Security Directory

LINAK is a prominent manufacturer specializing in electric linear actuator systems, serving diverse sectors including healthcare, industrial, agricultural, and office furniture markets. The company positions itself as a global leader with a comprehensive product portfolio ranging from linear actuators to digital solutions, emphasizing innovation and quality. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, targeting industrial clients and healthcare providers primarily in the Czech Republic and globally through related domains. Technically, the website employs modern web technologies such as AngularJS, Google Tag Manager, and Cookiebot for consent management, ensuring compliance with privacy regulations. The site is well-optimized for mobile devices and accessibility, with HTTPS enforced and no evident security vulnerabilities in the content. However, the absence of security headers and a formal security policy or incident response contact indicates areas for improvement in security posture. From a security perspective, the site demonstrates good practices including encrypted connections and cookie consent mechanisms, but lacks explicit incident response and vulnerability disclosure information. The WHOIS data is unavailable, which raises concerns about domain registration transparency and legitimacy verification. Despite this, the professional content, clear business information, and active social media presence support the site's credibility. Overall, the website is a reliable and professional platform representing a large manufacturing entity with strong privacy compliance and good technical implementation. Strategic enhancements in security policies and WHOIS transparency would further strengthen trust and security assurance.

H

Hilding Anders

hildinganders.com

66

Hilding Anders is a large healthcare-focused company specializing in sleep products and services, with a strong presence across Europe, Russia, and Asia. The website is professionally designed using Squarespace and demonstrates good content quality and branding consistency. The company positions itself as a global leader in sleep products, serving a broad audience with a diverse brand portfolio. Technically, the website uses modern web technologies and includes analytics and cookie consent mechanisms, though some advanced security headers are missing. The security posture is adequate but could be improved by implementing HSTS and CSP headers. Privacy compliance is basic, with no explicit privacy policy or terms of service pages detected. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy disclosures.

D

DEKOR STUDIO PRAHA

dekorstudiopraha.cz

48

DEKOR STUDIO PRAHA is a small local business specializing in interior design with a focus on custom curtains, drapes, upholstery, and wallpaper services. The website presents a professional image with clear descriptions of services and a target audience of consumers seeking tailored interior textile solutions in Prague. The technical infrastructure is based on WordPress with common web technologies such as jQuery and Bootstrap, and integrates Google Analytics and Facebook Pixel for analytics and marketing purposes. Cookie consent is implemented comprehensively, reflecting awareness of privacy regulations. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS data, limit the overall trust and compliance posture. Security practices include HTTPS but lack security headers and formal vulnerability disclosure mechanisms. Overall, the site is accessible and functional but would benefit from enhanced transparency and security improvements.

Bid Corporation Limited (Bidcorp) is a large international foodservice group listed on the Johannesburg Stock Exchange (JSE). The company operates across five continents, providing frozen and chilled food products and related services to the catering and hospitality sectors. Their business model emphasizes autonomous regional operations with local branding, supported by value-add processing, efficient warehousing, and a market-leading ecommerce platform. The website reflects a professional corporate presence with comprehensive investor relations and ESG reporting. Technically, the site uses modern JavaScript libraries, Google Analytics, and Cookiebot for consent management, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

N

Nolato

nolato.com

65

Nolato is a global advanced high-tech solutions provider specializing in polymer-based product development and manufacturing. Their services span from concept development and product design to high-volume production, assembly, and logistics, targeting industries such as medical devices, pharma, automotive, and consumer electronics. The company positions itself as a strategic partner working closely with customers to deliver cost-effective and manufacturable polymer solutions. Technically, the website employs modern frontend technologies including Bootstrap, Google Tag Manager, Cookiebot for cookie consent management, and Google reCAPTCHA for form security. The site is well-optimized for mobile devices and includes comprehensive cookie consent mechanisms aligned with GDPR requirements. Analytics and marketing tools such as Google Analytics and Facebook pixels are used with transparency. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses reCAPTCHA to protect forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no public security policy or incident response information is available. The absence of WHOIS data for the domain is a concern and warrants further investigation to confirm domain registration legitimacy. Overall, the website presents a professional and trustworthy front with good privacy compliance and technical implementation. The main risk lies in the missing WHOIS data and lack of explicit security policies, which should be addressed to enhance trust and security posture.

K

Krannich Solar International

krannich-solar.com

63

Krannich Solar International is a well-established global distributor and retailer of solar energy products, operating since 2004 with a strong international presence across multiple continents. Their business model focuses on B2B and B2C sales through localized websites and online shops, targeting solar energy professionals and customers worldwide. The website is professionally designed, consistent in branding, and provides clear navigation to regional sites, reflecting a mature digital presence. Technically, the website is built on TYPO3 CMS, a robust and secure content management system. It integrates modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and security headers are not evident, indicating room for improvement. There is no public security policy or incident response contact information, and no vulnerability disclosure mechanism is found. Privacy compliance is supported by a cookie consent mechanism, but no explicit privacy policy was detected on the analyzed page. Overall, the website presents a low-risk profile with strong business credibility and a good technical foundation. Strategic improvements in security headers, DNSSEC, and transparency around privacy and security policies would enhance trust and compliance.

T

TANATEX Chemicals

tanatexchemicals.com

60

TANATEX Chemicals is a well-established global specialist in textile chemicals, focusing on innovation and sustainability within the textile manufacturing industry. The company offers a range of products and services including textile chemical development, lab services, hangtags, and toll manufacturing. Their market position is strengthened by a 60-year history and certifications such as BlueSign and Roadmap to Zero, indicating commitment to sustainable practices. The website reflects a professional B2B business model targeting textile industry professionals such as brands, dyehouses, and mills. Technically, the website is built on a modern stack including Laravel backend, Alpine.js frontend, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, with good performance. However, some security headers are missing, and no explicit security or incident response policies are published. Security posture is solid with HTTPS enforced, CSRF protection on forms, and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with clear privacy and cookie policies and GDPR indicators. Business credibility is high with clear contact details, professional content, and trust signals. Overall, the website presents a low risk profile with strong business credibility and good technical implementation. Strategic improvements include adding security headers, publishing a security policy, and establishing a vulnerability disclosure process to further enhance trust and security posture.

M

Magazín POSITIV

positiv.cz

65

Magazín POSITIV is an online Czech media magazine focused on business and style content, operating since 2017. The website targets a general Czech audience with editorial content and uses a WordPress CMS platform with the Newspaper theme. The site integrates modern digital marketing and analytics tools such as Google Tag Manager, Google Adsense, and Cookiebot for cookie consent management. The technical infrastructure is typical for a small to medium-sized media outlet, hosted likely via Czech hosting providers associated with the registrar REG-INTERNET-CZ and Forpsi name servers. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published privacy or terms of service documents. No blocking or WAF mechanisms interfere with content access, and no suspicious WHOIS or domain registration anomalies were found, supporting the site's legitimacy.

B

BEWIT

bewit.love

57

BEWIT is a small retail business specializing in the manufacture and supply of essential oils, cosmetics, and dietary supplements with a focus on natural products containing 0% synthetics. The company has established a niche market presence since its domain registration in 2015 and targets a general audience interested in therapeutic-grade natural products. The website demonstrates a good level of digital maturity with modern technologies such as Google Fonts, Tiny Slider, Cookiebot for consent management, and Google Tag Manager for analytics. Payment processing is handled by reputable partners Klarna and Stripe, enhancing trust and security for customers. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the absence of terms of service and explicit security policies indicates areas for legal and security enhancement. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

T

Tatry mountain resorts, a.s.

skiareal.cz

55

Špindlerův Mlýn is a prominent ski resort in the Czech Republic, operated by Tatry mountain resorts, a.s., offering extensive winter and summer tourism services including skiing, accommodation, ski school, and events. The website is well-structured, professionally designed, and provides comprehensive information and online services such as skipass purchasing via GOPASS. Technically, the site uses TYPO3 CMS with modern JavaScript libraries and integrates cookie consent and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site presents a trustworthy and professional digital presence for a large hospitality business.

L

LogiNet

loginet.hu

60

LogiNet is a Hungarian technology company specializing in e-commerce systems, webshop development, mobile application creation, and custom software development. Positioned as a professional service provider, LogiNet targets businesses requiring tailored e-commerce and digital solutions. The website reflects a mature digital presence with good SEO practices, mobile optimization, and integration of modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Cookiebot for consent management. Security-wise, the site enforces HTTPS and employs reCAPTCHA to mitigate bot traffic, though explicit security headers and policies are not prominently published. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site demonstrates a solid technical and business foundation with room for enhanced security transparency and contact information clarity.

T

TUI Poland Sp. z o.o.

tui.cz

66

TUI Poland Sp. z o.o. operates the website www.tui.cz as a leading travel agency offering a wide range of all inclusive and last minute vacation packages, tours, and charter flights to popular destinations worldwide. The company positions itself as the number one travel agency in Europe, targeting general consumers seeking organized travel experiences. The website is professionally designed with good content quality and consistent branding, supported by official social media channels and a clear customer service contact number. Technically, the website leverages modern web technologies including React and Next.js frameworks, with integrations for Cookiebot for cookie consent management, Google Analytics, and Hotjar for analytics and user behavior tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. Performance is moderate, with a comprehensive set of meta tags and structured data enhancing search engine visibility. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. Cookie consent mechanisms are implemented in compliance with GDPR, and privacy policies are comprehensive and accessible. However, the absence of WHOIS data and lack of explicit security policy or incident response information represent gaps in transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance. Improving accessibility and adding a terms of service page would further strengthen the user experience and legal posture.

L

Lesy České republiky, s.p.

vracimevodulesu.cz

68

The website 'Vracíme vodu lesu' represents a large-scale governmental forestry and environmental conservation program managed by Lesy České republiky, s.p. It focuses on water retention and revitalization of small watercourses across the Czech Republic, positioning itself as the largest program in the history of Czech forestry. The site targets the general public and stakeholders interested in environmental sustainability and forestry management. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations such as Cookiebot for cookie consent, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with visible cookie consent and a comprehensive privacy policy. Overall, the website demonstrates a mature digital presence with a strong focus on compliance and user trust.

L

Lesy ČR

klubnoveholesa.cz

69

Klub nového lesa is a community engagement platform operated under the auspices of Lesy ČR, the Czech Republic's national forestry organization. It focuses on organizing outdoor events related to forest renewal, environmental education, and public participation. The website provides event information, a mobile app for registration and rewards, and an e-shop for merchandise. The target audience includes nature enthusiasts, families, and volunteers interested in forestry and environmental stewardship. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Cookiebot for consent management, and Google Maps API for interactive maps. The site is mobile optimized and uses HTTPS, ensuring secure communication. Security posture is solid with cookie consent and CSRF protections, though some security headers could be improved. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR adherence. The WHOIS data is privacy protected, which is common and justified for this type of organization. Overall, the website is professional, trustworthy, and serves its community-oriented mission effectively.

4

42 Angoulême

42angouleme.fr

64

42 Angoulême is a free IT training school based in Charente, France, offering coding education accessible to all without diploma requirements. The website positions itself as a local educational institution with a clear mission to democratize coding skills. The business model is non-commercial, focusing on free education, targeting a broad audience interested in learning programming. The site is professionally designed with consistent branding and good content quality, reflecting the institution's educational purpose. Technically, the website is built on WordPress, leveraging common web technologies such as jQuery, Google Analytics, and Cookiebot for privacy compliance. Hosting and domain registration are managed by reputable providers (GANDI and Cloudflare DNS). The site demonstrates moderate performance and good mobile optimization, with SEO and accessibility features at a basic to good level. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no security policy or incident response contacts are published. No vulnerabilities or suspicious content were detected, indicating a generally secure posture suitable for its educational purpose. Overall, 42 Angoulême presents a trustworthy and professional online presence for a small educational institution. Strategic improvements in security headers, publishing security policies, and providing clear contact information would enhance trust and compliance further.

H

Hive Helsinki

hive.fi

56

Hive Helsinki operates as a tuition-free coding school based in Finland, focusing on project-based and peer learning methodologies to equip individuals with coding skills for future-proof careers. The institution targets learners with no prior experience, emphasizing accessibility and practical skill development. The website reflects a well-structured, professionally designed platform with clear branding and consistent messaging aligned with its educational mission. Technically, the site is built on WordPress, leveraging modern SEO tools like Yoast SEO, and integrates analytics and consent management via Google Analytics, Google Tag Manager, and Cookiebot, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. Overall, the domain registration data aligns with the website's claims, supporting legitimacy and trustworthiness. Strategic recommendations include publishing detailed security and incident response policies and enhancing transparency around data protection roles.

P

protel systems s.r.o.

protel-air.cz

59

Protel Systems s.r.o. operates a professional hotel management software platform targeting Czech and Slovak hotel businesses. Their website showcases a comprehensive suite of hotel management tools including PMS, payment solutions, online check-in/out, digital reception, and more. The company holds certifications such as Best Western and features testimonials from reputable clients, indicating a strong market position in the hospitality technology sector. Technically, the website is built on the Solidpixels CMS platform, uses modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance, and is well optimized for mobile devices. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though the absence of a published security policy and incident response contact reduces transparency. The lack of WHOIS data is a notable concern for domain legitimacy, but the professional presentation and business information mitigate some risk. Overall, the site is trustworthy, business-focused, and compliant with GDPR requirements.

C

Coinmate s.r.o

powercar.cz

66

Coinmate s.r.o operates a well-established European cryptocurrency exchange platform, primarily serving customers in Czechia and Slovakia. Founded in 2013, the company offers a range of services including quick cryptocurrency purchases, automated recurring buys, a professional trading platform with charts and indicators, and API access for trading bots. The platform uniquely supports markets in both EUR and CZK, positioning itself as a leading Czech crypto exchange with a strong regional presence. The website is professionally designed, mobile-optimized, and integrates modern tracking and consent management technologies.

F

FlexOffers.com

flexoffers.com

67

FlexOffers.com operates as a large-scale affiliate marketing network specializing in performance-based marketing. The company connects over 12,000 advertisers with more than 75,000 publisher programs across 65 networks, providing a comprehensive platform for digital marketing partnerships. Their business model focuses on enabling advertisers and publishers to collaborate efficiently under one roof, offering tools such as APIs, real-time reporting, and fast payouts. The website content and branding reflect a professional and established market position within the affiliate marketing industry. Technically, the website is built on WordPress using the Kadence theme and Elementor page builder, integrating modern web technologies including Bootstrap 5, jQuery, and Google Tag Manager. The site demonstrates good mobile optimization, SEO practices, and uses Cookiebot for cookie consent management, indicating a moderate level of digital maturity and compliance awareness. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks visible security headers and explicit privacy or terms of service pages. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable or protected, which reduces transparency but is not uncommon for commercial websites. Overall, the security posture is good but could be improved by adding security headers and clearer compliance documentation. The overall risk assessment is moderate with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing transparency with privacy and terms pages, improving security headers, and providing clear contact information for incident response. These steps will strengthen trust and compliance, supporting the company's reputable market presence.

N

Nadace ČEZ

nadacecez.cz

62

Nadace ČEZ is a well-established non-profit foundation affiliated with the ČEZ Group, focusing on supporting social, environmental, and community projects across the Czech Republic. The foundation operates various grant programs, including regional support, sports infrastructure, environmental initiatives like tree planting, and employee-driven grants. The website reflects a professional and consistent brand image with comprehensive content and clear navigation, targeting non-profit organizations, regional communities, and the general public interested in social good. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for consent management. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. The WHOIS data is unavailable, which slightly reduces trustworthiness; however, the website's structured data, social media presence, and content quality support its legitimacy. No critical vulnerabilities or adult content were detected. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and verifying domain registration details to improve trust and compliance.

M

Max Realitní Fond SICAV a.s.

maxrealitni.cz

36

Max Realitní Fond SICAV a.s. operates as a premium real estate investment fund focused on retail and office properties within the Czech Republic. The fund targets qualified investors, offering a business model centered on pooling capital to invest in prime real estate assets with a goal of achieving an annual return of approximately 8.5%. The website presents a professional and consistent brand image, providing detailed information about investment strategies, team members, and performance metrics. Technical infrastructure leverages modern JavaScript libraries such as jQuery, Bootstrap, and Chart.js, alongside Cookiebot for GDPR-compliant cookie management. Analytics are implemented via Google Analytics and Google Tag Manager, supporting moderate user tracking with appropriate consent mechanisms. Security posture is adequate but could be improved by implementing additional HTTP security headers and verifying SSL configurations. The absence of WHOIS data due to privacy protection limits transparency but does not detract significantly from the site's credibility given the professional presentation and clear business information. Overall, the website is well-structured, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

I

International Council for Science (ICSU)

council.science

75

The International Science Council (ISC) operates as a global non-governmental organization dedicated to advancing science as a public good worldwide. The website serves as a professional platform to communicate the organization's mission, membership, and activities to the international scientific community and stakeholders. The domain is registered to the legitimate organization based in France, consistent with the website's claims. The site uses WordPress CMS with Elementor and integrates Google Analytics and Cookiebot for analytics and cookie consent management, reflecting a moderate level of digital maturity. From a technical perspective, the website is hosted behind Cloudflare DNS and CDN services, uses HTTPS with a good SSL configuration, and demonstrates good mobile optimization and accessibility. SEO practices are well implemented with proper meta tags and structured data. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. Security posture is generally good with HTTPS enforced and clientTransferProhibited domain status, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Business credibility is strong due to clear organizational identity and professional content. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

S

Slovanet

slovanet.net

66

Slovanet is a Slovak telecommunications company offering high-speed internet, digital television, and telephony services. The website positions Slovanet as a regional ISP with a focus on providing fast and unlimited internet access, a rich selection of TV programs, and affordable telephony. The company targets general consumers and businesses within Slovakia. Technically, the website is built on WordPress and integrates multiple modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. The site is mobile-optimized and uses HTTPS with a good SSL configuration, indicating a mature digital infrastructure. Security-wise, while HTTPS and cookie consent are implemented, the absence of HTTP security headers and a published privacy policy or terms of service reduces the overall security posture. The lack of WHOIS registration data is a notable concern, suggesting either privacy protection or domain registration issues, which impacts trustworthiness. Overall, the website is professional and functional but would benefit from enhanced transparency and security documentation.

M

Metropolitní kapitula u sv. Víta

katedrala.tv

47

Katedrála TV is an official streaming media platform operated by Metropolitní kapitula u sv. Víta, providing live and archived religious services primarily related to St. Vitus Cathedral in Prague. The website serves a general audience interested in religious content, offering scheduled programming and video archives. The business operates as a small non-profit entity within the media and government/non-profit sectors, with a clear focus on religious broadcasting. Technically, the website employs modern web technologies including Google Fonts, Google Analytics with consent, Cookiebot for cookie management, and Cloudflare for DNS and CDN services. The site is mobile optimized with good navigation and SEO practices, though it lacks a detected CMS and some advanced accessibility features. Performance is moderate, supported by CDN usage. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve security posture by enabling DNSSEC, adding security headers, and publishing security policies. Contact information is minimal on the site, which could be enhanced for better user support and trust.

M

Metrostav

metrostav.cz

65

Metrostav is a leading Czech construction company with a strong presence in infrastructure and engineering projects across the Czech Republic and Europe. The website reflects a professional business with a focus on technical excellence and a broad portfolio of construction services. The company targets clients in the construction and transportation sectors, emphasizing its market leadership and technical capabilities. The digital infrastructure is modern, leveraging Next.js, Google Tag Manager, Cookiebot for consent management, and analytics tools such as Microsoft Clarity and Hotjar, indicating a mature digital presence. Security posture is generally strong with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data reduces the domain trustworthiness score, but the website content and technology usage support legitimacy. Overall, the site is well-designed, GDPR compliant, and suitable for its business audience.

U

Up Česká republika s.r.o.

ebenefity.cz

70

Up Česká republika s.r.o. operates the eBenefity platform, a modern employee cafeteria and benefit card service targeting Czech employees and employers. The website presents a professional and consistent brand image, offering a clear description of its services and benefits. The company appears to hold a solid market position within the Czech Republic's employee benefits sector. Technically, the website is built on WordPress with modern optimization plugins such as WP Rocket and Rank Math SEO, ensuring good performance and SEO readiness. Cookiebot is used for cookie consent, indicating GDPR compliance efforts. Security posture is generally strong with HTTPS enforced and some security headers present, though explicit security policies and incident response contacts are not published. The absence of WHOIS data reduces transparency but is likely due to privacy protection. Overall, the site is safe, professional, and well-structured, though improvements in privacy policy publication and contact information disclosure are recommended.

T

Tietokeskus

tietokeskus.fi

75

Tietokeskus is a Finnish IT service provider specializing in outsourced IT solutions, cybersecurity consulting, cloud services, and device lifecycle management primarily targeting SMEs and public sector organizations in Finland. The company positions itself as a reliable local partner with a strong team of certified professionals. The website reflects a mature digital presence with comprehensive service descriptions and a clear focus on customer engagement. Technically, the site is built on WordPress with modern SEO and compliance tools such as Yoast SEO and Cookiebot, ensuring GDPR compliance and user consent management. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policy and incident response information are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

REN - Redes Energéticas Nacionais

ren.pt

67

REN - Redes Energéticas Nacionais is a leading Portuguese company responsible for the transmission of electricity and natural gas at very high voltages and pressures, managing the national electric and gas systems. The company serves a broad audience including investors, suppliers, and the general public, positioning itself as a key player in Portugal's energy infrastructure sector. The website reflects a mature digital presence with comprehensive information on services, sustainability, innovation, and corporate governance. Technically, the site uses modern web technologies including jQuery, Highcharts, Cookiebot for consent management, and Umbraco CMS, delivering a responsive and accessible user experience. Security posture is strong with HTTPS enforced, anti-CSRF cookies, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust with clear GDPR-aligned policies and consent dialogs. Overall, REN's website demonstrates high professionalism, trustworthiness, and alignment with its business stature.

E

Evida

evida.dk

64

Evida is Denmark's national gas distributor, specializing in the distribution and integration of green gases such as biogas and hydrogen. The company plays a pivotal role in Denmark's energy transition by enabling sustainable gas supply and supporting environmental goals. Their website reflects a professional and consistent brand presence, targeting both consumers and professional stakeholders in the energy sector. The site provides comprehensive information on services, sustainability efforts, and customer support, emphasizing transparency and engagement.

A

Albatros Media a.s.

kmc.cz

60

The website kmc.cz represents the Klub mladých čtenářů (Young Readers Club) operated under the parent company Albatros Media a.s., a well-established Czech publishing house. The club focuses on promoting reading among children and students from preschool to high school, providing catalogs, educational materials, and organizing events and competitions. The site is professionally designed with clear navigation and content relevant to its target audience of children, educators, and schools. Technically, the site uses modern JavaScript libraries such as jQuery and React, integrates Google Tag Manager and Cookiebot for analytics and consent management, and employs HTTPS with CSRF protection on forms. However, some security best practices like security headers and explicit incident response contacts are missing. The WHOIS data for the domain is unavailable, which limits trust verification, but the strong branding and content quality support legitimacy. Overall, the site is secure, compliant with GDPR, and serves its educational mission effectively.

Biogen Slovakia s.r.o. operates as a subsidiary of the global biotechnology leader Biogen Inc., focusing on innovative therapies for neurological and rare diseases. The website serves healthcare professionals and patients in Slovakia, providing comprehensive information about therapeutic areas, corporate responsibility, and career opportunities. The digital infrastructure is built on Adobe Experience Manager, leveraging modern JavaScript libraries and cookie consent management tools to ensure compliance and user experience. Security posture is solid with HTTPS enforcement and cookie management, though some HTTP security headers could be improved. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, enhancing trust. Overall, the website reflects a professional and credible corporate presence with good technical implementation and user experience.

A

ASOCIACE PRO VYUŽITÍ TEPELNÝCH ČERPADEL, Z.S.

avtc.cz

59

ASOCIACE PRO VYUŽITÍ TEPELNÝCH ČERPADEL, Z.S. operates as a Czech Republic-based association dedicated to promoting the use and quality of heat pumps as an alternative energy source. The website presents a professional and well-structured digital presence built on WordPress with Elementor, featuring educational programs, partner information, and industry news. The technical infrastructure includes modern web technologies and integrates cookie consent and analytics tools, reflecting a moderate to good digital maturity level. Security posture is solid with HTTPS and cookie consent but lacks explicit security policies or incident response details. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, though the website content and design suggest a credible organization. Strategic recommendations include enhancing privacy and security disclosures and verifying domain registration status to improve trust and compliance.

A

Asociace pro ekologické vytápění dřevem, z.s.

aevd.cz

49

Asociace pro ekologické vytápění dřevem, z.s. (AEVD) is a Czech non-profit association dedicated to promoting sustainable and ecological wood heating methods. Founded in 2024, AEVD focuses on educating users about efficient wood heating technologies and advocating for environmentally friendly heating practices. The association has established itself as a respected voice in the Czech energy sector, particularly in the niche of renewable wood energy. Their website serves as an information hub with news, educational content, and event participation, targeting homeowners and environmental stakeholders interested in sustainable heating solutions. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by a Czech hosting provider, and incorporates modern tracking and consent tools such as Cookiebot and Microsoft Clarity. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, but no explicit security or incident response policies are published. Overall, AEVD presents a professional and trustworthy online presence aligned with its mission and business model.

E

eLegal.cz

elegal.cz

72

eLegal.cz is a Czech-based legal services firm established in 2005, specializing in bridging law with business realities, particularly in corporate law, IT, GDPR compliance, eCommerce, intellectual property, real estate, and labor law. The firm targets businesses and startups requiring clear, practical legal advice with a modern understanding of technology and marketing. Their market position is supported by over 1,000 satisfied clients and a strong portfolio of testimonials and partner relationships. Technically, the website employs modern web technologies including jQuery, Bootstrap, Owl Carousel, Google Tag Manager, Google Analytics, and Cookiebot for GDPR-compliant cookie consent. The site is mobile-optimized, well-structured, and performs moderately well. However, no explicit CMS or hosting provider information is available. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent and spam protection on forms. However, it lacks visible security headers and publicly disclosed security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and strong business credibility. Recommendations include enhancing security headers, publishing incident response policies, and adding a vulnerability disclosure mechanism to further improve security posture.

A

Asociace textilního-oděvního-kožedělného průmyslu (ATOK)

atok.cz

61

Asociace textilního-oděvního-kožedělného průmyslu (ATOK) is a well-established Czech industry association representing employers in the textile, clothing, and leather sectors. Founded in 1990, it serves as a key advocate and networking platform for manufacturers, research institutions, and educational entities within the Czech Republic. The website provides comprehensive information about the association's activities, membership benefits, projects, and industry news, positioning ATOK as a central figure in the national and European textile industry landscape. Technically, the website employs modern analytics and consent management tools such as Google Analytics, Microsoft Clarity, Google Tag Manager, and Cookiebot, indicating a mature digital infrastructure. The site is accessible, mobile-optimized, and well-structured, though it lacks some advanced security headers and explicit privacy policy documentation. The domain is long-standing and consistent with the organization's history, enhancing trustworthiness. From a security perspective, the site uses HTTPS and cookie consent mechanisms but would benefit from publishing explicit security policies, vulnerability disclosure information, and implementing additional security headers. No critical vulnerabilities or blocking mechanisms were detected, and contact information is clearly presented, supporting transparency and user trust. Overall, ATOK's website reflects a professional, credible, and industry-focused organization with room for improvement in privacy and security policy disclosures. Strategic enhancements in these areas would further strengthen its compliance posture and user confidence.

Kliken is a small business marketing platform that enables owners to easily manage advertising campaigns across Google Ads, Google Shopping, Facebook, and retargeting channels. The company positions itself as a niche provider integrated with leading ecommerce and website builder platforms such as Ecwid by Lightspeed and WordPress. The website demonstrates a good level of professionalism, with consistent branding and clear messaging targeted at small business owners seeking digital marketing automation solutions. Technically, the site is built on the Weebly platform, leveraging common web technologies including Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance. While the site is mobile optimized and performs moderately well, some technical improvements such as updating legacy libraries and enhancing security headers are recommended. Security posture is generally good with HTTPS enforced and cookie consent implemented, but there is room for improvement in security headers and form validation. The absence of WHOIS registration data is a significant concern, potentially indicating domain registration issues or privacy protection, which impacts business credibility. Overall, Kliken presents a functional and trustworthy marketing service platform but should address domain legitimacy and technical security enhancements to strengthen trust and compliance.

M

Magaziny.cz

magaziny.cz

59

Magaziny.cz is a Czech online platform specializing in magazine subscriptions, offering customers significant discounts and direct delivery services. The website targets Czech-speaking magazine readers and operates as an e-commerce subscription service within the media sector. The platform is professionally designed with consistent branding and good content quality, catering to a medium-sized business audience. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, Cookiebot for cookie consent, and Hotjar for user behavior analytics. The website is mobile-optimized and accessible, with good SEO practices in place. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, though it lacks some advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to privacy protection, which is common and justified for commercial websites. Overall, the site presents a low-risk profile with good privacy compliance and a professional online presence.

Balfegó is a well-established Spanish company specializing in the capture, feeding, study, and commercialization of bluefin tuna, positioning itself as a global leader in this niche seafood market. The company emphasizes sustainability, traceability, and quality, supported by certifications such as AENOR and B Corp. Their business model includes direct sales to restaurants and distributors, supported by a unique traceability system that enhances transparency and consumer trust. The website reflects a mature digital presence with multilingual support, rich multimedia content, and interactive features that engage their target audience effectively. Technically, the website is built on WordPress with modern plugins like Gravity Forms and Cookiebot, ensuring compliance with privacy regulations and user consent management. The infrastructure is hosted by Acens Technologies, a reputable provider, and the site uses HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and SEO practices. Security measures include CAPTCHA on forms and cookie consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear policies and GDPR adherence. However, incident response details and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the site is professional, trustworthy, and aligned with industry best practices, supporting Balfegó's market leadership. Strategic recommendations include enabling DNSSEC, enhancing security headers, publishing a security.txt file, and adding explicit incident response contacts to further strengthen security and trust.

H

Hotel České Žleby

hotelceskezleby.cz

36

Hotel České Žleby is a family-run hotel located in the Šumava region of the Czech Republic, offering comfortable accommodation and quality dining experiences. The website presents a professional and consistent brand image targeting general audiences interested in hospitality services in this region. The business appears to be small-sized and established since 2013, with a clear focus on local tourism and hospitality. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder, Google Tag Manager, and Cookiebot for cookie consent management. The site is hosted by REG-WEDOS, a known hosting provider, and uses HTTPS with good SSL configuration. Security posture is adequate but could be improved by adding security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service on the homepage. Overall, the website is safe, professional, and trustworthy with no signs of malicious or adult content.

B

Better Hotel

better-hotel.com

61

Better Hotel is a Czech-based company offering a modern, integrated hotel and restaurant management system. The platform is designed to simplify hotel operations including reservations, inventory, and restaurant management, serving over 350 Czech hoteliers. The website is professionally designed using WordPress and Elementor, with integrations for analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Cookie consent is managed via Cookiebot, indicating a commitment to privacy compliance. The technical infrastructure leverages Cloudflare for DNS and CDN services, ensuring good performance and security. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though improvements in security headers are recommended. The domain registration is consistent with the business profile, registered since 2015 with a reputable Czech registrar. Overall, the website presents a trustworthy and professional image suitable for its target hospitality market.

C

Civil Society Now

civilsocietynow.org

9

Civil Society Now is a non-profit platform established in 2021, focusing on empowering civil society organizations and activists across multiple countries including Ukraine, Myanmar, Mongolia, and Nepal. The website offers membership sign-up forms and country-specific resources to support civil society engagement. The platform positions itself as a niche player in the non-profit sector, aiming to facilitate collaboration and information sharing among civil society actors. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by plugins such as Weglot for multilingual support and Cookiebot for cookie consent management. The infrastructure includes modern web technologies like jQuery and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and implements cookie consent with Google Consent Mode configured to restrict ad and analytics storage by default, reflecting a privacy-conscious approach. However, the absence of DNSSEC and security headers suggests room for improvement in hardening the security posture. No explicit privacy policy or terms of service pages were detected, which may impact compliance and user trust. Overall, the website presents a moderate risk profile with no critical security issues detected. Strategic recommendations include enabling DNSSEC, adding security headers, publishing comprehensive privacy and terms policies, and providing clear contact information to enhance trust and compliance.

The website 'Udržitelný svět' appears to be a newly launched online portal focused on sustainability topics, likely targeting Czech-speaking users given the language and locale settings. The site uses modern web technologies such as Angular and integrates cookie consent management via Cookiebot, alongside Google Tag Manager for analytics. However, the content is basic with limited business information, no visible privacy policy or terms of service, and no explicit contact details, which limits trust and credibility from a user perspective. The domain is newly registered in 2024, consistent with a new project or startup phase. Technically, the site shows moderate digital maturity with a modern tech stack but lacks visible security headers and DNSSEC is not enabled, which are areas for improvement. The cookie consent mechanism is well implemented, indicating some attention to GDPR compliance, but the absence of a dedicated privacy policy page and contact information reduces compliance confidence. No WAF or security challenge was detected, and the site content is fully accessible. From a security posture standpoint, the site benefits from HTTPS and domain transfer protection but lacks advanced security headers and incident response information. No vulnerabilities or suspicious patterns were detected in the provided data. Overall, the site scores moderately on AI-based evaluation, reflecting a functional but still maturing web presence. Strategically, the site should prioritize publishing comprehensive privacy and terms documents, enhancing security headers, enabling DNSSEC, and providing clear contact and incident response information to improve trust and compliance. These steps will strengthen the site's security posture and business credibility as it grows.

I

IndiKit

indikit.net

66

IndiKit is a technology-focused website offering an indicator library service. The site is professionally designed with consistent branding and provides a cookie consent mechanism compliant with GDPR. The technical infrastructure includes modern web technologies such as Google Tag Manager, Cookiebot for consent management, Weglot for translations, and reCAPTCHA for bot protection. However, the absence of WHOIS registration data raises concerns about domain legitimacy or recent registration status. Security posture is generally good with HTTPS and consent management but lacks explicit security policies and headers. Contact information and business credentials are not publicly available, limiting business credibility assessment. Overall, the site is functional and moderately secure but would benefit from enhanced transparency and security documentation.

Q

QC Group

qcgroup.cz

54

QC Group is a Czech-based company specializing in ISO standard implementation and training services aimed at helping businesses improve and develop their operations. The website is built on WordPress using the Divi theme, indicating a modern and maintainable technical infrastructure. The site employs standard security measures such as HTTPS, Google reCAPTCHA, and Cookiebot for cookie consent, reflecting a moderate security posture. However, the absence of explicit privacy policies, terms of service, and contact information reduces privacy compliance and business transparency. Overall, the website is professional and targeted at business clients seeking ISO consulting services in the Czech Republic.

S

SV pojišťovna a.s.

svpojistovna.cz

64

SV pojišťovna a.s. is a Czech insurance company specializing in travel insurance, property insurance, pilot insurance, and niche products for extreme sports enthusiasts. The company positions itself as a specialist insurer with tailored offerings for clients seeking protection in specialized areas. The website reflects a medium-sized business with a professional online presence, targeting Czech-speaking customers primarily. The business model focuses on providing insurance products with a strong emphasis on customer service and niche market expertise. Technically, the website is built on WordPress CMS, utilizing modern technologies such as jQuery, Google Tag Manager, and Cookiebot for cookie consent management. The site is well-optimized for SEO and mobile devices, with good accessibility features. The presence of structured data (JSON-LD) and Open Graph tags enhances search engine visibility and social media integration. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. While some security headers are not explicitly detected, the overall security posture is good with no visible vulnerabilities or exposed sensitive data. The site uses reputable third-party services for analytics and advertising, including Google Analytics and Meta Platforms, with transparent cookie policies. Overall, the website presents a trustworthy and professional image with strong compliance to privacy regulations. The lack of WHOIS data is mitigated by the site's transparency and business legitimacy indicators. Strategic recommendations include enhancing security headers, publishing a security.txt file, and adding explicit terms of service to further improve trust and compliance.

S

Survio

survio.com

71

Survio is a well-established SaaS company specializing in online survey creation, distribution, and analytics. It serves a broad audience including individuals, businesses, and organizations across multiple sectors such as marketing, HR, education, and public administration. The company positions itself as a top-tier online research service with millions of users worldwide and strong trust signals from certifications and user reviews. Technically, Survio employs modern web technologies including jQuery, Google Tag Manager, HubSpot forms, and Cookiebot for consent management, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, ISO 27001:2022 certification, GDPR compliance, and use of Google reCAPTCHA Enterprise, although some security headers could be more explicitly documented. The absence of WHOIS registration data is a notable gap, reducing domain transparency but not detracting significantly from the overall legitimacy given the business presence and certifications. Overall, Survio presents a professional, secure, and user-friendly platform with comprehensive privacy and security policies.

Generali Hungary operates a comprehensive insurance and financial services website targeting both individual and corporate customers. The site offers a wide range of insurance products including vehicle, home, life, health, and corporate insurance, alongside investment services. The company maintains a strong market position in Hungary as part of the global Generali Group, with a subsidiary brand Genertel also referenced. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience.

F

Fishmonger

fishmonger.hu

57

Fishmonger.hu is a Hungarian seafood retail and wholesale business offering fresh fish, fillets, shellfish, and related products through multiple physical locations and an online webshop. The company emphasizes freshness, quality, food safety, and sustainability, serving both consumers and businesses in Hungary. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for marketing and analytics tools like Google Tag Manager and Facebook Pixel, managed with GDPR-compliant cookie consent via Cookiebot. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-structured, supporting a medium-sized business with a strong market position in the Hungarian seafood sector.

H

HungaroControl

hungarocontrol.hu

71

HungaroControl is the national air navigation service provider for Hungary, offering air traffic services, training for air traffic personnel, and aviation research and development. The website reflects a professional governmental entity with a clear focus on transportation and aviation sectors. The digital infrastructure includes modern analytics and marketing tools such as Google Analytics, Hotjar, and Cookiebot, ensuring compliance with privacy regulations through a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforcement and no visible vulnerabilities, though some security headers could be improved. Overall, the website is well-structured, accessible, and trustworthy, serving its target audience effectively.

B

Bortársaság

bortarsasag.hu

65

Bortársaság is a Hungarian wine retailer operating both online and through physical stores, offering wine sales, tasting events, and a membership club. The website targets wine enthusiasts and consumers in Hungary, providing curated wine selections and educational content. Technically, the site is built on modern frameworks such as Next.js and integrates multiple third-party services for analytics, marketing, and user experience enhancement. The presence of Google reCAPTCHA and Cookiebot indicates attention to security and privacy compliance, although explicit privacy and terms of service pages are not found in the analyzed content. Security posture is strong with HTTPS and security headers, but there is room for improvement in publishing formal security policies and incident response contacts. Overall, the website is professional, mature-content appropriate, and trustworthy with a good balance of business and technical maturity.