Security Directory

O

OMG Czech Republic

omnicommediagroup.cz

59

OMG Czech Republic is a business entity operating under the domain omg.com with a dedicated Czech Republic page. The company presents itself as client-first, data-fueled, and people-powered, indicating a focus on consulting or technology services. The domain is well-established since 1998, supporting a credible business history. The website is built on WordPress using the Salient theme and includes common plugins such as Yoast SEO and Slider Revolution, reflecting a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, and no explicit contact information is provided, which may impact user trust and compliance. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, suggesting room for improvement in technical security controls. Overall, the website is accessible and safe for general audiences but requires enhancements in privacy compliance and security best practices to strengthen its risk profile.

N

Newton Media, a.s.

newtonmedia.cz

53

Newton Media, a.s. is a Czech Republic-based media monitoring and analysis company offering comprehensive media intelligence services including traditional and social media monitoring, podcast and YouTube monitoring, and global data access. The company targets businesses and brands seeking to understand and manage their media presence effectively. Their website is professionally designed using WordPress and Elementor, featuring multilingual support and integration with analytics tools such as Google Tag Manager and Smartlook. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data is noted but privacy protection is common and justified for such business domains. Overall, Newton Media presents as a credible and established player in the media monitoring industry in Central Europe.

P

Publicis Groupe

publicisgroupe.cz

68

Publicis Groupe Czech Republic is a major communications group specializing in integrated marketing services including creativity, media strategy, data, and technology. The website reflects a professional and consistent brand presence with active news updates and a clear market position as the third largest communications group globally. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager for analytics, and employs OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published privacy or terms policies. Overall, the domain registration data aligns well with the business identity, supporting legitimacy. The site is accessible without WAF or blocking mechanisms.

K

KNOWLIMITS Group a.s.

knowlimits.cz

48

KNOWLIMITS Group a.s. is the largest independent Czech communication group specializing in comprehensive marketing and media services. Their offerings span strategy, media planning, digital and social media, creative production, retail marketing, data research, PR, and events. The group operates across 15 European markets with a significant turnover, positioning itself as a major player in the regional media industry. The website reflects a professional and consistent brand image, targeting businesses seeking integrated communication solutions. Technically, the site is built on WordPress with Bootstrap and jQuery, supporting multilingual content via WPML and optimized for mobile devices. Google Tag Manager is used for analytics and marketing tracking, indicating a mature digital infrastructure. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal privacy/cookie policies, which are critical for compliance and trust. WHOIS data is unavailable, which raises concerns about domain registration transparency but does not detract from the professional presentation and business legitimacy evident on the site. Overall, the site is well-designed and functional but would benefit from enhanced security and privacy compliance measures.

I

IPG Mediabrands

ipgmediabrands.com

68

IPG Mediabrands is a global media and marketing agency network focused on delivering innovative advertising and media solutions to clients worldwide. The company positions itself as a forward-thinking organization that adapts to fast-moving consumer behaviors, offering award-winning agencies and services that drive growth. The website reflects a mature enterprise with a strong digital presence, including comprehensive privacy and cookie policies aligned with GDPR requirements. Technically, the site is built on WordPress with modern plugins and libraries such as Yoast SEO, Vimeo Player API, and Swiper.js, hosted likely on WPEngine, ensuring reliable performance and scalability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and explicit incident response policies. The absence of WHOIS data is a notable gap, possibly due to privacy protection, but the overall digital footprint and branding consistency support the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing security policies, and improving direct contact availability to strengthen trust and compliance.

I

Internet Info

iinfo.cz

62

Internet Info is a Czech media company specializing in providing high-value content related to IT and business sectors. The company offers expertise through its web portals, conferences, seminars, and professional magazines targeting IT professionals, CIOs, CEOs, financial directors, and senior managers. The website presents a professional and consistent brand image, positioning itself as a reputable source of industry knowledge and events in the Czech Republic. The business model revolves around content provision, event organization, and publishing specialized magazines, serving a medium-sized enterprise audience.

H

Havas Worldwide Prague a.s.

havas.cz

59

Havas Worldwide Prague a.s. is a well-established advertising and media agency based in the Czech Republic, founded in 2005. The company focuses on creating meaningful connections between brands and consumers through creativity, innovation, and media. The website reflects a professional and consistent brand image, targeting primarily businesses and marketing professionals. Technically, the site is built on WordPress with modern plugins and analytics tools, hosted via Gandi, and optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS, cookie consent, and bot management, though explicit security policies and incident response contacts are not published. Overall, the domain registration data supports the legitimacy and stability of the business.

E

Economia, a.s.

economia.cz

45

Economia, a.s. is a prominent Czech media company dedicated to delivering high-quality journalism and valuable content. The company operates multiple media titles including daily print and online products, complemented by advisory and marketing services. It holds a notable position in the Czech media landscape, evidenced by its Journalism Trust Initiative certification, reflecting its commitment to transparency and professional journalism. The website targets business owners, top management, public administration, and informed citizens interested in comprehensive public affairs coverage. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates advanced SEO and consent management tools, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs a robust consent management platform, though it lacks some advanced security headers and explicit security policies. Overall, the site is professional, GDPR compliant, and trustworthy, with clear contact information and social media presence. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

A

Active Radio a.s.

activegroup.cz

64

Active Radio a.s. is a prominent multimedia group in the Czech Republic, owning leading radio stations such as EVROPA 2 and Frekvence 1. The company operates a diverse portfolio of online media, streaming audio services, and event production, targeting a broad audience of radio listeners and digital media consumers. It is part of the larger Czech Media Invest holding, which enhances its market position and resource base. The website reflects a professional and comprehensive digital presence with clear business information and user engagement features. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates popular analytics and consent management platforms such as Google Analytics, Facebook SDK, and Didomi CMP. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made in security headers and incident response transparency. From a security perspective, the site uses HTTPS and implements GDPR-compliant privacy and cookie consent mechanisms, indicating a mature approach to data protection. The absence of WHOIS data reduces domain trustworthiness from a registration standpoint, but the website content and business details strongly support legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, Active Radio a.s. presents a strong business and digital profile with good security and privacy practices. Strategic improvements in security policy publication, vulnerability disclosure, and domain registration transparency would further enhance trust and compliance.

S

Sdružení pro internetový rozvoj v ČR (SPIR)

netmonitor.cz

59

SPIR (Sdružení pro internetový rozvoj v ČR) operates the NetMonitor project, a comprehensive internet traffic and sociodemographic research initiative in the Czech Republic. The project is executed by Gemius, a recognized analytics company, providing valuable data to media and advertisers. The website is professionally designed using WordPress and modern web technologies, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some HTTP security headers are missing. WHOIS data is unavailable, which slightly reduces domain trust but the detailed contact information and project transparency support legitimacy. Overall, the site serves as a reliable portal for internet measurement data in the Czech media sector.

S

Softmedia s.r.o.

softmedia.cz

58

Softmedia s.r.o. is a Czech-based small technology company specializing in WordPress website creation, management, and hosting services. Established in 2015, the company has built a solid reputation with over 500 websites developed and a strong 5-star customer rating. Their services include WordPress web development, e-shop creation, hosting, maintenance, and AI chatbot implementations, targeting businesses and individuals seeking professional web solutions. The website reflects a mature digital presence with professional design, clear navigation, and compliance with GDPR and cookie regulations. Technically, the site runs on WordPress with common plugins and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Smartlook, all activated with user consent. Security posture is good with HTTPS enforced, but some improvements are recommended in security headers and updating legacy libraries. Overall, the domain registration data aligns well with the website claims, indicating a trustworthy and legitimate business.

P

Pojizeří a Polabí - turistická oblast

pojizeriapolabi.cz

41

The website www.pojizeriapolabi.cz serves as an informational portal for the Pojizeří and Polabí tourist regions in the Czech Republic, highlighting attractions, accommodations, and cultural sites. The site targets tourists and visitors interested in exploring these areas. The technical infrastructure includes modern web technologies such as jQuery, GLightbox, Google Fonts, Font Awesome 6 Pro, and Google Analytics for visitor tracking. The site appears to be mobile-optimized with good design quality and navigation clarity. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership. Security posture is moderate, with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site provides useful regional tourism information but would benefit from enhanced security and compliance measures.

E

Eternal s.r.o.

eternal.cz

42

Eternal s.r.o. is a Czech technology company specializing in the development of mobile applications and web portals, with over 10 years of experience. The company serves a diverse clientele including municipalities, universities, and insurance companies, offering services such as mobile app development, interior navigation solutions, and data analysis. Their website reflects a professional and consistent brand image, targeting businesses and organizations seeking custom software solutions. Technically, the site is built on WordPress with Bootstrap and integrates modern tools like Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security measures include HTTPS enforcement and spam protection, though the absence of security headers and privacy policies suggests room for improvement. The missing WHOIS data introduces some uncertainty regarding domain legitimacy, but the overall business presentation and contact transparency support a credible profile. Strategic recommendations include enhancing compliance documentation, improving security headers, and verifying domain registration details to strengthen trust and security posture.

P

Pruh Polabí

pruhpolabi.cz

51

Pruh Polabí is a regional tourism and recreation website focused on the Polabí area in the Czech Republic. It provides visitors with information about local events, accommodations, dining options, and tourist attractions. The website targets tourists and visitors interested in exploring the region, offering a calendar of events and detailed local guides. The business operates as an information and promotional platform supporting regional tourism. Technically, the site is built on WordPress with common plugins such as Modern Events Calendar Lite, uses jQuery, and integrates Google Fonts and Font Awesome. The hosting and domain registration are consistent with Czech providers, and the domain age supports legitimacy. Security-wise, the site uses HTTPS but lacks important security headers and does not have visible privacy or cookie policies, indicating compliance gaps. Tracking is implemented via Google Analytics and Google Tag Manager, with moderate user tracking. Overall, the website is well designed and provides relevant content with good navigation and mobile optimization, but it should improve privacy compliance and security practices.

The website skolnibudovy.npmk.gov.cz is an official Czech government subdomain dedicated to a project by the National Pedagogical Museum and Library of J. A. Komenský. The project focuses on documenting the historical evolution of school buildings in the Czech Republic through community contributions and educational initiatives. The site targets educators, historians, students, and the general public interested in cultural heritage. It offers an interactive map and encourages public participation by submitting photographs and historical data. Technically, the site uses standard web technologies including Bootstrap, jQuery, and Google Analytics for tracking. The design is professional and mobile-optimized with clear navigation and relevant content. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. WHOIS data is unavailable, which reduces trustworthiness but the official government domain and content authenticity mitigate concerns. Overall, the site is a niche educational resource with good content quality and moderate technical maturity.

N

Národní pedagogické muzeum a knihovna J. A. Komenského

historiascholastica.com

58

Historia scholastica is a specialized international academic journal focused on the history of pedagogy and education, published biannually since 2015 by the National Pedagogical Museum and Library of J. A. Komenský in the Czech Republic. The journal operates under an open access model with Creative Commons licensing and is indexed in several reputable academic databases, establishing a strong niche market position within educational research. The website is built on Drupal 7 and hosted via Active24, with moderate performance and basic mobile and accessibility features. Google Analytics and Tag Manager are used for visitor tracking, but no visible cookie consent or privacy policies are present, indicating compliance gaps. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for improvement. Overall, the site is professional and trustworthy, but could benefit from enhanced privacy compliance and updated security practices.

N

Nadační fond P. Pittra a O. Fierzové

pitter.eu

51

The website 'Archiv Přemysla Pittra a Olgy Fierzové' serves as an archival and educational platform preserving the legacy of two notable humanists. It is managed by a foundation and affiliated with the National Pedagogical Museum and Library in the Czech Republic. The site targets researchers, students, and the general public interested in historical and pedagogical content. The business model is non-profit, focusing on archival preservation, research facilitation, and educational outreach. Technically, the site runs on Drupal 7 with standard web technologies and includes Google Analytics for visitor tracking. While the site is functional and content-rich, it lacks modern privacy and cookie policies and uses an outdated CMS version, which may pose security risks. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is trustworthy and professionally presented but would benefit from enhanced compliance and security measures.

A

Asociace muzeí a galerií České republiky, z. s.

cz-museums.cz

48

Asociace muzeí a galerií České republiky (AMG) is a prominent non-profit professional association dedicated to museums and galleries in the Czech Republic. It serves as the largest professional body in the museology sector, providing services such as promotion, education, event organization, and publishing. The website reflects a well-maintained digital presence with clear navigation and regularly updated content, targeting museum professionals and cultural institutions. Technically, the site employs modern JavaScript libraries and frameworks including jQuery, Bootstrap, and JSF, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks explicit security headers and privacy policies, which are recommended for enhanced compliance and protection. Overall, the website is trustworthy and professional, though improvements in privacy disclosures and security hardening would strengthen its posture.

S

STUDIO 6.15 s.r.o.

portmoneum.cz

53

Portmoneum.cz is the official website for the Museum Josefa Váchala, a cultural institution located in Litomyšl, Czechia. The museum showcases unique wall paintings by Josef Váchal and exhibitions dedicated to Josef Váchal, Josef Portman, and Ladislav Horáček, including videomapping presentations about Váchal's life and work. The website is professionally designed with good content quality and consistent branding, targeting a general audience interested in culture and art. The business operates as a small cultural museum with a niche market position in the hospitality and non-profit sectors. Technically, the website employs modern JavaScript libraries such as jQuery and lazysizes for lazy loading images, and uses JSON-LD structured data to enhance SEO and provide rich metadata about the business location and offerings. The site is hosted under a Czech registrar with consistent domain age and registration data, indicating a mature and legitimate online presence. Performance and mobile optimization are good, though accessibility features could be improved. From a security perspective, the site uses HTTPS and external libraries loaded asynchronously, but lacks explicit security headers and formal security or incident response policies. No privacy or cookie policies were found, which is a compliance gap. Analytics are implemented via Google Analytics and Google Tag Manager, indicating moderate user tracking. No forms or sensitive data exposure were detected in the provided content. Overall, the website is trustworthy and professionally maintained, but would benefit from enhanced privacy compliance, security headers, and incident response information to improve its security posture and regulatory adherence.

S

Sbírka Viléma Trmala

trmal.cz

34

The website www.trmal.cz is dedicated to the legacy and collection of Vilém Trmal, a Czech lawyer and antiquarian who co-founded the Český antikvariát ATA. It serves as a cultural and historical repository showcasing auctions, exhibitions, and publications related to Czech art and bibliofilia, particularly focusing on artists like Josef Váchal. The site targets collectors, art historians, and enthusiasts of Czech cultural heritage. Technically, the site uses standard web technologies including jQuery and Google Analytics, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks advanced security headers and visible privacy compliance measures. The absence of WHOIS data reduces domain trustworthiness, though the site content and presentation are professional and consistent with a legitimate cultural institution. Overall, the site is a valuable resource for its niche audience but would benefit from improved privacy and security transparency.

V

Výzkumný ústav vodohospodářský T. G. Masaryka, veřejná výzkumná instituce

vuv.cz

57

Výzkumný ústav vodohospodářský T. G. Masaryka (VÚV TGM) is a Czech public research institution specializing in water management, hydrology, and environmental protection. With over 100 years of history, it provides scientific research, laboratory services, consulting, and educational activities primarily targeting government agencies, researchers, and water management professionals. The website reflects a professional and well-maintained digital presence with active content updates and multimedia integration. Technically, the site is built on WordPress with modern plugins and libraries, including Smart Slider 3 and Google reCAPTCHA, ensuring usability and security. Security posture is strong with HTTPS and consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website's content and structure support its legitimacy. Privacy compliance is partially met with cookie consent but lacks a clear privacy policy page. Overall, the site is a credible and authoritative source in its domain.

S

Státní fond životního prostředí ČR

sfzp.cz

67

Státní fond životního prostředí ČR is a Czech government fund established in 1992 to support environmental projects through grants, loans, and financial instruments. The website serves as an official portal providing information on funding programs, news, events, and contact details. It targets Czech residents, municipalities, and organizations involved in environmental protection and energy efficiency. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Smart Slider 3. It implements HTTPS and security best practices, including cookie consent and privacy policies compliant with GDPR. However, the absence of WHOIS data and explicit security or incident response policies slightly reduces trustworthiness. Overall, the site is professional, well-structured, and trustworthy, serving as a key national resource for environmental funding in the Czech Republic.

N

Národní park Šumava

npsumava.cz

57

Národní park Šumava operates as the official authority managing the Šumava National Park and its protected landscape area in the Czech Republic. The website serves as a comprehensive information portal for visitors, environmental researchers, and the general public interested in the park's natural heritage, events, and conservation efforts. It offers resources such as visitor centers, ecological education, maps, webcams, and an e-shop. The site is positioned as a trusted governmental and non-profit entity in the environmental conservation sector within the Czech Republic. Technically, the website is built on WordPress using modern plugins like Elementor for design, WPML for multilingual support, and performance optimizations via WP Rocket. It integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook SDK, and OneSignal for push notifications. The site is mobile-optimized, accessible, and SEO-friendly, with appropriate meta tags and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and includes several security headers, indicating a good baseline security posture. Cookie consent mechanisms and privacy policies demonstrate GDPR compliance. However, the absence of WHOIS registration data and lack of explicit security policies or incident response contacts represent areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a professional and trustworthy digital presence for the Šumava National Park authority, with recommendations to enhance transparency around security policies and domain registration details to further strengthen trust and compliance.

F

FlexiSystems s.r.o.

flexisite.cz

41

FlexiSystems s.r.o. operates the website flexisite.cz, specializing in delivering modern, custom web projects and portals primarily targeting businesses requiring demanding web solutions with tailored design. The company positions itself as a niche provider focusing on quality and bespoke web development services. The website is built on an ASP.NET framework with modern JavaScript libraries such as jQuery and Slick Carousel, indicating a moderate level of digital maturity and technical infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS usage and no visible sensitive data exposure; however, the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security best practices. The WHOIS data is unavailable, which raises concerns about domain registration transparency, though the website content and contact information appear legitimate. Overall, the site scores well on business credibility and technical implementation but needs enhancements in privacy compliance and security policies to strengthen trust and regulatory adherence.

S

Svaz podnikatelů ve stínicí technice - SPST

svt-magazin.cz

61

The website www.svt-magazin.cz serves as a specialized industry magazine focused on shading and gate technology, operated by the Svaz podnikatelů ve stínicí technice (SPST), a professional association established in 2009. It provides news, articles, event calendars, and advertising opportunities targeted at both professionals and laypersons interested in this niche sector. The site maintains a professional and consistent brand presence with clear business information and GDPR compliance. Technically, the site is built on WordPress with common plugins for advertising, GDPR cookie management, and user interface enhancements. It uses HTTPS with good SSL configuration and includes structured data for SEO benefits. Performance is moderate with good mobile optimization and basic accessibility features. The site integrates Google Analytics for user tracking and SmartEmailing for newsletter management. From a security perspective, the site enforces HTTPS and cookie consent but lacks advanced security headers and explicit incident response or security policy disclosures. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data due to privacy protection slightly reduces trust but is consistent with a small professional publication. Overall, the website presents a low-risk profile with good privacy compliance and professional content. Strategic improvements in security headers and transparency around security policies would enhance its posture further.

V

VINSELEKT MICHLOVSKÝ a.s.

michlovsky.com

50

Vinselekt Michlovský a.s. is a well-established Czech winery with a history dating back to 1993, specializing in the production and sale of various wines including white, red, rosé, sparkling, and bio wines. The company operates an e-commerce platform allowing direct consumer purchases and provides wine tasting experiences. The website is professionally designed, mobile-optimized, and includes age verification to comply with alcohol sales regulations. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks some security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information suggest a legitimate business. Overall, the site presents a trustworthy and professional front but should address privacy and security policy transparency to enhance compliance and user trust.

The website www.kacr.cz represents the Komora Auditorů České Republiky, a professional self-regulatory organization established by Czech law to oversee the auditing profession. It serves auditors, accounting professionals, and members of the auditing community in the Czech Republic by providing services such as auditor registries, professional education, publications, conferences, and quality control. The site is well-branded and consistent with its government and professional positioning. Technically, the website employs modern JavaScript libraries including jQuery, jQuery UI, and Slick Carousel, and integrates Google Tag Manager and Google Analytics with a privacy-conscious default denial of tracking until consent is given. The site is mobile responsive, accessible, and SEO optimized, though it lacks some advanced security headers and a published privacy policy. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but does not expose security policies or incident response contacts. No vulnerabilities or sensitive data exposures were detected. The absence of WHOIS data limits domain trust assessment, but the professional presentation and clear contact details support legitimacy. Overall, the site is a credible and professional resource for the auditing community in the Czech Republic, with moderate technical maturity and good security posture. Recommendations include publishing a privacy policy, adding security headers, and clarifying domain registration details to enhance trust and compliance.

P

PKS okna

pksokna.cz

44

PKS okna is a traditional Czech manufacturer specializing in the production of plastic, wooden, wood-aluminum, and aluminum windows and doors. With over 34 years of experience, the company positions itself as a reliable and quality-focused supplier serving customers primarily in the Czech Republic. The business operates as part of the larger PKS group, which includes several subsidiaries and partner companies, enhancing its market presence and operational capabilities. The website reflects a professional and consistent brand image, providing comprehensive product information, customer service contacts, and showcases completed projects to build trust. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and PhotoSwipe, alongside Google Tag Manager and Analytics for tracking and marketing purposes. The site is mobile-optimized with good SEO practices and basic accessibility features. Privacy and cookie policies are implemented with consent management, reflecting awareness of GDPR requirements. However, no explicit security policies or incident response information is publicly available. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks visible security headers and formal vulnerability disclosure mechanisms. No WHOIS data is available for the domain, which raises concerns about domain registration transparency and slightly impacts trustworthiness. Overall, the security posture is moderate with room for improvement in policy transparency and technical hardening. The overall risk assessment is moderate-low, with the primary concern being the absence of WHOIS data and limited security policy disclosures. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to improve trust and compliance.

A

AHORN CZ, s.r.o.

ahorn.cz

50

AHORN CZ, s.r.o. is a Czech manufacturer specializing in high-quality bed slats, mattresses, beds, and sleep accessories. With over 28 years of market presence, the company offers a broad portfolio of products targeting both end consumers and B2B partners, including specialized furniture retailers and manufacturers in Central Europe. The website reflects a mature digital presence with detailed product catalogs, B2B portals, and active social media engagement. Technically, the site uses modern web technologies such as jQuery, Slick Slider, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers are not detected and no dedicated security or incident response policies are published. WHOIS data is unavailable, which slightly reduces trustworthiness but does not contradict the company's established business claims. Overall, the site is professional, trustworthy, and well-structured, serving its market effectively.

C

CENTRUM NÁBYTKU MAXI ORION, s.r.o.

maxiorion.cz

52

CENTRUM NÁBYTKU MAXI ORION, s.r.o. is a well-established Czech furniture retailer with over 20 years of experience, operating both a large physical store in Olomouc and an online e-commerce platform. The company specializes in a wide range of furniture including living rooms, kitchens, bedrooms, office furniture, and accessories, targeting local households and businesses. Their business model combines traditional retail with digital sales and customer support, offering services such as free 3D kitchen design and installment payment options. The website reflects a consistent brand presence and provides clear contact information and customer service channels. Technically, the website uses common web technologies including jQuery, Slick Carousel, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. The content is well organized and professionally presented, supporting a positive user experience. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks published security policies, incident response contacts, and security.txt files, which are recommended for improved transparency and vulnerability management. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website and business demonstrate a solid and trustworthy online presence with room for improvement in formal security documentation and enhanced accessibility. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

Tylex Letovice s.r.o.

tylex.cz

47

Tylex Letovice s.r.o. is a traditional Czech textile manufacturer with a history dating back to 1832. The company specializes in producing custom-made curtains, jacquard curtains, voiles, bed linen, and 3D knits, serving both retail consumers and B2B customers. Their market position is that of a well-established, quality-focused textile producer emphasizing Czech origin and craftsmanship. The website reflects a professional business with clear product offerings and a user-friendly interface. Technically, the website employs common web technologies such as jQuery and Google Analytics, with proper HTTPS encryption and consent management for tracking. The site is moderately optimized for performance and mobile devices, though some SEO and accessibility improvements are possible. No CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with privacy and cookie policies accessible. The absence of WHOIS data for the domain reduces trust in domain legitimacy, though the website content and business information appear credible. Overall, the website is safe, professional, and trustworthy for its intended audience, but domain registration transparency should be verified. Strategic improvements in security headers, incident response documentation, and enhanced privacy compliance would strengthen the security posture and trustworthiness.

P

P&F Company s.r.o.

pfcompany.cz

46

P&F Company s.r.o. is a Czech-based professional services company specializing in outsourcing solutions related to event management, car fleet management, and human resources resourcing. The company positions itself as a trusted partner offering senior expertise to improve business operations, targeting corporate clients requiring reliable outsourcing services. The website reflects a mature digital presence with a professional design, responsive layout, and clear navigation, supporting a positive user experience. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and PhotoSwipe, alongside Google Analytics for visitor tracking. The site is served over HTTPS with good SSL configuration, although explicit security headers are not detected. Cookie consent mechanisms are implemented, indicating awareness of privacy compliance, but a dedicated privacy policy page is missing. From a security perspective, the company demonstrates strong information security management through certifications like ISO 27001 and TISAX. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No critical vulnerabilities or exposed sensitive data were identified in the website content. Overall, the security posture is good but could be improved with enhanced security headers and published incident response contacts. The overall risk assessment suggests a generally trustworthy and professional business website with minor gaps in privacy documentation and domain registration transparency. Strategic recommendations include publishing a privacy policy, adding security headers, and providing clear contact information to enhance trust and compliance.

S

STAVOSPOL s. r. o.

stavospol.cz

47

STAVOSPOL s. r. o. is a Czech Republic-based company established in 1991 specializing in the retail and distribution of building materials and related services. The company operates a network of four stores in key Moravian cities, offering a comprehensive range of construction supplies and tools. Their website reflects a regional retail business with a focus on construction materials and customer service. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Carousel, uses HTTPS, and includes basic SEO and accessibility features. However, the absence of WHOIS data and explicit security headers suggests areas for improvement in transparency and security. The site includes privacy and cookie policies with consent mechanisms, indicating compliance with GDPR requirements. Overall, the business presents a professional online presence with clear contact information and social media engagement, but would benefit from enhanced security practices and domain registration transparency.

H

Habitat, a.s.

habitat-cz.cz

44

Habitat, a.s. is a Czech Republic-based retailer specializing in home textiles, flooring, garden furniture, and related products. The company operates both an online store and a physical retail location in Náměšť nad Oslavou, targeting general consumers seeking quality home decor and furnishings. Their product range includes carpets, beds, mattresses, and garden accessories, supported by a wholesale business segment. The website demonstrates a professional and consistent brand presence with clear contact information and social media engagement. Technically, the website employs a modern tech stack including jQuery, Modernizr, Google Fonts, and integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp. The site is mobile-optimized with good SEO practices and a cookie consent mechanism, indicating compliance with GDPR requirements. However, no explicit CMS or hosting provider information is discernible, and some security headers appear to be missing. From a security perspective, the site uses HTTPS and includes cookie consent, but lacks visible security headers and a vulnerability disclosure policy. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and contact details appear legitimate. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, Habitat's website is a well-structured and trustworthy retail platform with moderate technical maturity and good privacy compliance. The main risk lies in the opaque domain registration information, which should be addressed to enhance trustworthiness and security posture.

T

TRANS – TECHNIK spol. s r.o.

trans-technik.cz

44

TRANS – TECHNIK spol. s r.o. is a Czech-based supplier specializing in parts for truck bodies, fastening materials, riveting tools, adhesives, and industrial chemicals. The company targets B2B customers in the transportation and manufacturing sectors, offering a comprehensive product catalog and multilingual website support. Their market position appears stable within the Czech Republic and neighboring countries, supported by partner sites in Romania and Poland. The website is professionally designed with clear navigation and product categorization, supporting a good user experience.

Z

ZNOVÍN ZNOJMO, a. s.

znovin.cz

50

ZNOVÍN ZNOJMO, a. s. is a medium-sized Czech company specializing in the production and retail of traditional Moravian wines. The company operates a comprehensive e-commerce platform offering a wide range of wines, complemented by wine tourism services and loyalty programs. Their market position is that of an established regional wine producer with a focus on quality and customer engagement. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for wine consumers and tourists. Technically, the site uses modern JavaScript libraries and tracking tools, with good SEO and accessibility practices. Security posture is solid with HTTPS enforcement and age verification for alcohol sales, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with cookie consent and a privacy policy. Overall, the business demonstrates credibility and trustworthiness with clear contact information and social media presence.

T

Toyota European Union

toyota-europe.com

74

Toyota Motor Europe operates a comprehensive and professionally designed website serving as the primary digital presence for Toyota's automotive business across Europe. The site emphasizes Toyota's mission of delivering mobility and happiness through its products and services. It targets a broad European audience including consumers and business clients interested in Toyota vehicles, dealer locations, and financing options. The website is part of a larger ecosystem of localized Toyota sites across multiple European countries, reinforcing Toyota's strong market position in the transportation sector. Technically, the site leverages modern enterprise-grade technologies such as Adobe Experience Manager, Adobe Launch, and Datadog RUM for performance monitoring and analytics, ensuring a robust and scalable infrastructure. The use of privacy-conscious analytics and consent mechanisms indicates a mature approach to data privacy and compliance.

Č

Česká národní banka

cnb.cz

63

Česká národní banka (ČNB) is the central bank of the Czech Republic, serving as the primary authority for monetary policy, financial market supervision, issuance of currency, and crisis resolution. The website reflects its authoritative role with comprehensive information on monetary policy, financial stability, regulatory oversight, statistics, and public education. It targets a broad audience including the general public, financial institutions, media, and researchers. The business model is governmental and regulatory, positioning ČNB as a key institution in the Czech financial ecosystem. Technically, the website is built on the OpenCms platform, utilizing modern web technologies such as jQuery, Google Analytics, and Google reCAPTCHA Enterprise for security and analytics. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and bot protection, though explicit security headers could be more visible. The security evaluation shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is robust with detailed privacy and cookie policies, GDPR adherence, and user consent management. Business credibility is high, supported by clear contact information, official branding, and trust signals such as social media presence and legal disclosures. Overall, the website is a secure, professional, and trustworthy digital presence for the Czech National Bank, effectively supporting its mission and stakeholder engagement.

P

Property Xpress

htif.eu

45

The Hotel & Tourism Investment Forum (HTIF) website represents a professional event platform focused on the hospitality industry in Bulgaria, targeting hotel owners, investors, executives, and related professionals. It is positioned as the largest and most influential hospitality conference in Bulgaria and one of the most attended in Europe, offering detailed agendas and speaker profiles for its upcoming 2025 event. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. Hosting is provided by SuperHosting.BG Ltd., a reputable provider. Security posture is adequate with HTTPS enabled and Google Analytics tracking implemented with opt-out options; however, the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security best practices. Overall, the site is safe, professional, and trustworthy but should enhance privacy compliance and security configurations.

W

William H. Coleman, Inc.

cancuntravelmart.com

45

Cancun Travel Mart is a well-established tourism event organizer specializing in connecting international tour operators and buyers with suppliers from Cancun and other Mexican destinations. Managed by William H. Coleman, Inc., the event has a strong market position as a premier Mexican Caribbean tourism business development platform with over three decades of history. The website reflects a professional digital presence built on WordPress with Elementor, featuring good design quality, clear navigation, and mobile optimization. However, it lacks critical privacy and cookie policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal security policies. Contact information is comprehensive and transparent, enhancing business credibility.

O

Obec Občov

obecobcov.cz

52

Obec Občov operates an official municipal website serving the local community of Občov in the Czech Republic. The site provides comprehensive information about the municipality, including official notices, local government activities, practical information, crisis management, and contact details. It targets residents and visitors seeking authoritative local information. The business model is typical for a small government entity focused on public service and community engagement. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

O

Obec Bitozeves

bitozeves.cz

48

Obec Bitozeves operates an official municipal website serving the local community of Bitozeves and its surrounding villages in the Czech Republic. The site provides comprehensive information about local government activities, public notices, events, and contact details. It targets residents and visitors seeking municipal services and updates. The business model is that of a government information portal, focusing on transparency and community engagement. Technically, the website employs a custom CMS platform likely provided by Galileo Corporation, utilizing modern JavaScript libraries such as jQuery, Bootstrap, Swiper.js, and PhotoSwipe for interactive and responsive design. The site is mobile optimized and features a cookie consent mechanism, indicating some level of privacy compliance. However, the absence of a dedicated privacy policy page and security headers suggests room for improvement in security and compliance. From a security perspective, the site uses HTTPS but lacks visible security headers and a vulnerability disclosure policy. No WHOIS data is available, which reduces domain trustworthiness, though the website content and official contact information support legitimacy. There are no signs of malware, phishing, or adult content, and the site maintains a safe content rating. Overall, the website is functional, professional, and trustworthy for its intended purpose but would benefit from enhanced security practices, explicit privacy documentation, and improved WHOIS transparency to strengthen its credibility and compliance posture.

M

Město Police nad Metují

policenm.cz

50

Město Police nad Metují operates an official municipal website serving the residents and visitors of Police nad Metují in the Czech Republic. The site provides comprehensive information about local government operations, social services, cultural events, tourism, public tenders, and administrative forms. It targets local citizens and tourists seeking official and practical information about the city. The business model is that of a government entity providing public services and transparency through digital channels. Technically, the website employs a mix of established JavaScript libraries including jQuery, Bootstrap, Swiper, and others, indicating a moderately modern and maintainable infrastructure. The site is mobile-optimized with a clear navigation structure and uses cookie consent mechanisms to comply with privacy regulations. However, the CMS appears custom or proprietary, and no major analytics or tracking tools are detected, reflecting a privacy-conscious approach. From a security perspective, HTTPS is enforced, and cookie consent is implemented, but no explicit security headers were detected in the provided data. The absence of WHOIS registration data is a concern for domain legitimacy, though the website content and structure strongly support its authenticity as an official municipal site. No vulnerabilities or security incidents were observed, and the site does not engage in advertising or extensive user tracking. Overall, the website presents a trustworthy and professional digital presence for the municipality, with room for improvement in security header implementation and domain registration transparency. Strategic recommendations include enhancing security headers, verifying domain registration details, and publishing explicit security and incident response policies to further strengthen trust and compliance.

P

Pěšky městem, z. s.

peskymestem.cz

50

Pěšky městem is a Czech non-profit organization dedicated to making cities safer and more pleasant for pedestrians, advocating walking as the best mode of transport for short distances. The organization runs various projects focused on school safety, urban mobility, and sustainable transport, supported by educational campaigns and events. Their website reflects a professional and consistent brand image, with comprehensive content and clear calls to action for community involvement and donations. Technically, the site is built on WordPress with modern plugins and tools, including GDPR compliance and analytics integrations, hosted by a Czech hosting provider. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

Č

České vysoké učení technické v Praze

cvut.cz

64

České vysoké učení technické v Praze (ČVUT) is a large, well-established technical university in the Czech Republic, recognized as one of the oldest and largest technical universities in Europe. The institution provides a broad range of higher education programs including bachelor, master, and doctoral studies, alongside active research and lifelong learning services. The website targets students, researchers, academic staff, and the general public interested in technical education and research. The business model is that of a public university focused on education and research services.

N

NOHO a. s.

noho.cz

66

NOHO a. s. is a Czech-based family-owned real estate developer focused on creating sustainable housing and renewable energy projects, primarily in Hradec Králové. The company positions itself as an innovator in community energy and sustainable urban development, with multiple award-winning projects such as Cihlovka 1 and 2 and the Kukleny neighborhood. Their business model integrates real estate development with community and energy solutions, targeting environmentally conscious residents and stakeholders. Technically, the website is built on Webflow with modern JavaScript libraries and analytics tools, providing a fast, mobile-optimized, and accessible user experience. Security posture is good with HTTPS and cookie consent mechanisms, though security headers could be improved. The absence of WHOIS data is a concern for domain transparency but does not currently detract from the website's professional presentation and trustworthiness. Overall, NOHO demonstrates a mature digital presence aligned with its business goals.

A

artEcho, s.r.o.

earch.cz

48

EARCH.cz is a Czech online magazine focused on architecture, design, and technology, operated by artEcho, s.r.o. The website offers a rich variety of content including articles, videos (EARCH.tv), job listings, and a catalog of firms and products related to the architecture industry. It maintains partnerships with several industry players, enhancing its market position as a reputable media outlet in the Czech Republic. The site targets architects, designers, and enthusiasts interested in modern architecture and related technologies. Technically, the website employs a modern technology stack including Laravel Livewire, Google Tag Manager, Google Adsense, and Plausible Analytics. The site is mobile-optimized with good SEO practices and moderate performance. However, some security headers are missing, and there is no visible cookie consent mechanism, which could be improved for better privacy compliance. From a security perspective, the site uses HTTPS with CSRF protection on forms, but lacks published security policies, incident response contacts, or vulnerability disclosure information. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security headers, explicit privacy and cookie consent mechanisms, and transparency in domain registration. Strategic improvements in these areas would strengthen its security posture and compliance with GDPR requirements.

V

Via Aurea, s.r.o.

cityone.cz

49

CityOne is a Czech Republic-based platform operated by Via Aurea, s.r.o., focused on smart city solutions, projects, and expert networking. The website serves as a marketplace and information hub for smart city initiatives, covering sectors such as energy, transportation, ICT, and public services. It targets municipalities, urban planners, technology providers, and citizens interested in smart city development. The platform offers project showcases, product listings, expert profiles, news articles, and event calendars, facilitating collaboration and knowledge sharing in the smart city ecosystem. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, Google reCAPTCHA, and Google Maps API. The site is mobile-optimized with good navigation and content structure, though it appears to use a custom or proprietary CMS. Performance is moderate, and accessibility features are basic. Security best practices such as HTTPS and cookie consent mechanisms are implemented, but security headers are not detected, indicating room for improvement. From a security perspective, the site shows a good posture with encrypted connections and form protections via reCAPTCHA. However, the absence of WHOIS registrant data and lack of explicit privacy and security policies reduce overall trust. No vulnerabilities or malicious content were detected. Privacy compliance is partially addressed through cookie consent, but no dedicated privacy policy page was found. Overall, CityOne presents a professional and trustworthy platform for smart city stakeholders, but it would benefit from enhanced transparency in domain registration, explicit privacy and security policies, and improved security header implementation to strengthen its security posture and compliance.

S

Správa železnic, státní organizace

spravazeleznic.cz

60

Správa železnic is a Czech state organization responsible for managing the national railway infrastructure. The website serves multiple audiences including passengers, suppliers, contractors, and job seekers, providing comprehensive information about projects, services, and organizational structure. The site is well-structured with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the website is built on the Liferay CMS platform and utilizes modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a focus on user engagement and data-driven insights. The site is mobile-optimized and performs moderately well. From a security perspective, the site enforces HTTPS and includes privacy and cookie policies compliant with GDPR. However, no explicit security headers were detected in the provided data, and no vulnerability disclosure or security.txt files were found. The absence of WHOIS data limits domain trust verification, but the official nature and content quality suggest legitimacy. Overall, the website presents a professional and trustworthy digital front for a major government transportation entity, with room for improvement in security header implementation and domain registration transparency.