and secure digital asset supporting their business objectives in a sensitive industry. Minor improvements in DNS security and explicit security disclosures could further enhance their security posture and trustworthiness.

M

Město Boskovice

boskovice.cz

62

The website www.boskovice.cz serves as the official digital presence of the city of Boskovice, Czech Republic. It provides comprehensive information about municipal governance, local news, projects, community services, and cultural events. The site targets residents, visitors, and stakeholders interested in city affairs and local development. It functions as a government portal offering transparency and engagement through features like newsletters, social media integration, and citizen participation projects such as BoskoVize. Technically, the site is built on the Vismo CMS platform, utilizing modern web technologies including Vue.js, Mustache.js, Google reCAPTCHA v3, and Google Tag Manager. The site is mobile-optimized, accessible, and employs HTTPS with a good SSL configuration. Cookie consent and privacy policies are implemented, reflecting compliance with GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and use of CAPTCHA for forms. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or suspicious content were detected. WHOIS data is unavailable, likely due to registry privacy policies, but the site’s official nature and content strongly support its legitimacy. Overall, the website is a well-maintained, trustworthy municipal portal with solid content quality and technical implementation. Strategic improvements in security headers and transparency around security policies could further enhance its posture.

A

AIRA Fitness s.r.o.

friendsfit.cz

10

Friends Fitness, operated by AIRA Fitness s.r.o., is a well-established fitness center in Brno, Czech Republic, founded in 2014. The company offers a broad range of fitness and wellness services including group classes, personal training, advanced fitness technologies, nutritional counseling, and wellness treatments. Their market position is that of a local fitness provider with a strong community focus and personalized service offerings. The website reflects a good level of digital maturity, utilizing modern JavaScript libraries and APIs such as Google Maps, FullCalendar, and reCAPTCHA for enhanced user experience and security. However, some SEO and privacy compliance aspects could be improved. Security posture is solid with HTTPS and spam protection, but lacks visible security headers and formal security policies. Overall, the business demonstrates credibility with clear contact information, customer testimonials, and active social media presence.

M

Město Letovice

letovice.net

59

The website letovice.net serves as the official municipal portal for the town of Letovice in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, news, events, and administrative procedures. The site is well-structured, targeting local citizens with services such as personal document information, fee payments, waste management, social services, and crisis management. The business model is that of a government service portal, focusing on transparency and citizen engagement. Technically, the website employs modern web technologies including Vue.js, Mustache.js, Google reCAPTCHA v3, and a proprietary CMS platform called Vismo. Hosting is provided by Webhouse.cz, and the site uses HTTPS with a good SSL configuration. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks DNSSEC for DNS security and does not appear to implement common security headers such as Content-Security-Policy or X-Frame-Options. Privacy compliance is basic, with a privacy and cookie policy present but no explicit GDPR-compliant consent mechanism. No incident response or vulnerability disclosure information is found. Overall, the website is trustworthy and professional, with a high legitimacy score based on WHOIS data and content consistency. Minor improvements in security headers, DNSSEC, and privacy compliance would enhance its security posture and user trust.

D

DISH Digital Solutions GmbH

hd.digital

59

DISH Digital Solutions GmbH operates a professional website offering SaaS digital solutions tailored for restaurants and food service businesses. The company provides tools for managing online reservations and orders, enabling restaurants to create their own websites and reduce dependency on third-party aggregators. With over 350,000 restaurants using their solutions, DISH holds a strong market position in the hospitality technology sector. The website content is well-structured, professionally designed, and targets restaurant owners seeking digital transformation. Technically, the website leverages modern technologies including Google Tag Manager, Google Analytics, Adobe Experience Platform Launch, and Usercentrics for consent management, built on a WordPress CMS. The site is mobile-optimized and integrates Google reCAPTCHA v3 for form security. SEO practices are implemented via Yoast SEO plugin, contributing to good search visibility. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection. No exposed sensitive data or vulnerabilities were detected. Privacy compliance is partial; while consent management is present, no explicit privacy or cookie policy pages were found. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website presents a low risk profile with strong business credibility and technical maturity. The lack of WHOIS transparency due to redacted data is common for this business type and does not raise immediate concerns. Strategic improvements in privacy documentation, security headers, and direct contact channels would further strengthen trust and compliance.

M

Město Chotěboř

chotebor.cz

55

The website chotebor.cz serves as the official online presence for the town of Chotěboř in the Czech Republic. It provides residents and visitors with comprehensive information about municipal services, local government officials, news updates, public tenders, and community events. The site targets local citizens and stakeholders seeking official information and services related to the town. The business model is that of a government service portal, focusing on transparency and public communication. The domain's long registration history since 1998 supports its legitimacy and established presence. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript frameworks like Vue.js, and server-side CMS technology (Vismo). It integrates Google reCAPTCHA v3 for form security and Google Translate for accessibility. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security practices include HTTPS enforcement and CSRF protection, but lack some advanced HTTP security headers and a published security policy. From a security perspective, the site demonstrates good baseline protections with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit incident response contacts and vulnerability disclosure mechanisms. Privacy compliance is partially met with privacy and cookie policies present, but no active cookie consent mechanism is implemented. Contact information is clearly provided, enhancing trust and credibility. Overall, chotebor.cz is a trustworthy, well-maintained municipal website with good content quality and technical implementation. Strategic improvements could focus on enhancing security headers, publishing security policies, and implementing cookie consent to strengthen GDPR compliance and user trust.

D

DS Stříbrné Terasy o. p. s

stribrneterasy.cz

57

DS Stříbrné Terasy o. p. s is a Czech non-profit social service provider focused on senior care and meal provision, primarily serving individuals aged 55 and above in the Jihlava region. The website offers detailed information about meal services, registration, and contact details, positioning itself as a trusted local community resource. The presence of virtual tours and regular news updates indicates active engagement with its audience. Technically, the website employs modern JavaScript frameworks including Vue.js and Mustache.js, and is built on the Vismo CMS platform, hosted by Active24. It uses HTTPS and Google reCAPTCHA v3 to secure user interactions, particularly form submissions. However, there is room for improvement in security headers and comprehensive privacy and security policies. Overall, the site is well-structured, accessible, and professionally presented, with a clear focus on its target audience.

P

Penta Hospitals

nemocnica-bory.sk

62

Nemocnica Bory is a modern healthcare facility located in Bratislava, Slovakia, providing both planned and acute medical care at a high European standard. It operates under the Penta Hospitals group, positioning itself as a leading hospital with specialized services including orthopedics, traumatology, gynecology, neurology, and robotic surgery. The hospital emphasizes comprehensive patient care fully covered by health insurance, targeting patients primarily in Slovakia. The website reflects a mature digital presence with multilingual support, structured data, and strong SEO practices.

D

DKO s.r.o.

dko.cz

47

DKO s.r.o. operates the DKO Jihlava website, serving as a cultural hub in Jihlava, Czech Republic. The company offers a variety of cultural events including concerts, theater performances, dance courses, and festivals, alongside venue rental services. The website targets a general audience interested in arts and culture within the region. The business model revolves around event hosting and ticket sales, positioning DKO as a key local cultural institution. Technically, the website employs modern JavaScript libraries such as Owl Carousel and integrates Google Analytics and Google reCAPTCHA v3 for analytics and spam protection. The site is mobile-optimized with good navigation and SEO practices, though no CMS or hosting provider details are evident. Performance is moderate with basic accessibility features. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks visible security headers and published security or incident response policies, which are areas for improvement. The absence of WHOIS data reduces domain transparency but does not necessarily indicate malicious intent given the professional website content and contact information. Overall, the website is well-structured and trustworthy for its cultural event purpose, but enhancing security policies and domain registration transparency would strengthen its risk profile and user trust.

The website greatspatownsofeurope.eu is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to prevent automated access. This indicates the presence of a Web Application Firewall (WAF) or similar bot protection mechanism, which blocks content access and prevents a full analysis of the website's business and security posture. The domain is registered with IONOS SE, a reputable registrar, but no detailed registrant or business information is publicly available. The website lacks visible privacy, cookie, or terms of service policies, and no contact information or business details are present on the accessible page. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA, but no other frameworks or CMS are detected. Security headers and SSL configuration details are not visible in the provided data. Overall, the site appears to be in a locked state, limiting the ability to assess its content quality, business credibility, and compliance.

A

Access-i

access-i.be

39

Access-i is a well-established platform founded in 2008 that provides comprehensive information on the accessibility of public places, events, bike circuits, and natural leisure spaces in Wallonia and Brussels. It serves a broad audience including people with specific accessibility needs and the general public interested in accessible locations. The platform offers certification services and acts as a trusted regional resource with strong partnerships and clear contact channels. Technically, the website is built on WordPress with modern plugins and multilingual support, hosted by OVH, and optimized for performance and accessibility. Security posture is solid with HTTPS, reCAPTCHA, and no exposed sensitive data, though some security headers could be improved. Privacy compliance is good with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and user-friendly.

Themesvila is a specialized digital marketplace focused on providing premium and free WordPress themes and plugins. Established in 2016, it caters primarily to WordPress users, digital agencies, and businesses seeking customizable website solutions. The platform offers a variety of products including themes for different industries and plugins to extend website functionality, supported by custom development and installation services. The website demonstrates a professional and user-friendly design with clear navigation and a focus on customer support and satisfaction.

Krajská správa a údržba silnic Karlovarského kraje is a regional government organization responsible for the maintenance and management of secondary and tertiary roads in the Karlovarský region of the Czech Republic. The organization manages over 1,800 km of roads, coordinates with contractors, and oversees investment planning and quality control of road works. It also administers funding from regional, state, and European sources. The website reflects a professional public sector entity with clear communication of services and contact information. Technically, the website employs a custom CMS platform developed by ANTEE s.r.o., utilizing jQuery, jQuery UI, Owl Carousel, Google reCAPTCHA v3, and Matomo analytics. The site is mobile responsive and includes accessibility and SEO optimizations, though some libraries like jQuery are outdated. Security practices include HTTPS enforcement and cookie consent mechanisms, but lack explicit security headers and published incident response policies. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in security headers and updating libraries. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. The absence of WHOIS data limits domain trust assessment, but the official nature and content of the site support legitimacy. Overall, the site is a well-maintained government resource with moderate technical maturity and good security hygiene. Strategic enhancements in security policies, technical updates, and transparency would further strengthen trust and compliance.

P

Packaging News / emap, Metropolis International Group Ltd

ukpackagingawards.co.uk

62

The UK Packaging Awards 2025 website serves as a professional platform for the UK's leading packaging industry awards event, celebrating two decades of innovation and excellence. The site targets packaging professionals, manufacturers, and sponsors, providing event details, finalist announcements, and opportunities for engagement. The business is positioned as a key industry player with a strong history and reputable backing by Metropolis International Group Ltd. Technically, the site leverages a modern event management platform (Evessio), integrates multiple analytics and marketing tools, and hosts assets on AWS S3, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and bot protection via reCAPTCHA, though some security headers could be improved. Privacy compliance is basic but present, with clear cookie consent and privacy policy pages. Overall, the site is trustworthy, well-branded, and professionally maintained, supporting its role as a flagship industry event.

E

emap Publishing Limited

environmentalpackagingawards.co.uk

62

Environmental Packaging Live 2025 is a UK-based event focused on sustainable packaging, organized by emap Publishing Limited. The event includes a summit, awards, and networking opportunities, targeting professionals and organizations in the packaging and sustainability sectors. The website is professionally designed, content-rich, and provides clear contact and event information. Technically, it uses a modern event management platform (Evessio) hosted on AWS, with multiple analytics and marketing integrations including Google Analytics, Adobe Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security posture is good with HTTPS, CSRF tokens, and reCAPTCHA, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant at a basic level. Overall, the site is trustworthy, well-maintained, and serves its business purpose effectively.

M

Město Kromeříž

kromeriz.eu

55

The website kromeriz.eu serves as the official tourism and cultural information portal for the city of Kroměříž in the Czech Republic. It provides comprehensive visitor information including historical sites, cultural events, travel tips, and practical details to support tourism and local engagement. The site targets a broad audience including families, seniors, cyclists, and school groups, positioning itself as a trusted and authoritative source for the region. The business model is informational and government-supported, focusing on promoting local tourism and culture. Technically, the site is built on WordPress 6.8.2 with popular plugins such as Yoast SEO, Contact Form 7, and Google Site Kit. It uses modern web technologies including Google reCAPTCHA v3 for form security, Google Maps API for location services, and jQuery libraries for UI enhancements. Hosting is provided by WEDOS Internet, a reputable Czech hosting provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and integrates reCAPTCHA to mitigate spam and abuse. However, it lacks visible security headers such as Content-Security-Policy or X-Frame-Options, which could enhance protection against common web attacks. No explicit privacy, cookie, or incident response policies are found, indicating potential compliance gaps with GDPR and related regulations. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, kromeriz.eu is a professionally maintained government tourism portal with solid business credibility and technical infrastructure. To improve, the site should publish clear privacy and cookie policies, implement additional security headers, and provide incident response information to strengthen trust and compliance. These steps will enhance the site's security posture and regulatory adherence while maintaining its role as a key regional tourism resource.

T

TT HOLDING, a.s.

ablakok-raktarrol.hu

46

The website ablakok-raktarrol.hu operates as an e-commerce platform specializing in the retail of plastic windows, balcony doors, and entrance doors primarily targeting Hungarian customers and the surrounding region. It is operated by TT HOLDING, a.s., a company with a strong regional presence and a significant inventory allowing for immediate delivery of common window and door sizes. The site offers a user-friendly custom configurator for bespoke products, enhancing customer engagement and service flexibility. The business model combines direct sales from stock with made-to-order products, catering to both individual consumers and professional builders. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google reCAPTCHA v3, and Smartsupp live chat, indicating a mature digital infrastructure focused on user experience and security. The site is mobile-optimized with good SEO practices and accessibility features, although some security headers could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, alongside a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response information are absent, which could be enhanced to improve transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and user-friendly platform with solid business credibility and compliance. Strategic improvements in security headers and transparency policies would further strengthen its posture and customer confidence.