Security Directory

K

Kup merch!

kupmerch.cz

55

Kup merch! is a Czech Republic based e-commerce platform specializing in the sale and production of merchandise across various projects. The website targets a general audience interested in branded merchandise, offering a range of products including clothing and accessories. The business operates primarily online with a niche market focus. Technically, the site uses a modern technology stack including jQuery, Google reCAPTCHA for bot protection, and Google Analytics for traffic analysis. The site is built on the Sirius CMS platform and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers are not explicitly detected. Privacy compliance is partial, with no clear privacy policy or terms of service pages found, and no explicit contact information for security or business inquiries. WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

S

Ski Classics

skiclassics.com

53

Ski Classics is an established international series of long-distance cross-country ski races in classic style, operating since 2011 with a domain registered since 2003. The website serves as an information hub for the events, targeting skiing enthusiasts and athletes. The business is positioned as a niche sports event organizer with a medium-sized operational scale, primarily focused on transportation and sports sectors. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies including Google Analytics, Tag Manager, and reCAPTCHA for bot protection. The site demonstrates good SEO and mobile optimization, though accessibility is basic. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and DNSSEC. No incident response or security policy is published, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, with room to enhance security and transparency.

4

4WORKS

posunemevasvys.cz

47

4WORKS is a Czech-based digital agency specializing in creating professional websites, e-commerce platforms, applications, and comprehensive online marketing services. With a decade of experience, they position themselves as a trusted partner for businesses seeking to enhance their online presence. The website showcases a modern, well-structured design with clear navigation and extensive service offerings, targeting primarily business clients in the Czech Republic. Technically, the site is built on WordPress using the Avada theme, integrating multiple analytics and marketing tools such as Google Analytics, Matomo, Hotjar, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and several security headers present, although explicit security policies and vulnerability disclosure mechanisms are absent. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional presentation and active content mitigate this risk. Overall, the site demonstrates a solid digital maturity with room for improvement in privacy compliance and security transparency.

J

Jak třídit – Informace ze světa třídění, recyklace a využití odpadů

jaktridit.cz

42

Jaktridit.cz is a Czech Republic-based informational and educational website dedicated to waste sorting, recycling, and environmental awareness. It serves as a comprehensive resource for the general public, providing detailed guides, interactive tools, and an e-shop for materials supporting waste sorting efforts. The website is well-established in its niche, with consistent branding and high-quality content tailored to a broad audience interested in ecological topics. Technically, the site is built on WordPress with modern web technologies such as Bootstrap, jQuery, and Lightbox2. It employs Google Tag Manager and analytics tools for tracking and marketing purposes. The site is mobile-optimized, accessible, and SEO-friendly, offering a smooth user experience. HTTPS is enforced, and cookie consent mechanisms are implemented, reflecting good privacy compliance. From a security perspective, the site demonstrates solid fundamentals with HTTPS and no visible vulnerabilities or exposed sensitive data. However, it lacks some advanced security headers and does not publish a security policy or incident response information. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly impacts trustworthiness. Overall, Jaktridit.cz presents a trustworthy, professional, and user-friendly platform with strong content quality and privacy practices. Strategic improvements in security headers, transparency on incident response, and WHOIS data availability would enhance its security posture and business credibility.

E

EKO-KOM, a.s.

tonda-obal.cz

40

Tonda Obal is an educational website focused on teaching children about waste sorting and recycling, supported by the Czech company EKO-KOM, a.s. The site targets children of various age groups, parents, and teachers through dedicated subdomains and offers games, coloring pages, and informative content. The business model centers on environmental education and awareness, positioning itself as a niche resource within the Czech Republic's educational and non-profit sectors. Technically, the website uses a combination of Bootstrap 3, jQuery Mobile, and Google Analytics, hosted likely by Active24. The site is mobile-optimized and performs moderately well, though it uses somewhat dated frontend frameworks. The cookie consent mechanism is implemented, reflecting some GDPR compliance efforts, but lacks a formal privacy policy and terms of service pages. From a security perspective, the site enforces HTTPS and uses cookie consent with default denial of analytics tracking. However, it lacks security headers and explicit contact information for incident response or data protection officers. No vulnerabilities or suspicious patterns were detected, and the domain registration is consistent and mature, supporting the site's legitimacy. Overall, the website is a trustworthy, child-safe educational platform with good content quality and moderate technical implementation. Improvements in privacy documentation, security headers, and contact transparency would enhance compliance and security posture.

R

RAAB Computer s.r.o.

raabkey.cz

50

RAAB Computer s.r.o. operates the RaabKey website, providing modular access control systems primarily for residential and commercial properties in the Czech Republic. The company has a strong market position as a Czech manufacturer with over 20 years of experience and hundreds of references. Their product offerings include RFID readers, chips, code keypads, and a web-based management application, targeting both B2B and B2C customers. The website is professionally designed with clear navigation and relevant content tailored to their audience. Technically, the site uses common JavaScript libraries and frameworks, with basic mobile optimization and SEO practices in place. Security posture is moderate, with HTTPS enforced and cookie consent implemented, but lacks explicit security policies or vulnerability disclosures. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

město Tábor

visittabor.eu

50

The website www.visittabor.eu serves as the official tourism portal for the city of Tábor, Czech Republic. It provides comprehensive information about the city's attractions, culture, accommodation, sightseeing, gastronomy, and practical visitor details. The site targets tourists and visitors interested in exploring Tábor and the South Bohemian region. The business model is government-supported tourism promotion, positioning itself as a key regional tourism information source with official city branding and certifications such as A.T.I.C. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and tracking tools like Google Analytics and Adform. It uses the Nette Framework CMS inferred from form structures and AJAX usage. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate, with room for improvement in security headers and accessibility. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are missing, and there is no explicit security policy or incident response information published. The use of third-party tracking scripts is transparent with user consent. Overall, the security posture is good but could be enhanced with additional headers and documented policies. The overall risk assessment is low, with the site demonstrating legitimacy through official contact information, consistent branding, and certifications. The lack of WHOIS data is due to registry privacy policies and does not detract from trustworthiness. Strategic recommendations include implementing security headers, publishing a security policy, enhancing accessibility, and adding a vulnerability disclosure mechanism to further strengthen security and compliance.

Z

Zoo Liberec

zooliberec.cz

57

Zoo Liberec is a well-established zoological garden in the Czech Republic, founded in 2000, offering a wide range of animal exhibits, educational programs, and conservation initiatives. The website reflects a mature digital presence with multilingual support and e-commerce capabilities for ticketing and merchandise. Technically, the site is built on WordPress with modern plugins and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with a clear GDPR policy and cookie management. Overall, the site is trustworthy, professional, and serves its audience effectively.

B

Školní batohy, cestovní kufry, tašky přes rameno, brašny | Bagalio.cz

bagalio.cz

63

Bagalio.cz is an e-commerce retail website specializing in school backpacks, travel suitcases, shoulder bags, and briefcases, targeting primarily the Czech Republic market. The website is part of a broader network of localized partner sites serving Central and Eastern European countries. The business appears to be medium-sized, established since 2016, and positioned as a leading retailer in its niche within the Czech Republic. The site uses Magento 2 as its e-commerce platform and integrates multiple third-party extensions and analytics tools to enhance user experience and marketing capabilities. Technically, the website is well-structured with good mobile optimization and moderate performance, leveraging Cloudflare DNS and New Relic monitoring for operational insights. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit privacy and security policies publicly available on the site. No contact information or incident response details are found, which could impact user trust and compliance. Overall, the site is professional and functional but would benefit from enhanced transparency and security documentation.

Č

Český hosting

cesky-hosting.cz

78

Český hosting is a Czech Republic-based web hosting and domain registration provider targeting both beginners and professionals. The company offers web hosting services, domain registration and management, and expert consultancy in hosting. It positions itself as a reliable provider with a high customer satisfaction rating and a strong local market presence. The website is professionally designed, mobile-optimized, and uses modern marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. However, it lacks visible privacy and cookie policies, which impacts privacy compliance scores. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, but security policies and incident response information are not disclosed. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but does not negate the legitimacy of the business based on website content and customer reviews. Overall, the site is safe, professional, and well-positioned in the Czech hosting market.

T

THINline s.r.o.

websynergy.cz

66

WebSynergy, operated by THINline s.r.o., is a Czech-based technology service provider specializing in custom web design, e-commerce solutions, and digital marketing. With over 20 years of experience and more than 500 projects completed, the company targets businesses seeking modern, responsive websites and effective online marketing strategies. Their offerings include proprietary CMS technology, hosting services, and comprehensive website management. The website reflects a professional and trustworthy business with clear contact information and client testimonials, positioning them as a reputable player in the Czech web services market. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Google Analytics, reCAPTCHA v3, and Visual Website Optimizer for marketing and analytics purposes. The site is hosted on a Czech hosting provider and uses a proprietary CMS platform. Performance and mobile optimization are excellent, with good SEO and accessibility features. However, some security headers are missing, and no explicit security policy or incident response information is published. Security posture is solid with HTTPS enforced and secure form handling via reCAPTCHA, but improvements are recommended in HTTP security headers and transparency around security policies. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned privacy policies. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy. Overall, WebSynergy demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

L

Latinotype

latinotype.com

54

Latinotype is a Chile-based type foundry established in 2010, specializing in font design, licensing, and custom typography services. It holds a strong market position with a portfolio of over 5,000 fonts used globally in advertising, branding, and digital design. The website demonstrates a mature digital presence with professional design, clear navigation, and multimedia content showcasing their products and clients. Technically, the site is built on WordPress with modern plugins and includes privacy-conscious analytics (Matomo) and spam protection (Google reCAPTCHA). Security posture is good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data for the domain is a concern and should be investigated to confirm domain legitimacy. Overall, the site is professional and trustworthy, serving a specialized audience of designers and branding professionals.

C

Candid

guidestar.org

60

Candid operates GuideStar, a leading nonprofit data platform providing comprehensive information on over 1.8 million IRS-recognized tax-exempt organizations. The platform serves donors, grantmakers, nonprofits, and businesses by offering nonprofit profiles, Seal of Transparency, research tools, and API access. The website is professionally designed, mobile-optimized, and integrates advanced analytics and marketing technologies such as Google Tag Manager, Facebook Pixel, Segment Analytics, and Visual Website Optimizer. Security posture is strong with HTTPS enforced and secure forms, though explicit security headers and policies are not publicly disclosed. WHOIS data is unavailable due to privacy or query failure, but the domain and website content align with a legitimate, established nonprofit entity. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

B

BR Numismatika v.o.s.

brnumismatika.cz

62

BR Numismatika v.o.s. operates a specialized e-commerce platform focused on numismatics and phaleristics, offering coins, medals, banknotes, orders, decorations, and antiques. The company targets collectors and investors interested in these collectibles, providing services such as authenticity assessment, expert consultation, coin cleaning, and certification mediation. The website is professionally designed with clear navigation and good content quality, supporting both Czech and English languages to reach a broader audience. Technically, the site is built on the Prestashop platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cloudfront CDN, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and cookie consent mechanisms to enhance privacy compliance. WHOIS data is not publicly available, likely due to privacy protection, which is common for small retail businesses. Overall, the website presents a trustworthy and professional front for its niche market.

Správa a údržba silnic Jihomoravského kraje is a regional government organization responsible for the maintenance and management of roads in the Jihomoravský region of the Czech Republic. The website provides comprehensive information about their services including summer and winter road maintenance, public tenders, and contact details. The organization is well-established with a domain registered since 2001, reflecting a stable presence in the transportation sector. The site targets local residents, businesses, and public institutions requiring road maintenance services or information. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap 5 and jQuery. It integrates Google services including Fonts, Analytics, and reCAPTCHA for security and user experience enhancements. The site is mobile optimized and includes accessibility features, although some improvements could be made. Performance is moderate with good SEO practices in place. From a security perspective, the site uses HTTPS with a valid SSL configuration and employs Google reCAPTCHA v2 Invisible on its contact form to prevent spam. However, no explicit security headers were detected, and there is no visible security or incident response policy published on the site. The cookie consent mechanism complies with GDPR requirements, providing an opt-out approach. Overall, the website is professional, trustworthy, and serves its public service function effectively. Recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the security posture and user trust.

M

MAS Slavkovské bojiště, z.s.

slavkovskebojiste.cz

53

MAS Slavkovské bojiště, z.s. is a local action group operating as a non-profit organization focused on regional development in the Slavkovské bojiště area of the Czech Republic. The organization facilitates partnerships among municipalities, entrepreneurs, associations, and citizens to promote community projects and manage grants. The website serves as an official information portal providing updates on projects, funding opportunities, and organizational documents. The presence of logos from government and EU entities, as well as membership in national MAS associations, supports its legitimacy and regional influence. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap 5, Swiper.js, and Photoswipe, indicating a contemporary and responsive design. The site is mobile optimized and accessible, with a cookie consent mechanism implemented to comply with privacy regulations. However, explicit privacy and terms of service pages are not found, and no security.txt or incident response information is published. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible HTTP security headers and detailed privacy policies, which are areas for improvement. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, though the website content and external affiliations suggest a trustworthy entity. Overall, MAS Slavkovské bojiště presents a professional and credible online presence for a regional non-profit organization, with recommendations to enhance privacy disclosures, security headers, and domain registration transparency to strengthen trust and compliance.

R

Raab Computer s.r.o.

affc-jmk.cz

59

The website www.affc-jmk.cz represents the Audit Family Friendly Community initiative focused on supporting municipalities in the Jihomoravský kraj region of the Czech Republic. The platform provides audit services aimed at improving family life conditions through systematic analysis and implementation of selected measures. The site is professionally designed, with clear navigation and relevant content primarily in Czech, targeting local government bodies and communities. Social media presence on Facebook, Twitter, and YouTube supports outreach and engagement. Technically, the website uses common web technologies such as jQuery, FontAwesome, Fancybox, Remodal, and BxSlider for UI components and interactivity. The site is mobile optimized with good SEO practices but lacks visible advanced security headers and analytics tools. Cookie consent is implemented, indicating attention to privacy compliance, though no explicit terms of service or incident response policies are present. From a security perspective, the site is accessible without WAF or blocking mechanisms detected. However, the absence of WHOIS data for the domain reduces transparency and trust slightly. No critical vulnerabilities or exposed sensitive data were found, but security headers and SSL configuration details are not visible in the provided data. Privacy policies and cookie usage are clearly stated, supporting GDPR compliance. Overall, the website presents a trustworthy and professional front for a regional government/non-profit audit initiative. The main risks relate to limited domain registration transparency and lack of explicit security policies. Strategic improvements in security headers, incident response information, and WHOIS transparency would enhance trust and compliance.

V

VODÁRENSKÁ AKCIOVÁ SPOLEČNOST, a.s.

vodarenska.cz

55

VODÁRENSKÁ AKCIOVÁ SPOLEČNOST, a.s. is a well-established Czech water utility company founded in 1998, providing comprehensive water supply and sewage services across multiple regional divisions. The company maintains a professional and content-rich website offering customer portals, emergency notifications, and detailed service information targeted at residential customers, municipalities, and business clients. The website is built on WordPress with modern plugins and integrates Google Maps and social media for enhanced user engagement. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and explicit privacy mechanisms are recommended. Overall, the domain registration data aligns with the company's claims, supporting legitimacy and trustworthiness.

E

ENVIPARTNER, s.r.o.

portalobce.cz

44

The website www.portalobce.cz serves as a comprehensive digital platform for municipal services in the Czech Republic, offering a suite of modules including flood management, GIS mapping, strategic planning, and citizen engagement tools. The business is positioned as an important player in the government sector, targeting both public administration and citizens with specialized digital solutions. The platform integrates multiple applications and services, some developed locally, enhancing municipal governance and public safety. Technically, the website employs a modern frontend stack with Bootstrap, jQuery, Font Awesome, and integrates third-party analytics tools such as Google Analytics and Hotjar. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, the absence of a CMS or hosting provider information limits deeper infrastructure insights. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and explicit privacy and cookie policies, which are critical for GDPR compliance. The WHOIS data is unavailable, which raises concerns about domain transparency and trustworthiness. No direct contact information or incident response channels are provided, limiting user trust and security communication. Overall, the website is functional and professionally designed but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

A

ARVA

arva-equipment.com

53

ARVA is a European company specializing in avalanche safety equipment, including avalanche airbags, transceivers, and backpacks, with over 40 years of expertise. The company targets mountain sports enthusiasts and professionals, offering both products and services such as maintenance, rental, and cartridge refills. Their website reflects a mature digital presence built on Prestashop and React technologies, integrating multiple marketing and analytics tools to engage users and track performance. Security posture is solid with HTTPS and secure AJAX calls, though improvements in security headers and privacy compliance are recommended. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, but the website content and branding strongly indicate a reputable business. Overall, the site is professional, content-rich, and user-friendly, but could enhance trust by publishing privacy and terms policies and improving transparency around data protection.

P

Pigeon Mountain Industries, Inc.

pmirope.com

72

PMI Rope, operated by Pigeon Mountain Industries, Inc., is a well-established manufacturer and retailer specializing in life safety ropes, gear, and equipment for vertical applications such as rescue, climbing, and rope access. With over 40 years of industry experience, the company serves a specialized audience including rescuers, climbers, and technicians. Their business model combines product manufacturing with e-commerce sales and training services, positioning them as a niche leader in safety and rescue equipment. The website reflects a professional and consistent brand image with comprehensive product offerings and educational resources. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern JavaScript libraries and marketing tools. It is hosted behind Cloudflare DNS and CDN services, ensuring good performance and availability. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, lacking explicit privacy and cookie policies or consent mechanisms, which should be addressed to meet GDPR and other regulations. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

B

Bell Textron Inc.

bellflight.com

67

Bell Textron Inc. is a leading manufacturer of vertical lift aircraft, including commercial and military rotorcraft. The company has a rich history spanning approximately 90 years and operates as a subsidiary of Textron Inc. Their website showcases a comprehensive portfolio of products and services, including innovative rotorcraft technologies, training, maintenance, and support. The site targets aviation professionals, military clients, and commercial customers globally. Technically, the website employs modern JavaScript frameworks, multimedia content, and integrates with marketing and analytics platforms such as Google Tag Manager and HubSpot. The hosting infrastructure leverages Akamai CDN and service workers for performance optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional presentation and corporate affiliations. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing incident response contacts to further strengthen security transparency.

CMC PRO is a specialized company focused on manufacturing and distributing professional rescue equipment and providing rescue training courses. Their product portfolio includes rescue harnesses, ropes, pulleys, and hardware tailored for firefighters, search and rescue teams, and other rescue professionals. The company positions itself as a trusted provider in the rescue and safety industry with a medium-sized operational scale and a history dating back to at least 2012. Technically, the website is built on WordPress and leverages modern web technologies including Gravity Forms for data collection, HubSpot for marketing automation, and Microsoft Clarity for user behavior analytics. The site is mobile-optimized with good SEO practices and uses HTTPS with strong security headers, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as enforcing HTTPS, implementing security headers, and avoiding exposure of sensitive data. However, there is no publicly available security policy or incident response information, which could be improved to enhance transparency and trust. The absence of WHOIS domain registration data is a concern and warrants verification to confirm domain legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. The risk profile is moderate due to the WHOIS data gap and limited published security policies. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to strengthen security posture and business credibility.

H

Harken Safety & Rescue

harkenindustrial.com

64

Harken Safety & Rescue is a specialized division of Harken, Inc., focusing on manufacturing and distributing industrial safety and rescue equipment designed for rope access, fall protection, arborist work, commercial marine, and material handling sectors. The company leverages over 50 years of experience in sailing equipment technology to produce durable, lightweight, and efficient products that enhance safety and operational efficiency. Their market position is strong within niche industrial safety markets, supported by a portfolio of subsidiary brands and comprehensive product support resources. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Iubenda for cookie consent management. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and rich content. Privacy compliance is robust with GDPR-aligned policies and explicit cookie consent mechanisms. Security posture is solid with HTTPS enforced, use of reCAPTCHA on forms, and anonymized analytics tracking. However, the absence of WHOIS transparency and lack of explicit security policies or incident response contacts are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for Harken Safety & Rescue, though enhancing WHOIS transparency and publishing security incident response information would further strengthen trust and compliance.

K

KONG spa

kong.it

50

KONG spa is a well-established Italian manufacturer specializing in personal protective equipment (PPE) such as carabiners, helmets, harnesses, and safety gear for outdoor activities, professional rescue, and work at height. With a history dating back to 1830, the company holds a strong market position supported by exclusive distribution partnerships and a comprehensive product catalog. The website reflects a mature digital presence with modern technologies, good mobile optimization, and clear navigation. Security posture is solid with HTTPS, form validation, and consent management, though some security headers could be enhanced. Privacy compliance is robust with clear policies and cookie consent mechanisms. Overall, KONG spa demonstrates high business credibility and professionalism.

Rocksnake GmbH & Co. KG is a specialized manufacturer and retailer of rescue equipment and sports gear, focusing on innovative, practical solutions for rescue operations, mountain sports, and motorbike/enduro sports. The company emphasizes European manufacturing and sustainability, targeting professional rescue teams and sports enthusiasts. Their market position is that of a niche leader in Europe with strong partnerships and event participation. Technically, the website is built on the Contao CMS platform with modern JavaScript libraries and includes a cookie consent mechanism and HTTPS security. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency. Security posture is generally good with HTTPS and CSRF protections, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, but the WHOIS inconsistency slightly reduces trustworthiness.

T

TYROMONT Alpin Technik GmbH

tyromont.com

39

TYROMONT Alpin Technik GmbH is a specialized manufacturer and trader of alpine rescue equipment with a history spanning approximately 70 years. The company serves a global clientele including mountain rescue, ski patrol, air rescue, and height rescue organizations. Their website presents a professional and comprehensive product catalog, clear contact information, and relevant business documentation such as terms of business and data protection policies. Technically, the website employs modern JavaScript libraries like jQuery and Flickity, and uses Google Analytics with consent-based loading. The site is mobile-optimized and well-structured, providing a good user experience. However, the absence of WHOIS registration data for the domain www.tyromont.com is a notable inconsistency that impacts domain trustworthiness. Security headers are not visibly implemented, and no explicit cookie consent mechanism is present, which are areas for improvement. Overall, the website is professional and trustworthy from a business perspective but could enhance its security posture and privacy compliance.

P

Petzl

petzl.com

72

Petzl is a globally recognized brand specializing in manufacturing and retailing technical gear for sport climbing, professional work-at-height, and rescue operations. The website targets both sports enthusiasts and professionals, offering a wide range of equipment including headlamps and safety systems. The brand maintains a strong market position with consistent branding and a comprehensive online presence across multiple countries and languages. The website is built on the Salesforce Visualforce platform, integrating modern JavaScript libraries and tracking tools such as Google Tag Manager and OneTrust for cookie consent. The technical infrastructure supports good mobile optimization and moderate performance, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and input sanitization, though the absence of explicit security policies and incident response contacts is noted. WHOIS data is incomplete, which is unusual for a brand of this stature, but the website content and social media presence strongly support legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its target audience.

A

Alpine Rettung Schweiz

alpinerettung.ch

52

Alpine Rettung Schweiz is a well-established Swiss non-profit foundation specializing in alpine rescue operations. Supported by key partners such as Rega and the Swiss Alpine Club (SAC), it operates a network of 84 rescue stations and approximately 3,400 volunteer rescuers. The organization serves as the primary terrestrial alpine rescue entity for most Swiss cantons, providing rapid response and comprehensive training programs. The website reflects a mature digital presence built on TYPO3 CMS, offering clear navigation, multilingual support, and professional content including news, publications, and organizational information. Security posture is solid with HTTPS and secure external linking, though it lacks explicit security policies and cookie consent mechanisms. Overall, the site demonstrates high trustworthiness and professionalism, aligning well with the organization's mission and market position.

P

PAX

pax-bags.de

54

PAX-Bags.com represents a medium-sized manufacturing business specializing in emergency backpacks, insert bags, and accessories with custom sizing and interior fittings. The company targets organizations requiring specialized emergency equipment, positioning itself as a niche manufacturer in this sector. The website is built on TYPO3 CMS with a modern technology stack including Bootstrap and jQuery, and integrates privacy compliance tools such as Usercentrics CMP and Google Tag Manager with consent mode. The site is professionally designed with good navigation and mobile optimization, though SEO is limited by a noindex robots directive. From a security perspective, the website enforces HTTPS and uses consent management for privacy compliance, but lacks explicit security headers and detailed security or incident response policies. No contact emails or phone numbers are clearly presented on the homepage, which may impact user trust and support accessibility. The absence of WHOIS data for the domain is a notable anomaly, reducing domain registration trustworthiness despite the professional website presence. Overall, the site demonstrates a solid technical foundation and privacy compliance but would benefit from enhanced security headers, clearer contact information, and resolution of WHOIS data visibility to improve trust and legitimacy. Strategic improvements in these areas would strengthen the security posture and business credibility.

J

Jihomoravský kraj

jmk.cz

44

Jihomoravský kraj operates as the official regional government authority for the South Moravian Region in the Czech Republic. The website serves as a comprehensive information portal targeting citizens, businesses, municipalities, and non-profit organizations, offering news, public service information, grant details, and contact resources. The site is well-branded and consistent with government standards, reflecting a large, established public sector entity founded in 2006. Technically, the website is built on ASP.NET WebForms with a mix of modern JavaScript libraries such as jQuery, Fancybox, and SweetAlert2, alongside integrations for Facebook SDK and Google Tag Manager. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility and SEO features. Hosting details are not explicitly identified. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks visible security headers like CSP or HSTS and does not publish a security policy or incident response contacts. Cookie consent mechanisms are absent, which is a compliance gap under GDPR. The domain WHOIS data is consistent and trustworthy, supporting the legitimacy of the site. Overall, the website presents a professional and trustworthy government portal with room for improvement in privacy compliance and security hardening. Strategic enhancements in security headers, cookie consent, and incident response transparency would strengthen its security posture and regulatory adherence.

S

Statutární město Brno

kamzasportemvbrne.cz

44

The website 'Kam za sportem v Brně' is an official informational portal supported by the Statutární město Brno (City of Brno) that provides comprehensive listings and schedules of top sports clubs and venues in Brno. It targets residents and visitors interested in sports activities, offering an interactive map, club information, and event details. The platform is positioned as a local government resource to promote sports engagement within the city. Technically, the site employs a moderate technology stack including jQuery, bxSlider for UI components, Google Tag Manager for analytics, and a cookie consent mechanism compliant with GDPR principles. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and implements cookie consent with marketing cookies disabled by default, indicating a privacy-aware approach. However, it lacks published privacy policies, terms of service, and incident response information, which are recommended for improved compliance and user trust. No vulnerabilities or exposed sensitive data were found in the content. Overall, the website is trustworthy and professionally maintained, with a clear business purpose aligned with city government objectives. Strategic improvements include publishing privacy and security policies, enhancing accessibility, and adding security headers to strengthen the security posture and compliance standing.

M

Město Čelákovice

celakovice.cz

56

Město Čelákovice operates as the official municipal government website for the town of Čelákovice in the Czech Republic. It provides residents and visitors with comprehensive information about city administration, public services, events, and contact details. The website is positioned as a trusted local government resource with a focus on transparency and community engagement. The business model is public service oriented, targeting local citizens and stakeholders. Technically, the website uses the Public4u CMS platform with common JavaScript libraries such as jQuery and Swiper.js for UI enhancements. The site is mobile optimized and provides a moderate performance experience. SEO and accessibility are basic but functional. The site employs HTTPS and a cookie consent mechanism, reflecting awareness of privacy regulations. From a security perspective, the site has a good SSL configuration but lacks explicit security headers and published security policies. No vulnerabilities or tracking scripts were detected, indicating a privacy-conscious approach. The absence of WHOIS data reduces domain trust slightly, but the official nature and content quality support legitimacy. Overall, the site is a well-maintained municipal portal with good content quality and user experience. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and compliance.

G

Galileo Corporation s.r.o.

igalileo.cz

54

Galileo Corporation s.r.o. is a well-established Czech technology company specializing in comprehensive digital solutions for public administration, including municipalities, schools, and contributory organizations. With over 23 years of experience and a client base exceeding 5,500 entities across the Czech and Slovak Republics, the company offers a robust portfolio of services such as digital official boards, websites, communication tools, electronic file services, visual identity, and AI-powered products. Their market position is strong, supported by consistent branding, professional content, and positive customer testimonials. Technically, the website employs modern JavaScript libraries including jQuery, Bootstrap, Swiper.js, and custom CMS solutions with AI integration. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security practices include HTTPS enforcement, CAPTCHA on forms, and cookie consent mechanisms, although explicit security headers are not confirmed and should be reviewed. From a security perspective, the site shows good maturity with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with comprehensive GDPR-aligned policies and cookie consent. Contact information is clearly presented, enhancing business credibility. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the website scores highly in content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional digital presence for its target audience. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security standards.

J

JIZERSKÁ, obecně prospěšná společnost

jnlm.cz

49

The website www.jnlm.cz represents the Bedřichovský Night Light Marathon, a niche winter sports event organizer based in the Jizera Mountains, Czech Republic. The site provides event information, registration links, and live updates targeting winter sports enthusiasts, particularly cross-country skiers interested in night skiing. The business operates as a small regional event organizer with a clear focus on promoting and managing this annual marathon event. Technically, the website employs a modern front-end stack including jQuery, Bootstrap, Slick Carousel, and FancyBox, with Google Fonts and reCAPTCHA integration. The site is mobile optimized with a responsive design and includes cookie consent mechanisms compliant with GDPR. Performance is moderate with basic SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, but improvements in security headers and transparency are recommended. The absence of WHOIS data limits domain trust verification, though the website content and contact information appear legitimate. Overall, the site is professionally presented, trustworthy, and compliant with privacy regulations, but would benefit from enhanced security practices and domain registration transparency to improve its risk profile and trustworthiness.

T

Tým silniční bezpečnosti

nakolejensprilbou.cz

45

The website 'Na kole jen s přilbou' is a Czech Republic-based cycling safety awareness project managed by the Tým silniční bezpečnosti (Road Safety Team). It focuses on educating cyclists about the importance of helmet use and safe cycling practices through articles, news, downloadable materials, videos, and events. The project is supported by multiple government and safety organizations, indicating a strong partnership ecosystem and a credible market position within the transportation safety sector. The domain has been active since 2012, consistent with the project's maturity and content depth. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, Slick Carousel, and Google Fonts, with Google Analytics and Facebook Pixel for tracking. The site is mobile optimized and uses HTTPS with Google reCAPTCHA for form security. However, it lacks explicit privacy and terms of service pages and does not display advanced security headers, which are areas for improvement. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and cookie consent with granular categories. No critical vulnerabilities or WAF blocking were detected. The absence of a published privacy policy and terms of service, as well as missing explicit contact information, slightly reduce privacy compliance and business credibility scores. Overall, the website is a trustworthy, well-branded educational platform with good technical implementation and moderate security posture. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact channels for incident response to improve compliance and trust further.

I

infocount, s.r.o.

infocount.cz

44

infocount, s.r.o. is a Czech IT company specializing in comprehensive IT solutions and consultancy, with a focus on electronic signature services, web publishing systems, and web development. Established in 2003, the company leverages strong academic ties and offers services to both private and government sectors, maintaining a solid market presence with over two decades of experience. Their key offerings include PKI-based security solutions, intranet and web application development, and eBusiness tools. Technically, the website is built on WordPress with modern web technologies such as PHP, Java, and JavaScript frameworks, providing a responsive and user-friendly experience. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection but lacks some advanced security headers and published security policies. The absence of WHOIS data reduces domain trustworthiness, but the detailed company information and client references enhance credibility. Overall, the website is professional and functional, with room for improvement in privacy compliance and security transparency.

P

PERFECT SYSTEM

colosseum.eu

66

PERFECT SYSTEM operates as a family-owned business specializing in IT solutions for ticket sales in the Czech Republic, offering the Colosseum reservation software and related services. The company holds a leading market position in ticketing solutions for cultural events, providing software development, hardware supply, marketing, and customer support. Their target audience includes event organizers such as theaters, concert venues, museums, and festivals. The website reflects a mature digital presence with professional design and clear navigation, supporting both desktop and mobile users effectively. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, ensuring good SEO and user experience. Security posture is solid with HTTPS and reCAPTCHA integration, though there is room for improvement in security headers and explicit policy disclosures. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website and business demonstrate high credibility and professionalism, with clear contact channels and trust signals. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a terms of service page to further strengthen compliance and trust.

M

Město Rajhrad

rajhrad.cz

48

Město Rajhrad operates as the official municipal government website for the city of Rajhrad in the Czech Republic, providing residents and visitors with information about city services, local news, events, and administrative contacts. The website is built on WordPress CMS and leverages common web technologies such as Bootstrap and jQuery to deliver a responsive and user-friendly experience. The content is primarily in Czech and targets local citizens and stakeholders. Despite the lack of WHOIS data, the website presents itself as a legitimate government entity with consistent branding and structured data markup. Technically, the site performs moderately well with good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response contacts. Privacy compliance is partially met with privacy and cookie policies present, but no active consent mechanism is implemented. Overall, the site is safe, professional, and trustworthy for general audiences.

M

Město Rýmařov

rymarov.cz

44

The website www.rymarov.cz serves as the official online presence for the town of Rýmařov, Czech Republic. It provides municipal news, public service information, event calendars, and contact details for residents and visitors. The site is positioned as a local government portal, offering essential services and information to its community. The business model is focused on public administration and citizen engagement, with no commercial intent. Technically, the site is built on Joomla CMS using the Helix3 template framework, incorporating modern web technologies such as jQuery, Bootstrap, and Leaflet.js for interactive maps. The site is mobile-optimized and provides a moderate performance experience. Accessibility is basic but present, and SEO practices are implemented at a basic level. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, no advanced security headers or vulnerability disclosure policies are detected. The absence of WHOIS data for the domain reduces trust slightly but does not detract significantly from the site's legitimacy given its official nature. Overall, the website is a trustworthy and functional municipal portal with good content quality and user experience. Strategic improvements in security headers, accessibility, and transparency around vulnerability reporting would enhance its security posture and compliance standing.

M

Mesto Sliač

sliac.sk

62

The website www.sliac.sk is the official municipal portal for the town of Sliač in Slovakia. It serves as a comprehensive information hub for residents and visitors, providing access to local government details, public announcements, events, and electronic services. The site is well-structured, professionally designed, and targets the local community effectively. It leverages WordPress CMS with common plugins for cookie consent and UI enhancements, indicating a moderate level of digital maturity. The technical infrastructure includes modern web technologies and social media integrations, supporting good user experience and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with clear policies and consent banners aligned with GDPR requirements. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the site reflects a trustworthy and professional municipal presence with room for minor security enhancements.

O

Obec Křenovice

obec-krenovice.cz

41

Obec Křenovice operates an official municipal website serving the local community of Křenovice in the Czech Republic. The site provides comprehensive information about local government services, community events, administrative procedures, and contact details for municipal officials. It targets residents and visitors seeking official and practical information about the village and its governance. The website is well-structured with clear navigation and regularly updated content, reflecting a professional approach to public communication. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and other JavaScript libraries, hosted on a CMS platform likely provided by GC System. The site is mobile-optimized and uses HTTPS with appropriate security headers, ensuring a secure browsing experience. Cookie consent mechanisms are implemented, supporting privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which could be improved to enhance transparency and trust. The absence of WHOIS data is notable but likely due to CZ NIC registry policies rather than malicious intent. Overall, the website presents a low-risk profile with a strong focus on community service and information dissemination. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility features, and maintaining regular audits of third-party libraries to mitigate potential vulnerabilities.

M

Město Kolín

mukolin.cz

48

The website mukolin.cz is the official online presence of the city of Kolín, Czech Republic. It serves as a comprehensive municipal portal providing residents and visitors with information about city administration, social services, local news, events, and public resources. The site is well-structured and targets the general public, especially local citizens seeking government services and updates. The business model is that of a government service portal, with no commercial intent, focusing on transparency and accessibility. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, and integrates Google Analytics and Google Tag Manager for visitor insights. It uses the vismo CMS platform and is hosted by Active24. The site is mobile-optimized, accessible, and includes multilingual support via Google Translate. Security measures include HTTPS, Google reCAPTCHA on forms, and cookie consent mechanisms compliant with GDPR. From a security perspective, the site demonstrates good practices such as encrypted connections, anti-bot protections, and privacy controls. However, explicit security policies and incident response contacts are not published, which could be improved. No vulnerabilities or suspicious activities were detected in the content or scripts. The domain registration is consistent with the official city entity, with a long-established domain age supporting legitimacy. Overall, mukolin.cz is a trustworthy, well-maintained municipal website with good content quality, technical implementation, and privacy compliance. Strategic recommendations include publishing a formal security policy, adding vulnerability disclosure information, and enhancing security headers to further strengthen the security posture.

I

Institut pro veřejnou správu Praha

institutpraha.cz

52

Institut pro veřejnou správu Praha is a Czech government-established institution specializing in the education and qualification verification of public administration officials. It holds exclusive authority to conduct specialized professional competency exams under Czech law and provides a broad range of educational courses and conference facilities. The website reflects a mature organization with a clear market position serving public sector employees and officials. Technically, the site uses standard web technologies including jQuery and custom CMS components, hosted by a Czech hosting provider. The site is moderately optimized for performance and mobile use, with good SEO practices but limited advanced accessibility features. Security posture is adequate with HTTPS usage and basic form protections, though it lacks explicit security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, with clear contact details and positive user testimonials.

M

MENDELU

mendelu.cz

60

Mendel University in Brno (MENDELU) is a well-established educational institution in the Czech Republic, offering a broad range of study programs and research activities. The website serves multiple audiences including prospective students, current students, employees, and alumni, providing comprehensive information and services. The university maintains a strong market position as a reputable public university with a domain registered since 1997, reflecting its long-standing presence. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Google Tag Manager, ensuring good SEO and analytics capabilities. The site is mobile-optimized and accessible, with moderate performance. Hosting and DNS infrastructure appear stable and consistent with academic networks. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms denying ad and analytics storage by default, reflecting privacy awareness. However, explicit privacy policies, terms of service, and security incident response information are not published, representing areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and establishing a vulnerability disclosure process to strengthen compliance and trust.

W

WELL OKNA s.r.o.

wellokna.cz

58

WELL OKNA s.r.o. is a Czech Republic-based manufacturer and supplier specializing in plastic and aluminum windows and doors, operating since 1991. The company targets residential and commercial customers primarily in the Plzeňský kraj region, offering products made from SCHÜCO profiles along with related accessories such as shading and ventilation technology. The website reflects a well-established regional business with a clear focus on manufacturing and direct sales. Technically, the website is built on WordPress with a modern tech stack including popular plugins for SEO, analytics, and cookie compliance, indicating a moderate level of digital maturity. Security posture is solid with HTTPS, security headers, and reCAPTCHA protections, though the absence of a public security policy and incident response contacts suggests room for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of malicious activity or content blocking.

B

Bestsport, a.s.

o2universum.cz

69

O2 universum is a large multifunctional congress and event venue located in Prague, Czech Republic, operated by Bestsport, a.s., a member of the PPF group. The venue offers extensive facilities for conferences, cultural, sports, and corporate events with a capacity of up to 10,000 people. The website presents a professional and comprehensive digital presence, targeting both the general public and corporate clients seeking event space rental and event hosting services. The business is well positioned in the hospitality sector with strong partnerships and a clear market presence.

O

Objevuj památky s. r. o.

objevujpamatky.cz

45

Objevuj památky s. r. o. operates a Czech-language website dedicated to promoting non-state cultural monuments across the Czech Republic. The platform provides comprehensive information including monument listings, event calendars, travel tips, podcasts, and videos, targeting tourists and cultural heritage enthusiasts. The business model appears to be informational and promotional, supported by partnerships with cultural organizations and sponsors. The website demonstrates consistent branding and good content quality, with clear contact information and active social media channels enhancing trustworthiness. Technically, the website uses modern web technologies such as Leaflet.js for maps, jQuery, Google Tag Manager for analytics and marketing, and is built on the Pimcore CMS platform. The site is mobile-optimized with moderate performance and basic accessibility features. SEO is basic but functional. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, but security headers are missing and no explicit privacy policy or terms of service pages were found, indicating room for improvement in compliance and security posture. The WHOIS data is unavailable, which reduces transparency and trust from a domain registration perspective. However, the website content and contact details appear legitimate and professional. No adult or questionable content is present, making the site safe for general audiences. Overall, the site scores well on business credibility and content quality but should address privacy and security gaps to enhance compliance and trust.

P

PANO3D – VISUAL MARKETING

pano3d.cz

59

PANO3D.cz is a Czech-based visual marketing company specializing in 3D virtual tours and related visual marketing services. The website is built on WordPress and employs modern web technologies including jQuery, Google Tag Manager, and GDPR compliance plugins. The site is professionally designed with good mobile responsiveness and clear navigation, targeting businesses seeking advanced visual marketing solutions. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and a privacy policy. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site presents a professional business presence with room for security and compliance improvements.