Security Directory

M

Ministerstvo spravedlnosti České republiky

justice.cz

59

The website msp.gov.cz is the official portal of the Ministry of Justice of the Czech Republic, serving as a comprehensive resource for justice-related information, public registries, legal news, and e-services. It targets the general public, legal professionals, and government officials, providing authoritative content and access to various justice system components. The site is well-branded, consistent, and maintains a high level of trust as a government domain. Technically, the site is built on the Liferay CMS platform with modern web technologies including React and Alloy UI. It employs HTTPS with strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. From a security perspective, the site enforces HTTPS and uses nonce-based inline scripts to mitigate injection risks. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual for a government domain but likely due to registry policies rather than malicious intent. Overall, the site presents a strong security posture and digital maturity appropriate for a government entity, with room for improvement in security header implementation and publishing a formal security policy or vulnerability disclosure program.

F

FT Sun s.r.o.

ftsun.cz

46

FT Sun s.r.o. is a Czech digital agency specializing in data-driven digital services including application development, e-marketing, photo and video production, graphic design, and e-shop solutions. The company targets businesses seeking pragmatic and technologically standardized digital partners. The website presents a professional image with clear service offerings and a focus on GDPR compliance. Technically, the site uses modern web technologies such as Bootstrap, Owl Carousel, Google Analytics, Google Tag Manager, Facebook Pixel, and reCAPTCHA to enhance user experience and security. Security posture is solid with HTTPS enforced and consent mechanisms in place, though the absence of security headers and WHOIS data reduces overall trust. The domain WHOIS data is missing, which is a concern for domain legitimacy but the website content and business information appear consistent and professional. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, making it a credible digital agency in the Czech market.

4

42 Vienna

42vienna.com

58

42 Vienna is a Digital Excellence Campus based in Austria, providing innovative, free, and open-access coding education using a peer-to-peer learning model without teachers or lectures. It targets aspiring programmers and IT professionals, emphasizing inclusivity regardless of financial or academic background. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are absent. WHOIS data is unavailable, which slightly impacts trust but is mitigated by consistent branding and social media presence. Overall, the site reflects a credible educational institution with room for improvement in privacy and security transparency.

4

42 Berlin

42berlin.de

62

42 Berlin is a tuition-free, non-profit software engineering school located in Berlin, Germany. It offers an innovative peer-to-peer learning environment focused on hands-on projects and real-world challenges, targeting aspiring software developers and students interested in coding education. The website is built on WordPress using Elementor, with modern SEO and structured data implementations, and is hosted behind Cloudflare. The site integrates multiple third-party analytics and tracking pixels including Google Analytics, TikTok, Facebook, and Reddit, with GDPR consent mechanisms in place via the Complianz plugin. Security posture is generally good with HTTPS enforced and Cloudflare protection, but lacks explicit security headers and published security policies. Contact information and privacy policies are not explicitly found in the analyzed content, which represents an area for improvement. Overall, the website is professional, trustworthy, and well-positioned in the education sector, but could enhance privacy compliance and security transparency.

4

42 Barcelona

42barcelona.com

53

42 Barcelona is a pioneering educational campus focused on programming and digital skills, offering a fully subsidized, peer-to-peer, gamified learning experience without traditional professors. Supported by Fundación Telefónica and local government entities, it targets individuals over 18 years old seeking flexible, innovative education to enter the labor market. The website reflects a mature digital presence with modern technologies, comprehensive privacy and cookie policies, and strong partner affiliations. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though additional security headers and formal incident response policies could enhance trust. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and partnerships support legitimacy.

4

42 Wolfsburg

42wolfsburg.de

45

42 Wolfsburg is a specialized software development school that is part of the global 42 network, offering bachelor and master level education in software development. The website presents a professional and modern digital presence built on WordPress with Elementor, targeting prospective students and the tech education market. The technical infrastructure is solid, leveraging modern web technologies and performance optimizations, with good mobile responsiveness and SEO practices. Security posture is generally good with HTTPS enforced and privacy consent mechanisms implemented, though explicit privacy and security policies are not published. No critical vulnerabilities or suspicious content were detected, indicating a trustworthy and safe platform. Overall, the site reflects a credible educational institution with room for improvement in transparency and security documentation.

4

42 Heilbronn gGmbH

42heilbronn.de

59

42 Heilbronn gGmbH operates a tuition-free, full-time coding school in Heilbronn, Germany, offering an innovative peer-to-peer learning model without traditional teachers. The school targets aspiring coders aged 18 and above, providing a unique educational experience supported by a strong network of partners and scholarships. The website reflects a professional and modern digital presence, built on Contao CMS with Bootstrap and jQuery, and integrates consent management and analytics tools to ensure GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though additional security headers and incident response information could enhance trust. Overall, the site is well-structured, accessible, and trustworthy, supporting the organization's mission to empower future coders.

I

Innovation Academy

42seoul.kr

46

42 Seoul is an innovative software education program based in South Korea, operated by the Innovation Academy. The program offers tuition-free, self-directed learning aimed at cultivating top-tier software developers. The website reflects a medium-sized educational entity with a clear focus on growth, mentorship, and practical experience through collaborations with various companies. The business model emphasizes accessibility and challenge-driven learning without traditional academic constraints. Technically, the website employs a custom CMS with a technology stack including jQuery, Slick Carousel, Google Fonts, and Google Analytics, hosted via Megazone and utilizing Cloudflare DNS. The site is mobile-optimized with good SEO practices, though some accessibility features are basic. Performance is moderate, and the site uses HTTPS with a secure domain registration status. From a security perspective, the site enforces HTTPS and uses Cloudflare nameservers, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a comprehensive privacy policy present but no explicit cookie consent. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy, professional, and well-aligned with its educational mission. Strategic improvements in security headers and privacy compliance would further strengthen its posture and user trust.

4

42 Roma Luiss

42roma.it

64

42 Roma Luiss is an innovative, free programming school based in Rome, Italy, focused on peer-to-peer learning and gamified education. The institution targets individuals aged 18 and above, including those without prior technical background, offering a project-based curriculum that leads to high employment rates. The website reflects a medium-sized educational entity with consistent branding and clear calls to action for enrollment. Technically, the site is built on WordPress with modern analytics and marketing integrations, including Google Tag Manager, Facebook Pixel, TikTok Pixel, and Matomo Analytics. The cookie consent mechanism is robust and GDPR compliant, implemented via Iubenda. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. No incident response or vulnerability disclosure policies are published, representing an area for enhancement. Overall, the website is professional, trustworthy, and well-optimized for mobile users, with extensive tracking and marketing tools in use.

4

42 Rio

42.rio

62

42 Rio is a free, immersive software engineering school positioned as the 3rd most innovative technology school globally, according to the Wuri ranking. It targets aspiring software engineers and tech companies in Rio de Janeiro, offering high-level education and recruitment services. The website reflects a strong brand presence with reputable partners and sponsors, emphasizing practical, peer-based learning and career readiness. Technically, the site is built on Webflow with modern analytics and tracking tools, delivering a good user experience with mobile optimization and fast loading times. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks explicit security headers and incident response policies. Privacy compliance is partial, with privacy and cookie policies present but no visible consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its educational mission.

4

42 Bangkok

42bangkok.com

61

42 Bangkok is a tuition-free, innovative coding school located in Thailand, offering a peer-learning and project-based curriculum designed to develop the next generation of software engineers. The school operates without traditional teachers or classes, emphasizing autonomy and gamified learning. The website is professionally designed, well-structured, and optimized for SEO, targeting aspiring programmers aged 18 and above. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics with user opt-out capabilities. Security posture is good with HTTPS enforced, but lacks some security headers and explicit privacy policies. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and serves an educational mission with a strong social media presence and clear contact information.

F

Fundación Telefónica

42madrid.com

53

42 Madrid is a free, innovative programming campus located in Madrid, Spain, supported by Fundación Telefónica. It offers a peer-to-peer, gamified learning experience accessible 24/7, targeting individuals over 18 years old with no prior programming knowledge required. The institution positions itself as a disruptive educational model focused on digital skills demanded by the labor market. Technically, the website is built on WordPress with modern libraries and includes security features such as HTTPS and Google reCAPTCHA. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. However, WHOIS data is unavailable, which slightly reduces transparency. Overall, the site is professional, trustworthy, and well-optimized for users.

C

Codam

codam.nl

56

Codam is a tuition-free coding college based in the Netherlands, offering peer-to-peer programming education accessible to anyone aged 18 and above without requiring prior diplomas or math skills. The institution positions itself as an innovative and inclusive educational platform, supported by a strong network of partners ranging from startups to Fortune 500 companies. The website demonstrates a mature technical infrastructure built on WordPress with modern plugins and integrations such as Elementor, Slider Revolution, and MailerLite, ensuring a good user experience and SEO optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy and cookie policies are present and indicate GDPR compliance. Overall, Codam presents a trustworthy and professional online presence aligned with its educational mission.

H

Hive Helsinki

hive.fi

56

Hive Helsinki operates as a tuition-free coding school based in Finland, focusing on project-based and peer learning methodologies to equip individuals with coding skills for future-proof careers. The institution targets learners with no prior experience, emphasizing accessibility and practical skill development. The website reflects a well-structured, professionally designed platform with clear branding and consistent messaging aligned with its educational mission. Technically, the site is built on WordPress, leveraging modern SEO tools like Yoast SEO, and integrates analytics and consent management via Google Analytics, Google Tag Manager, and Cookiebot, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. Overall, the domain registration data aligns with the website's claims, supporting legitimacy and trustworthiness. Strategic recommendations include publishing detailed security and incident response policies and enhancing transparency around data protection roles.

A

Association 42

campus19.be

50

Campus 19 is a non-profit educational platform based in Belgium offering free, innovative coding education for adults aged 18 and over. The platform emphasizes peer-to-peer learning and project-based pedagogy without traditional classes or teachers. It operates campuses in Brussels and Antwerp and is part of the global 42 network of coding schools. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content in French with Dutch alternatives. Technically, it is built on WordPress with modern tracking and marketing tools integrated with GDPR-compliant consent mechanisms. Security posture is good with HTTPS and cookie consent but lacks publicly visible security policies or incident response contacts. WHOIS data confirms legitimacy with consistent registration details and domain age matching the business timeline. Overall, Campus 19 presents a credible, well-structured educational service with strong market positioning in Belgium's tech education sector.

4

42

42.fr

65

42 is a well-established, tuition-free computer science educational institution founded in 2004 in France. It offers a unique project-based, peer-to-peer learning model aimed at training the next generation of software engineers. The institution has a strong international presence with over 50 campuses worldwide and emphasizes inclusivity and accessibility, requiring no prior coding experience or diplomas. The website reflects a professional and consistent brand image with comprehensive program information and active social media engagement. Technically, the site is built on WordPress, uses modern JavaScript libraries, and is hosted behind Cloudflare DNS, ensuring good performance and security. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though dedicated security and incident response policies are not published. Overall, the site is trustworthy, user-friendly, and well-optimized for SEO and accessibility.

Jižní Čechy is a regional tourism website dedicated to promoting the South Bohemia region of the Czech Republic. The site offers comprehensive information about local destinations, events, and activities such as cycling, hiking, and cultural festivals. It targets tourists and visitors interested in exploring the natural and cultural heritage of South Bohemia. The business model focuses on providing informational content and promoting regional tourism attractions. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Fonts, and various analytics and marketing tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Sentry for error tracking. The site is mobile optimized and features a cookie consent mechanism, indicating some level of privacy compliance. However, explicit privacy and terms of service pages are not found. From a security perspective, the site uses HTTPS and includes no visible sensitive data exposure. However, no security headers were detected in the HTML source, which is a potential area for improvement. The lack of WHOIS data and registrant information reduces the domain trustworthiness, although the website content and technical setup appear professional and legitimate for a tourism portal. Overall, the site presents a moderate risk profile with good content quality and technical implementation but with gaps in privacy compliance and domain registration transparency. Strategic recommendations include adding explicit privacy and terms pages, implementing security headers, and improving contact information visibility to enhance trust and compliance.

S

Stanice O, a.s.

ocko.tv

65

OCKO.TV is the first Czech music television channel offering a comprehensive digital platform with live streaming, music videos, news, contests, and interactive charts. The website targets Czech and Slovak music fans and operates under the company Stanice O, a.s., established in 2003. The platform leverages a variety of modern web technologies and third-party services to deliver content and advertising effectively. The business model is primarily advertising-driven with additional engagement through contests and music charts. The company maintains a consistent brand presence and a good market position in the Czech media landscape. Technically, the website uses multiple JavaScript libraries, ad networks, and analytics tools, supported by a consent management platform to comply with GDPR requirements. The site is moderately optimized for mobile and performance, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS and no visible vulnerabilities, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Contact information and company registration details are transparent, enhancing business credibility. Overall, the website is professional, content-rich, and trustworthy, with no adult or explicit content detected.

R

Roklen Fin a.s.

roklen.cz

48

Roklen Fin a.s. is a Czech financial group established in 2014, offering a broad range of financial services including corporate finance, investment services, currency exchange, securities trading, and financial news. The group operates multiple specialized brands targeting companies and private individuals, positioning itself as a leading fintech and financial advisory group in the Czech Republic. The website is professionally designed with clear navigation and consistent branding, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries and lazy loading for performance, but lacks some advanced security headers and explicit privacy compliance features. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but improvements are recommended in privacy policy publication and security header implementation. Overall, the site is trustworthy and business credible, though privacy compliance and security transparency could be enhanced.

Č

Český hosting

cesky-hosting.eu

78

Český hosting is a well-established Czech web hosting provider offering a range of services including web hosting, domain registration, virtual and dedicated servers, and professional customer support. The company positions itself as a reliable and high-quality hosting provider with over 20 years of experience and a strong reputation supported by excellent customer ratings and multiple industry awards. Their target audience includes both beginners and professional users seeking dependable hosting solutions. The business operates under the parent company THINline s.r.o., based in Prague, Czech Republic.

D

Direct Fidoo Payments s.r.o.

fidoo.com

69

Fidoo is a Czech-based financial technology company specializing in corporate expense management solutions. Their platform offers business clients a combination of prepaid Mastercard corporate cards and a comprehensive expense management application that streamlines payment approvals, receipt digitization, and reporting. The company positions itself as a modern, digital-first alternative to traditional expense handling, targeting medium-sized businesses and enterprises seeking efficiency and transparency in financial operations. The website reflects a mature digital presence with strong branding and customer testimonials, indicating a solid market position within the Czech Republic and potentially broader European markets. Technically, the website is built on modern web frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates Google Tag Manager for analytics and marketing. The platform supports mobile optimization and accessibility, with clear SEO practices and fast performance. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data is a notable gap, potentially due to privacy protection or domain registration issues, which slightly impacts trustworthiness. However, the website's content, regulatory references, and Mastercard licensing provide strong legitimacy signals. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, Fidoo presents a professional, secure, and user-friendly platform for corporate expense management, with recommendations to enhance transparency around security policies and domain registration details to further strengthen trust and compliance.

B

Birne by Direct

birne.com

68

Birne by Direct operates a flexible car leasing and rental service primarily targeting customers in the Czech Republic. The business model emphasizes ease of use with clear monthly fees, no mileage limits, and flexible return options. The website is built on the Shopify platform, leveraging modern web technologies and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, HubSpot, and Visual Website Optimizer. The site demonstrates good digital maturity with cookie consent mechanisms and GDPR compliance evident through a comprehensive privacy policy in Czech. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, although explicit security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its target market.

A

Autosklo Hleďa

hleda.cz

45

Autosklo Hleďa is a regional automotive service provider based in the Czech Republic, specializing in automotive glass repair and replacement, air conditioning servicing, tire services, general auto repair, and vehicle rental. The company operates multiple branches in key cities such as Vyškov, Kroměříž, Prostějov, and Šumperk, targeting vehicle owners in the Střední Morava region. Their website reflects a professional and consistent brand presence with clear service offerings and contact information. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanisms. Security posture is moderate, with HTTPS usage and some best practices observed, but lacks explicit security headers and incident response information. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, though the website content and business operations appear credible and trustworthy. Overall, the website scores well in content quality, technical implementation, and business credibility, with room for improvement in security and domain registration transparency.

H

Hospitality Net

hospitalitynet.org

65

Hospitality Net is a well-established online media platform specializing in hospitality industry news, opinion, and event coverage. It serves a global audience of hospitality professionals, hotel brands, suppliers, and educational institutions. The website offers a comprehensive range of content including breaking news, expert opinions, supplier updates, and video interviews, positioning itself as a trusted source in the hospitality sector. Technically, the site leverages modern web technologies such as Vue.js, Appwrite backend services, and Cloudflare CDN, ensuring fast performance, mobile optimization, and a good user experience. Security posture is strong with HTTPS enforced, use of security headers, and no visible vulnerabilities, although explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity, making it a reliable resource for its target audience.

H

HotellerieSuisse

hotelleriesuisse.ch

62

HotellerieSuisse is a prominent Swiss hospitality industry association providing a wide range of services including legal advice, classification, marketing, and education support to its members. The website is professionally designed, mobile-optimized, and built on TYPO3 CMS, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy compliance evident through a comprehensive privacy policy and cookie consent mechanism. No critical vulnerabilities or security issues were detected. However, explicit contact information such as emails or phone numbers is not directly visible in the HTML content, which could be improved for better user engagement and trust. Overall, the site demonstrates a high level of professionalism and trustworthiness suitable for its target audience.

C

cistirna-matraci.cz

cistirna-matraci.cz

45

The website cistirna-matraci.cz represents a small local business specializing in mattress cleaning and disinfection services in Prague and across the Czech Republic. The company offers a variety of cleaning methods including UV-C, ozone, and soda cleaning, targeting consumers seeking hygienic mattress maintenance. The website is built on WordPress using the Divi theme, incorporating modern SEO practices and cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of a privacy policy and terms of service documents highlights compliance gaps that should be addressed. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and incident response contacts. Overall, the site is professional and trustworthy for its business scope but would benefit from enhanced compliance and security documentation.

U

UNAR

unar-prohotel.cz

46

UNAR is a Czech company specializing in manufacturing hotel furniture, including mattresses, beds, folding sofas, and accessories, with a tradition dating back to 1991. The company targets hotels, pensions, and spa houses primarily in the Czech Republic and possibly neighboring regions. Their market position is that of an established medium-sized manufacturer with over 300 completed projects, emphasizing quality and custom solutions. Technically, the website employs modern web technologies such as jQuery, Foundation framework, Owl Carousel, and integrates Google Analytics and Tag Manager for tracking, alongside reCAPTCHA for form security. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though it lacks some security headers and a security.txt file. Privacy compliance is well addressed with a cookie consent banner and a privacy policy in Czech, indicating GDPR awareness. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website is professional and trustworthy from a content and technical perspective but would benefit from improved transparency in domain registration and enhanced security headers.

P

protel systems s.r.o.

protel-air.cz

59

Protel Systems s.r.o. operates a professional hotel management software platform targeting Czech and Slovak hotel businesses. Their website showcases a comprehensive suite of hotel management tools including PMS, payment solutions, online check-in/out, digital reception, and more. The company holds certifications such as Best Western and features testimonials from reputable clients, indicating a strong market position in the hospitality technology sector. Technically, the website is built on the Solidpixels CMS platform, uses modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance, and is well optimized for mobile devices. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though the absence of a published security policy and incident response contact reduces transparency. The lack of WHOIS data is a notable concern for domain legitimacy, but the professional presentation and business information mitigate some risk. Overall, the site is trustworthy, business-focused, and compliant with GDPR requirements.

B

Broker Consulting, a.s.

brokerconsulting.cz

65

Broker Consulting, a.s. is a well-established financial and real estate consulting company based in the Czech Republic, founded in 1998. The company holds a strong market position with a large client base, high customer satisfaction (NPS 85+), and a broad portfolio of services including financial planning, real estate consulting, savings, investments, and franchise opportunities. Their website reflects a professional and comprehensive digital presence, supporting client engagement through multiple channels including contact forms, chatbots, and social media integration. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and a custom AI chatbot, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

C

Coinmate s.r.o

powercar.cz

66

Coinmate s.r.o operates a well-established European cryptocurrency exchange platform, primarily serving customers in Czechia and Slovakia. Founded in 2013, the company offers a range of services including quick cryptocurrency purchases, automated recurring buys, a professional trading platform with charts and indicators, and API access for trading bots. The platform uniquely supports markets in both EUR and CZK, positioning itself as a leading Czech crypto exchange with a strong regional presence. The website is professionally designed, mobile-optimized, and integrates modern tracking and consent management technologies.

L

LKQ CZ s.r.o.

elit.cz

73

LKQ CZ s.r.o. operates as the largest supplier of automotive parts, accessories, and related products in the Czech Republic, serving a broad audience including vehicle owners, workshops, and retail customers. The company leverages a comprehensive e-commerce platform with a wide network of physical stores and service points, positioning itself strongly in the transportation and retail sectors. The website reflects a professional and user-friendly design, supporting the business model effectively. Technically, the website employs modern web technologies such as AngularJS, Google Tag Manager for analytics, and OneTrust for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience, although some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks visible security headers and explicit privacy policies, which are important for compliance and trust. The absence of WHOIS data for the domain raises some concerns about transparency and domain legitimacy, although the website content and branding suggest a legitimate business. Overall, the website presents a solid business presence with good technical foundations but would benefit from enhanced security practices, clearer privacy documentation, and verified domain registration details to improve trust and compliance.

V

Via Musica

pragueticketoffice.com

64

Prague Ticket Office, operated by Via Musica, is an established online ticketing platform specializing in classical music concerts, opera, ballet, jazz, and cultural events in Prague. Founded in 2011, it serves tourists and cultural enthusiasts by providing ticket sales, event information, and guided tours. The website demonstrates a professional and consistent brand presence with a focus on Prague's rich cultural offerings. Technically, the website employs a modern JavaScript stack including jQuery, Select2, FancyBox, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. Hosting and domain registration are stable and consistent with the business age. From a security perspective, the site uses HTTPS with valid SSL certificates and domain transfer protections. However, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for improvement. No direct security policies or incident response contacts are published. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers and DNSSEC would enhance its security posture further.

F

FlexOffers.com

flexoffers.com

67

FlexOffers.com operates as a large-scale affiliate marketing network specializing in performance-based marketing. The company connects over 12,000 advertisers with more than 75,000 publisher programs across 65 networks, providing a comprehensive platform for digital marketing partnerships. Their business model focuses on enabling advertisers and publishers to collaborate efficiently under one roof, offering tools such as APIs, real-time reporting, and fast payouts. The website content and branding reflect a professional and established market position within the affiliate marketing industry. Technically, the website is built on WordPress using the Kadence theme and Elementor page builder, integrating modern web technologies including Bootstrap 5, jQuery, and Google Tag Manager. The site demonstrates good mobile optimization, SEO practices, and uses Cookiebot for cookie consent management, indicating a moderate level of digital maturity and compliance awareness. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks visible security headers and explicit privacy or terms of service pages. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable or protected, which reduces transparency but is not uncommon for commercial websites. Overall, the security posture is good but could be improved by adding security headers and clearer compliance documentation. The overall risk assessment is moderate with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing transparency with privacy and terms pages, improving security headers, and providing clear contact information for incident response. These steps will strengthen trust and compliance, supporting the company's reputable market presence.

S

Společnost eventových organizátorů a dodavatelů, z.s.

seod.cz

52

Společnost eventových organizátorů a dodavatelů, z.s. (SEOD) is a Czech non-profit association dedicated to supporting and developing the event industry by connecting event organizers and suppliers. The website serves as a platform for sharing knowledge, networking, and promoting the event business sector. It targets professionals and enthusiasts in the event management field, offering membership opportunities and educational resources. The organization positions itself as a community-driven entity fostering growth and collaboration within the event industry in the Czech Republic. Technically, the website is built on the Solidpixels CMS platform, utilizing modern web technologies such as Google Tag Manager for analytics, Google Fonts for typography, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR. Performance is moderate with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and provides cookie consent controls but lacks visible security headers and explicit security or incident response policies. The absence of WHOIS registration data is a notable concern, impacting domain transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and policy disclosures are recommended. Overall, SEOD presents a professional and trustworthy online presence for a niche non-profit organization, with room for enhancement in security posture and domain registration transparency to strengthen stakeholder confidence.

P

Promaledobrodruhy.cz

promaledobrodruhy.cz

63

Promaledobrodruhy.cz is a specialized Czech retailer focused on providing high-quality outdoor clothing and equipment primarily for children and families. The business operates both an e-commerce platform and a physical store located in Prague, offering a wide range of products including exclusive brands like WeeDo. Their services extend to a loyalty program, a second-hand bazaar for used outdoor gear, and a blog providing advice and community engagement. The company targets families with children who enjoy outdoor activities, positioning itself as a trusted specialist in this niche market. Technically, the website employs a custom CMS with modern JavaScript libraries, integrates multiple analytics and marketing tools, and maintains good mobile responsiveness and SEO practices. Security-wise, the site uses HTTPS and error monitoring but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, which slightly impacts domain trust assessment.

Y

Yellow Point, spol s r. o.

yellow-point.cz

32

Yellow Point, spol s r. o. is a Czech Republic-based sport and educational agency established in 1999, specializing in adrenaline experiences, sports skill development, and corporate event organization across the Czech Republic. The company offers a variety of services including ski schools, sport activities, corporate teambuilding events, and gift certificates, targeting a broad audience interested in active and educational leisure. The website is professionally designed, multilingual, and provides clear contact information and partner affiliations, indicating a solid market presence. Technically, the site uses modern JavaScript libraries, tracking tools, and implements cookie consent mechanisms, reflecting a moderate to good digital maturity. Security posture is adequate but could be improved by adding security headers and enhancing form protections. The absence of WHOIS data is a notable concern for domain transparency but does not detract significantly from the business credibility based on website content. Overall, Yellow Point presents as a trustworthy and professional service provider in the hospitality and sports education sector.

H

Hotel u Kabinky | Ubytování ve 4** hotelu v lázeňském středisku v Krkonoších

hoteljanskelazne.cz

43

Hotel U Kabinky is a small hospitality business located in the heart of the Krkonoše mountains in Janské Lázně, Czech Republic. It offers 4-star accommodation directly adjacent to a cable car station and spa colonnade, targeting tourists, families, and sports enthusiasts. The hotel provides rooms, apartments, and depandances, complemented by an on-site restaurant and a sports shop. Additionally, it operates a ski school and related sports services, enhancing its value proposition in the winter sports market. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Security posture is strong with HTTPS and security headers implemented, though no explicit security or incident response policies are published. The absence of WHOIS registration data is a notable gap that impacts trust but does not detract from the overall professional presentation. Privacy and cookie policies are present and GDPR compliant. Overall, the site demonstrates a solid business and technical foundation with room for improvement in transparency and security documentation.

ALPSPORT s.r.o. operates the website Alpsport.cz, specializing in retail sales of outdoor equipment including gear for skialp, freeride, telemark, climbing, camping, and hiking. The company positions itself as a leading provider in the Czech Republic with a broad product range and services such as equipment rental and climbing courses. The website is built on ASP.NET Web Forms technology, utilizing several JavaScript libraries including jQuery and Owl Carousel, and integrates Google Tag Manager and Smartsupp Live Chat for analytics and customer support. While the technical infrastructure is functional, some components like jQuery are outdated, and security headers could be improved. The site enforces HTTPS and includes a cookie consent mechanism, but lacks an explicit privacy policy and terms of service pages in the provided content. Overall, the security posture is moderate with room for enhancement in compliance and technical modernization. The domain WHOIS data is unavailable, likely due to privacy protection, but the website content and business information indicate a legitimate and established retail business. Strategic recommendations include updating libraries, enhancing security headers, and publishing comprehensive privacy and terms policies to improve trust and compliance.

N

Nadace ČEZ

nadacecez.cz

62

Nadace ČEZ is a well-established non-profit foundation affiliated with the ČEZ Group, focusing on supporting social, environmental, and community projects across the Czech Republic. The foundation operates various grant programs, including regional support, sports infrastructure, environmental initiatives like tree planting, and employee-driven grants. The website reflects a professional and consistent brand image with comprehensive content and clear navigation, targeting non-profit organizations, regional communities, and the general public interested in social good. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for consent management. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. The WHOIS data is unavailable, which slightly reduces trustworthiness; however, the website's structured data, social media presence, and content quality support its legitimacy. No critical vulnerabilities or adult content were detected. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and verifying domain registration details to improve trust and compliance.

F

FTV Prima spol. s r.o.

prima.cz

59

FTV Prima spol. s r.o. operates the website www.iprima.cz, a leading Czech media streaming platform offering films, TV series, live broadcasts, and premium subscription services. The site targets a general audience with family-friendly content and provides access across multiple devices including computers, tablets, mobiles, and TVs. The business model combines advertising and subscription revenue streams, positioning it as a major player in the Czech media market. Technically, the website is built on modern web technologies including Vue.js with Nuxt.js framework, leveraging Amazon Cloudfront CDN for fast content delivery. It integrates advanced analytics and consent management tools such as Gemius, Smartlook, Google Tag Manager, and Didomi, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers like Content-Security-Policy and Strict-Transport-Security in the provided HTML. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with cookie consent present but no explicit privacy policy or terms of service found in the analyzed content. WHOIS data is unavailable due to privacy protection, which is typical for commercial media sites and does not raise immediate concerns. Overall, www.iprima.cz demonstrates a strong security posture and professional digital presence with room for improvement in transparency around privacy policies and security headers. The risk level is low, but enhancing compliance documentation and security headers would further strengthen trust and regulatory adherence.

Z

ZOO Dvůr Králové a. s.

safaripark.cz

48

Safari Park Dvůr Králové is a well-established zoological park in the Czech Republic specializing in African wildlife conservation and visitor engagement. The website provides comprehensive information about animal exhibits, visitor planning, educational programs, and conservation projects. It also offers accommodation services and an online shop, indicating a diversified business model focused on tourism and conservation funding. The site targets families, tourists, and educational groups, positioning itself as a key regional attraction with reputable partnerships. Technically, the website uses a modern tech stack including jQuery, Google Analytics, Facebook SDK, and a custom CMS (Toolkit). The site is mobile-optimized with good navigation and content quality. However, some technical improvements are possible, especially in security headers and performance optimization. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, indicating GDPR awareness. However, it lacks explicit privacy policies, security headers, and incident response contacts, which are areas for improvement. No WAF or blocking mechanisms were detected, and the WHOIS data is consistent and trustworthy. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security policies and transparency would enhance its risk profile and user trust.

S

Safari Park Resort

safariparkresort.cz

44

Safari Park Resort is a hospitality business located in Dvůr Králové nad Labem, Czech Republic, offering hotel accommodation, safari camping, dining, and experiential programs. The website presents a professional and consistent brand image targeting tourists interested in safari and zoo experiences. The business is small-sized, founded in 2015, and maintains a good market position regionally with partnerships for booking and certification. Technically, the website uses modern JavaScript libraries, analytics tools, and a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS implied but missing explicit security headers and policies. Contact information is clearly provided with multiple phone numbers and emails, enhancing business credibility.

B

Bookolo system s.r.o.

bookolosystem.com

67

Bookolo system s.r.o. operates a comprehensive hotel management platform offering a suite of products including booking engine, channel manager, voucher shop, wellness & spa management, online check-in, CRM modules, payment gateway integration, and digital marketing services. The company targets hotels and accommodation providers primarily in the Czech Republic and surrounding regions, positioning itself as a trusted partner to increase direct bookings and optimize hotel operations. The website demonstrates a mature digital presence with rich content, client testimonials, and partner integrations. Technically, the site employs modern JavaScript frameworks, integrates multiple analytics and marketing tools, and enforces HTTPS with reCAPTCHA protections on forms. Privacy and cookie policies are comprehensive and GDPR compliant, with user consent mechanisms in place. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the business content and contact details strongly indicate a legitimate operation. Security posture is good but could be improved by adding explicit security policies, incident response contacts, and HTTP security headers.

M

Mercedes-Benz Financial Services Česká republika s.r.o.

operativni-leasing-mercedes.cz

55

The website www.operativni-leasing-mercedes.cz serves as an official platform for Mercedes-Benz Financial Services Česká republika s.r.o., offering operational leasing services for Mercedes-Benz vehicles in the Czech Republic. The site targets businesses and individuals interested in leasing various Mercedes-Benz models, providing a configurator tool and detailed vehicle information. The business is positioned as a key player in automotive financial services within its regional market, leveraging the strong Mercedes-Benz brand. Technically, the website employs modern JavaScript modules, Google Analytics, and Google Tag Manager for tracking, and is built with a focus on responsive design and user experience. The site loads moderately fast and is mobile-optimized, though some SEO and accessibility features could be enhanced. The absence of a detected CMS suggests a custom or proprietary platform. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The missing WHOIS data is a concern for domain legitimacy but does not directly impact the website's operational security posture. Overall, the website presents a professional and trustworthy front for Mercedes-Benz leasing services, with room for improvement in security transparency and contact information availability. The risk level is moderate, primarily due to the lack of WHOIS data and some security best practices not fully implemented.

M

Místní akční skupina Krkonoše, z. s.

maskrkonose.cz

51

Místní akční skupina Krkonoše, z. s. is a Czech non-profit organization dedicated to the sustainable development of the Krkonoše rural region. The organization supports local municipalities, non-profits, and entrepreneurs by facilitating project funding, promoting local craftsmanship, and certifying authentic regional products under the brand 'Krkonoše Originální Produkt'. Their approach leverages the LEADER method to foster community-driven growth and improve quality of life in the region. The website reflects a well-structured, content-rich platform with clear navigation and up-to-date news, targeting local stakeholders and residents. Technically, the website uses the Estofan CMS platform with JavaScript libraries including jQuery and Nivo Slider for UI elements. Google Analytics and Google Tag Manager are employed for visitor tracking, with a cookie consent mechanism that denies tracking by default, indicating a basic level of privacy compliance. The site is mobile-optimized and presents a professional design, although accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site lacks visible HTTP security headers and detailed security or incident response policies. SSL/TLS configuration details are not provided, and WHOIS data is unavailable, which reduces transparency. However, no critical vulnerabilities or suspicious content were detected. The organization’s non-profit nature justifies privacy protection in domain registration. Overall, the security posture is moderate but could be enhanced by implementing standard security headers and publishing comprehensive privacy and security policies. The overall risk assessment is low to moderate, with recommendations focusing on improving security headers, enhancing privacy disclosures, and increasing transparency in domain registration. The website is trustworthy and professional, serving its community development mission effectively.

The website www.janskelazne.cz serves as an official tourism and accommodation information portal for Janské Lázně and the SkiResort Černá hora-PEC, the largest ski resort in the Czech Republic. It offers online booking services with promotional discounts on ski passes and leisure activities, targeting tourists and visitors interested in winter sports and summer leisure in the Krkonoše region. The site demonstrates a consistent brand presence and provides clear contact information, reinforcing its role as a local tourism information center with over two decades of experience. Technically, the website employs a traditional web stack including jQuery, jQuery UI, Google Analytics, Google Tag Manager, and Google Maps API, indicating moderate digital maturity. The site is mobile-optimized with good navigation and content relevance, although some accessibility features could be improved. Performance is moderate, with external dependencies on trusted providers for fonts and analytics. From a security perspective, the site uses HTTPS and standard tracking scripts but lacks explicit security headers and privacy/cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be addressed to enhance trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security practices, and verification of domain registration details to strengthen its security posture and business credibility.

S

Státní léčebné lázně Janské Lázně

restauraceterra.cz

62

Státní léčebné lázně Janské Lázně operates Restaurace Terra, a restaurant offering a high-quality culinary experience emphasizing local and seasonal ingredients in the Czech spa town of Janské Lázně. The website presents a professional and consistent brand image, targeting visitors seeking traditional and regional gastronomy within a relaxing mountain environment. Technically, the site is built on WordPress with Elementor, integrating modern web technologies and analytics tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS and security headers, though no explicit security or incident response policies are published. Privacy compliance is well addressed with cookie consent and privacy policies in Czech language. However, the WHOIS data for the domain www.janskelazne.com is missing, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and professionally maintained but would benefit from clarifying domain registration and publishing security policies.

M

Multi Digital

multidigital.ch

62

Multi Digital is a Swiss-based digital agency specializing in the development, programming, and implementation of web and software solutions tailored to regional, national, and international clients. The company emphasizes user-friendly, personalized digital experiences that support client strategies. As part of the Galledia Group, Multi Digital benefits from a strong regional presence and professional backing. The website reflects a modern, professional design with clear navigation and comprehensive service offerings including software development, e-commerce, marketing, and web design. Technically, the site uses modern frameworks like Bootstrap, integrates Google Tag Manager and Metricool for analytics and marketing, and employs a robust cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

E

Elk River Systems

eventgroovefundraising.com

61

Eventgroove is a medium-sized technology company specializing in providing an all-in-one online fundraising platform tailored for nonprofits. Their platform supports various fundraising methods including peer-to-peer campaigns, auctions, raffles, and crowdfunding, with a strong emphasis on ease of use and customer support. The company positions itself as a cost-effective solution with no hidden fees, appealing to small and large nonprofits alike. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the website is built on WordPress using the Divi theme and enhanced with NitroPack for performance optimization. It integrates modern web technologies and third-party services such as Vimeo for video content and HubSpot for marketing and analytics. The site demonstrates good SEO and accessibility practices, with fast loading times and responsive design. From a security perspective, the site enforces HTTPS and employs standard security headers, contributing to a strong security posture. However, it lacks a publicly available security policy and incident response information, which are recommended for enhanced transparency and trust. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a trustworthy and professional image with comprehensive privacy and cookie policies. The absence of WHOIS registration data is a notable concern, suggesting the need for further verification of domain legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and improving incident response visibility to strengthen security and compliance posture.

Neon One is a technology company specializing in providing integrated software solutions for nonprofit organizations. Their platform combines donor management, fundraising, memberships, events, and ticketing into a unified system, positioning them as a key player in the nonprofit software market. Founded in 2016, the company targets nonprofit organizations seeking streamlined management tools to enhance donor engagement and event coordination. The website reflects a professional and consistent brand image, supported by structured data and social media presence on Facebook and LinkedIn. Technically, the website is built on WordPress CMS and leverages a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Pardot marketing automation, AdRoll retargeting, and Visual Website Optimizer for A/B testing. Hosting and DNS services are provided by GoDaddy and Cloudflare respectively. The site demonstrates good SEO optimization and mobile responsiveness, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain registration protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no published privacy policy or terms of service found in the analyzed content, though a cookie consent mechanism is implemented via CookieYes, indicating some level of privacy compliance. No incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and compliance. Overall, Neon One's website presents a trustworthy and professional front for their nonprofit software services, with a solid technical foundation and marketing integration. To further strengthen their security posture and compliance, it is recommended to publish comprehensive privacy and security policies, enable DNSSEC, and implement security headers. Enhancing accessibility and providing clear contact information would also improve user trust and engagement.