Security Directory

ORLEN Centrum Serwisowe is a well-established service provider specializing in the maintenance and repair of fuel stations, with nearly 80 years of experience. The website reflects a professional business presence aligned with the ORLEN group, a major energy company in Poland. The site targets business customers and service clients in the energy sector, offering specialized services for fuel station upkeep. Technically, the website is built on Adobe Experience Manager CMS, employs modern JavaScript libraries, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though it lacks explicit security headers and published incident response contacts. Overall, the website demonstrates a mature digital infrastructure with strong privacy compliance but could improve transparency in security policies and incident handling.

ORLEN Lietuva is a significant regional energy and fuel company operating under the ORLEN Group umbrella. The website reflects a corporate presence focused on energy production, fuel distribution, and related services, targeting both general consumers and business clients. The site is primarily in Lithuanian and links extensively to other ORLEN subsidiaries, indicating a broad corporate network. Technically, the website is built on Microsoft SharePoint and uses common web technologies such as jQuery and Cookiebot for consent management. Google Analytics is employed for traffic analysis, demonstrating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. The absence of WHOIS data for the .lt domain limits full legitimacy verification, but the corporate branding and linked domains support authenticity. Overall, the site is professional and compliant with GDPR, though improvements in mobile optimization, accessibility, and security headers are recommended.

Baltic Power sp. z o.o. is a medium-sized energy company focused on developing Poland's first offshore wind farm with a capacity of up to 1.2 GW. The company is a joint venture between the ORLEN Group and Northland Power, positioning itself as a key player in the Polish renewable energy market. The website reflects a professional corporate presence with detailed project information, community engagement initiatives, and supplier outreach. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Cookiebot for GDPR-compliant cookie consent, and employs Google Analytics for visitor tracking. Security practices include HTTPS usage and CSRF protection, though DNSSEC is not enabled and some security headers are missing. Overall, the site demonstrates good privacy compliance and business credibility, with clear contact information and legal disclosures.

ORLEN Aviation is a well-established Polish company specializing in the supply and storage of aviation fuels at Polish airports, operating for over 25 years as part of the international ORLEN Group. The company targets aviation businesses and airlines, offering a range of services including fuel supply, logistics, and training. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on Adobe Experience Manager, uses modern JavaScript libraries, and integrates Google Tag Manager and Cookiebot for analytics and compliance. Security posture is strong with HTTPS, cookie consent, and inferred security headers, although explicit security policies and incident response contacts are not published. Privacy compliance is robust, with a comprehensive privacy policy and cookie consent mechanism. The lack of WHOIS data for the domain reduces trust slightly but does not outweigh the strong business and technical indicators of legitimacy.

ORLEN Asfalt is a business entity focused on developing modern and environmentally friendly asphalt technologies aimed at improving road durability and safety. It operates under the ORLEN group, a major energy and petrochemical company in Poland, positioning itself as a key player in the energy and transportation sectors. The website targets businesses and stakeholders involved in road construction and infrastructure development. The digital presence is professional, with consistent branding and clear business messaging. Technically, the website is built on Adobe Experience Manager CMS, utilizing modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. The site demonstrates good mobile optimization and SEO practices, though some accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, explicit HTTP security headers and published security policies or incident response contacts are not evident. No vulnerabilities or suspicious content were detected, and the domain WHOIS data is privacy protected, which is typical for corporate entities in Poland. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

ORLEN Administracja is a medium-sized property management and administrative services company operating as a subsidiary of the ORLEN Group in Poland. The company offers a comprehensive range of services including property management, technical services, investment project support, and various facility-related services. The website reflects a professional and consistent brand image aligned with the parent company, targeting business clients and property owners. Technically, the site is built on Adobe Experience Manager, uses modern web technologies, and implements GDPR-compliant cookie consent via Cookiebot. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and incident response information are missing. Overall, the website is trustworthy and well-maintained, supporting the company's business objectives effectively.

ORLEN is a leading energy company providing fuel and energy services to over 100 million Europeans, with products available in nearly 90 countries across six continents. The website reflects a mature enterprise with a strong market position in the energy sector, emphasizing advanced and clean technologies. The digital infrastructure leverages modern analytics and consent management tools such as Google Analytics, Google Tag Manager, and Cookiebot, indicating a commitment to data-driven insights and privacy compliance. The site is built on Adobe Experience Manager, suggesting a robust content management system supporting enterprise needs. Security posture is adequate with HTTPS enforced and a comprehensive cookie consent mechanism; however, explicit security headers and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting ORLEN's business credibility and digital maturity.

N

NetArt Group

netart.pl

64

nazwa.pl is a well-established Polish cloud services and hosting provider operating since 1997 as part of the global NetArt Group. The company offers a comprehensive portfolio including cloud hosting, domain registration, SSL certificates, VPS, email marketing, SaaS applications, and CDN services. It positions itself as a leader in the Polish market with a strong emphasis on modern, secure, and scalable cloud solutions. The website reflects a professional and trustworthy brand with ISO/IEC 27001:2022 certification and 24/7 technical support. Technically, the site uses modern JavaScript libraries, consent management tools, and a TYPO3 CMS platform, ensuring good performance and mobile responsiveness. Security posture is strong with HTTPS, 2FA for email, and WAF protections, although explicit security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, nazwa.pl demonstrates a mature digital presence with robust business credibility and security awareness.

Z

Zájezdy.cz | Dovolená v pohodě a hned | Zájezdy.cz

zajezdy.cz

70

Zájezdy.cz is a prominent online travel agency platform primarily serving customers in the Czech Republic and neighboring countries. It aggregates travel packages from hundreds of travel agencies, offering a wide range of holiday options including last minute deals and international destinations. The website is professionally designed with a focus on user experience and mobile optimization, leveraging modern web technologies such as AngularJS and Typekit fonts. It integrates multiple analytics and marketing tools to optimize user engagement and advertising effectiveness. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, although explicit security headers and incident response policies are not publicly visible. The absence of WHOIS data due to privacy protection is common for commercial websites and does not detract from the site's legitimacy. Overall, Zájezdy.cz presents a trustworthy and mature digital presence in the hospitality sector.

G

Garmondi CZ s.r.o.

garmondi.cz

53

Garmondi CZ s.r.o. is a Czech Republic-based company specializing in retail and e-commerce distribution, primarily focusing on food, beverages, baby products, and cosmetics. Established in 2000, it holds a solid market position as a professional distributor and marketer of quality brands. The website reflects a well-structured business with clear product categories and brand representation, targeting retailers and consumers interested in quality products. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Cookiebot, indicating a mature digital infrastructure. The presence of Google Tag Manager and Google Analytics shows active marketing and analytics efforts. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit privacy or security policies, which are areas for improvement. The absence of WHOIS data reduces domain trust verification, though the website's professional presentation supports legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility but should enhance privacy and security transparency.

Kliken is a small business marketing platform that enables owners to easily manage advertising campaigns across Google Ads, Google Shopping, Facebook, and retargeting channels. The company integrates with popular ecommerce and website building platforms such as Ecwid by Lightspeed and WordPress, positioning itself as a niche SaaS provider focused on simplifying digital marketing for small businesses. The website is hosted on the Weebly platform and employs modern marketing and analytics technologies including Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and outdated jQuery version present areas for improvement. The lack of WHOIS data raises concerns about domain registration legitimacy, which should be addressed to enhance trust. Overall, Kliken presents a professional and functional online presence tailored to small business marketing needs.

I

International Gas Union

wgc2028.com

63

The website www.wgc2028.com serves as the official platform for the 30th World Gas Conference scheduled in Milan, Italy in June 2028. It is operated under the International Gas Union brand, a recognized entity in the global energy sector. The site provides event details, venue information, and calendar integration options, targeting industry professionals and stakeholders in the gas and energy sectors. The business model revolves around event organization and industry advocacy, positioning itself as a key player in the energy conference market. Technically, the website is built using modern web technologies including React and Next.js, hosted on Vercel, and managed via DatoCMS. It demonstrates good performance, mobile optimization, and accessibility standards. Privacy compliance is addressed through Cookiebot consent management and a dedicated privacy policy page. Analytics are implemented via Google Tag Manager, reflecting moderate user tracking. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, warranting further verification. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced transparency in domain registration and security policies to strengthen its credibility and compliance posture.

I

International Gas Union

igrc2027.com

64

The website www.igrc2027.com serves as the official platform for the International Gas Union's IGRC2027 event, focusing on the global gas industry's role in building sustainable and secure societies. The site targets industry professionals and stakeholders, providing event information and promoting the gas sector's importance. The business model centers on industry association and event hosting, positioning itself as a key global player in the energy sector. Technically, the site is built on a modern React and Next.js framework, hosted on Vercel, and integrates Cookiebot for GDPR-compliant cookie management and Google Analytics for traffic analysis. The site demonstrates good performance, mobile optimization, and basic accessibility features. Security posture is strong with HTTPS enforced and standard security headers implied, though explicit security policies and incident response information are absent. The lack of WHOIS data for the domain suggests either a new registration or privacy protection, which slightly impacts trust but is mitigated by the professional and consistent branding aligned with the International Gas Union. Overall, the site is trustworthy, compliant, and professionally maintained, with recommendations to enhance transparency around security policies and domain registration details.

I

innogy Energo

innogy-energo.cz

67

innogy Energo is a major energy company operating in the Czech Republic, providing natural gas, electricity, and related services to approximately 1.7 million customers. The company emphasizes its extensive operational footprint with over 4000 employees and multiple service offerings including CNG filling stations, photovoltaics, and electromobility solutions. The website reflects a professional and consistent brand presence with clear navigation and comprehensive service information. Technically, the site leverages modern technologies such as Sitecore CMS, jQuery, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and bot protection via Cloudflare Turnstile, though explicit security headers and policies are not visible. Privacy compliance is well addressed with detailed cookie and privacy policies and a consent banner. Overall, the site demonstrates a solid security posture with room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data slightly impacts trust but is mitigated by the professional presentation and official contact details.

B

Business Europe

businesseurope.eu

76

Business Europe is a prominent non-profit business association representing enterprises across the European Union and neighboring countries. It focuses on advocacy, policy analysis, and representing business interests at the EU level. The website reflects a professional and consistent brand image, targeting European businesses and policymakers. Technically, the site is built on WordPress with modern themes and plugins, including Divi and Slider Revolution, and uses Matomo analytics with a GDPR-compliant cookie consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Overall, the site is trustworthy and well-maintained, but could improve transparency by publishing privacy and security policies and providing clear contact information.

O

ORLEN Unipetrol

orlenunipetrol.cz

57

ORLEN Unipetrol is a leading Czech energy company specializing in refining, petrochemical production, and retail fuel distribution. As part of the ORLEN Group, it holds a strong market position in Central Europe, serving business clients, investors, and the general public. The website reflects a mature corporate digital presence with structured content covering products, investor relations, media, and sustainability initiatives. Technically, the site is built on Microsoft SharePoint with modern JavaScript libraries and cookie consent management, though mobile optimization and SEO could be improved. Security posture is solid with HTTPS enforcement, cookie consent, and internal anti-corruption policies, but lacks explicit vulnerability disclosure mechanisms. Overall, the site is professional and trustworthy, though WHOIS data is unavailable, limiting domain legitimacy verification.

V

VÚK - Výzkumný ústav pro krajinu, v. v. i.

vukoz.cz

60

The website vuk.gov.cz represents the Výzkumný ústav pro krajinu, a government research institute focused on landscape and nature diversity in the Czech Republic. The site targets researchers, government entities, and environmental professionals, providing scientific research and consultancy services. The business model is that of a government research entity with a medium organizational size. The website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The design is professional and mobile-optimized, offering a good user experience with clear navigation and relevant content. From a security perspective, the site lacks visible security headers and explicit privacy policies, which lowers its security posture. The SSL configuration status is unknown from the provided data, and no forms or contact information were detected in the analyzed HTML snippet. The absence of WHOIS data for the domain is unusual for a government domain and slightly reduces trustworthiness, although the domain's gov.cz TLD suggests official status. Cookie consent is implemented, indicating some level of privacy compliance, but GDPR compliance cannot be fully confirmed. Overall, the website is functional and professional but would benefit from improved security practices, including the implementation of security headers, clear privacy and terms of service policies, and visible contact information. The lack of WHOIS data warrants further investigation to confirm domain legitimacy. Strategic recommendations include enhancing security configurations, publishing comprehensive privacy and security policies, and improving transparency to build trust with users.

A

Albatros

albatros.cz

71

Albatros.cz is a well-established Czech publishing house specializing in literature for children and youth, with a domain age dating back to 1997, indicating a mature and stable business presence. The website offers a comprehensive catalog of books and related services, targeting primarily Czech-speaking children, youth, and general readers interested in literature. The business model revolves around publishing and online retail, supported by partnerships with related domains such as albatrosmedia.cz and restorio.cz. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Cookiebot for cookie consent management, hosted behind Cloudflare for DNS and CDN services. The website is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced.

E

ERF Medien e.V.

bibleserver.com

64

ERF Bibleserver is a non-profit Christian media service operated by ERF Medien e.V., providing a comprehensive digital platform for Bible study with over 45 international Bible translations, study tools, and an AI chatbot assistant. The website is well-positioned in the religious media sector, leveraging partnerships with major Bible societies such as Biblica and Crossway to offer authoritative content. Technically, the site employs modern frameworks like Vue.js and Vuetify, ensuring a responsive and accessible user experience. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a mature approach to user data protection. Security posture is strong with HTTPS enforced and no evident vulnerabilities, although some security headers could be improved. Overall, the site presents a professional, trustworthy, and user-friendly platform for its target audience.

E

Eurogas

eurogas.org

75

Eurogas is a European industry association representing the gas wholesale, retail, and distribution sectors. The organization focuses on promoting gas as a sustainable energy source and advocates for its members' interests within the European energy market. The website reflects a professional and consistent brand presence, targeting industry stakeholders and policymakers. The business model centers on policy advocacy, market analysis, and industry representation. The site content is relevant and well-structured, supporting the organization's mission and services. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins such as Gravity Forms and Cookiebot for consent management. It integrates Google Analytics for traffic analysis and employs modern web technologies including jQuery and slick carousel. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements a comprehensive cookie consent mechanism via Cookiebot. However, it lacks explicit HTTP security headers and does not publish security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is privacy protected, which is typical for such organizations and does not raise immediate concerns. Overall, Eurogas's website presents a trustworthy and professional digital presence with solid privacy compliance and security posture. Strategic recommendations include enhancing security headers, publishing security and incident response policies, improving accessibility, and maintaining regular audits of third-party scripts to sustain security and compliance standards.

T

Thru-hiking

thru-hiking.com

58

Thru-hiking.com is a niche community platform dedicated to thru-hikers and enthusiasts of long-distance trails. The website provides comprehensive information on thru-hiking basics, trail guides, preparation, gear, and planning resources. It targets outdoor enthusiasts interested in long-distance hiking adventures. The platform leverages a modern WordPress infrastructure with Elementor and Yoast SEO, ensuring good content management and SEO optimization. The site is hosted with a reputable registrar and uses Cloudflare DNS, providing a stable technical foundation. Security measures include HTTPS, reCAPTCHA v3, and cookie consent via Cookiebot, although some security best practices like DNSSEC and security headers are missing. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service. Social media presence on Facebook and Instagram supports community engagement. Overall, the website is functional, professional, and trustworthy for its niche audience but would benefit from enhanced security and compliance documentation.

E

Europe EVF

europeivf.com

50

Europe IVF is a healthcare service provider specializing in artificial insemination and fertility treatments, targeting individuals seeking IVF services primarily in the Czech Republic and broader European region. The website is professionally designed, multilingual, and uses modern tracking and analytics tools to monitor user engagement and marketing effectiveness. The technical infrastructure is based on WordPress CMS, hosted behind Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is solid with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy policy and terms of service pages. Overall, the website presents a trustworthy and professional image suitable for its healthcare audience.

H

HelpfulCrowd Limited

helpfulcrowd.com

52

HelpfulCrowd Limited operates a digital marketing platform focused on leveraging free user-generated content such as customer reviews to help businesses increase traffic, trust, engagement, and sales. The company targets ecommerce and local businesses, positioning itself as a niche player in review-driven marketing solutions. The website is professionally designed, mobile-optimized, and integrates modern technologies including WordPress CMS, Google Analytics, Crisp Chat, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not published. The absence of WHOIS data for the domain reduces transparency and trustworthiness, though the website content and technical implementation indicate a legitimate business. Strategic recommendations include publishing terms of service, security policies, and improving domain registration transparency.

T

TrustYou GmbH

trustyou.com

70

TrustYou GmbH operates as a leading hospitality AI platform headquartered in Germany, offering advanced AI-driven solutions such as Customer Experience Platform (CXP), Customer Data Platform (CDP), and AI Agents to enhance guest experiences and optimize bookings. The company positions itself as a market leader in hospitality technology, serving global hospitality brands since 2008. Their digital presence is professional, leveraging modern web technologies and compliance tools to ensure a seamless user experience. The website is well-structured, mobile-optimized, and integrates essential analytics and marketing tools, reflecting a mature technical infrastructure. Security posture is strong with HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, although explicit security policies and vulnerability disclosure channels are not publicly available. The absence of WHOIS domain registration data is a notable gap, warranting further verification. Overall, TrustYou presents a credible and professional business with a solid digital footprint and good security hygiene.

G

GALANDR COMMUNICATION s.r.o.

galandr.com

56

GALANDR COMMUNICATION s.r.o. is a Czech-based digital marketing agency specializing in comprehensive online marketing services for websites and e-commerce platforms. Positioned among the top 5% of Google’s highest performing agencies and recognized as a Meta Business Partner and Heureka Partner, the company offers services including PPC advertising, SEO optimization, email marketing, social media marketing, web analytics, and e-shop/web development. Their target audience primarily consists of online businesses and e-commerce operators seeking to enhance their digital presence and conversion rates. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, and Cookiebot for tracking and compliance. The site demonstrates excellent design quality, mobile optimization, and fast performance, with a clear navigation structure and professional content presentation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers like Content-Security-Policy are not evident. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, despite strong business indicators on the site. Overall, GALANDR.COM presents a professional and trustworthy digital marketing agency with solid technical infrastructure and compliance awareness. The main risk lies in the incomplete WHOIS data, which should be monitored. Strategic recommendations include enhancing security headers, publishing a terms of service page, and adding a security.txt file to improve transparency and incident response readiness.

S

Seyfor, a.s.

vario.cz

51

Vario.cz is a Czech-based ERP software provider offering a modular economic and CRM system tailored for small and medium-sized businesses. The company, operated by Seyfor, a.s., has over 30 years of development experience and a strong market presence with more than 1700 successful implementations and 8000 users. Their product suite includes comprehensive ERP modules, warehouse management, mobile applications, robotic process automation, and payroll management, positioning them as a leading technology provider in the Czech Republic. The website reflects a professional and mature digital presence with excellent content quality and user experience. Technically, the site is built on WordPress with modern libraries and tools, including Google Analytics, Tag Manager, and Cookiebot for privacy compliance. Security measures such as HTTPS, reCAPTCHA v3, and anti-spam plugins are implemented, though some security headers could be enhanced. The absence of WHOIS data is a minor concern but does not detract significantly from the overall trustworthiness given the professional branding and business information. Overall, Vario.cz demonstrates a solid security posture, good privacy compliance, and a strong business credibility profile.

G

GasNet, s.r.o

gasnet.cz

59

GasNet, s.r.o operates the largest gas distribution network in the Czech Republic, serving over 2.3 million customers. The company provides reliable and safe natural gas delivery along with a variety of technical and customer services. The website reflects a mature digital presence with clear navigation, detailed service offerings, and emergency contact information. Technically, the site uses modern JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a reasonable level of digital maturity. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and explicit security policies. The absence of WHOIS data limits domain legitimacy assessment, but the professional site content supports trustworthiness. Overall, GasNet's online presence aligns well with its role as a major energy distributor in the region.

I

International Ski and Snowboard Federation

fis-ski.com

11

The International Ski and Snowboard Federation (FIS) operates as the global governing body for skiing and snowboarding disciplines, overseeing thousands of events annually. The website serves as a comprehensive platform for event calendars, live results, athlete biographies, news, and multimedia content, targeting sports fans, athletes, and media professionals worldwide. The organization holds a strong market position as the authoritative entity in winter sports governance. Technically, the website is built on modern frameworks such as Next.js and React, supported by a CMS (Storyblok) and integrated with analytics and consent management tools like Google Tag Manager and Cookiebot. The site demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates cookie consent mechanisms, indicating a robust security posture. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR. It effectively supports the organization's mission and audience needs, with recommendations focusing on enhancing transparency around security policies and incident response.

C

Caroda

caroda.io

66

Caroda operates a video advertising delivery platform focused on creating and optimizing high impact video advertising channels across multiple regions including the USA, UK, and several European countries. The company targets video advertisers and publishers seeking to maximize video advertising revenue through regional expertise and technology-driven solutions. The website is built on modern Webflow CMS infrastructure, integrating key marketing and tracking tools such as Google Tag Manager, Cookiebot for cookie consent, and Adform for advertising tracking. While the technical implementation is solid with good mobile optimization and SEO practices, the absence of visible privacy policies, terms of service, and WHOIS transparency limits the overall trust and compliance posture. Security practices include HTTPS and cookie consent but lack explicit security headers and published security policies. Overall, the website presents a professional business front but would benefit from enhanced transparency and security documentation.

P

POVED - Plzeňský organizátor veřejné dopravy

idpk.cz

49

The website www.idpk.cz serves as the official portal for POVED - Plzeňský organizátor veřejné dopravy, the integrated public transportation organizer for the Plzeň region in the Czech Republic. It provides comprehensive information on public transport schedules, fare calculations, service updates, and related news. The site targets residents and visitors of the region seeking reliable transit information. The business operates as a regional transportation authority with a medium-sized footprint and a focus on public service. Technically, the website employs modern web technologies including HTTPS, Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management. The site is well-structured with good mobile optimization and basic accessibility features. Performance is moderate with no significant technical debt detected. The use of reCAPTCHA indicates attention to bot mitigation. From a security perspective, the site enforces HTTPS and uses a Content-Security-Policy header to upgrade insecure requests. Cookie consent is actively managed, and tracking scripts are loaded with user consent. However, additional security headers such as HSTS, X-Frame-Options, and Referrer-Policy could enhance security posture. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website demonstrates a solid security and privacy posture appropriate for a public transportation service. The lack of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen trust and compliance.

F

Franc s. r. o.

franc.cz

58

Franc s. r. o. is a well-established small retail company based in the Czech Republic, specializing in home textiles, flooring, and interior design products. With over 30 years of market presence, the company offers a comprehensive range of products including carpets, vinyl, PVC, curtains, and related installation services. The business operates a physical store in Zlín and an e-shop, targeting customers seeking quality home decor and flooring solutions. The website reflects a professional and consistent brand image with clear product and service offerings.

C

ColosseumTicket | Tickets - culture and events | Prague, Brno, Ostrava and more.

colosseumticket.cz

76

ColosseumTicket.cz is an established online ticket sales platform specializing in cultural events such as theatre, classical music concerts, musicals, opera, and ballet primarily in the Czech Republic. Founded in 2012, it serves a regional audience with over 900 events and 120 points of sale, positioning itself as a key player in the Czech cultural ticketing market. The website employs modern web technologies including Next.js and React, ensuring a responsive and user-friendly experience across devices. The technical infrastructure is supported by reputable third-party services for analytics, marketing, and user engagement, including Google Tag Manager, Cookiebot for consent management, and SmartSupp chat.

K

Kúpele Sliač

kupelesliac.sk

70

Kúpele Sliač is a historic spa and wellness center in Slovakia with over 200 years of tradition, offering therapeutic water treatments and professional hospitality services. The website presents the business as a nationally recognized cultural heritage site with a focus on high-quality spa services. Technically, the site is built on WordPress with a modern tech stack including popular plugins for e-commerce, event management, and photo galleries. The site integrates Cookiebot for GDPR-compliant cookie consent and uses Google Analytics and Facebook Pixel for analytics and marketing. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security or incident response policies are published. Overall, the site is professional, trustworthy, and well-optimized for users.

R

Reknihy s.r.o.

reknihy.cz

61

Reknihy s.r.o. operates a Czech e-commerce platform specializing in sustainable book retail, focusing on second-hand books and textbooks. The company has established a solid market presence with over 220,000 customers and 50,000 sellers, leveraging a modern WordPress-based infrastructure with WooCommerce and Elementor. The website is well-branded, mobile-optimized, and integrates multiple marketing and tracking tools with consent management via Cookiebot. Security posture is adequate with HTTPS and consent mechanisms, though explicit privacy and security policies are not found in the provided content. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the platform serves a niche market with a clear business model and good technical implementation.

A

ALPINE PRO

alpinepro.cz

10

ALPINE PRO operates an e-commerce platform specializing in outdoor clothing and accessories, primarily targeting customers in the Czech Republic. The website presents a professional and consistent brand image with a clear focus on retail sales of outdoor apparel. The technical infrastructure leverages modern web technologies including JavaScript modules, Google Tag Manager, Facebook Pixel, and Cookiebot for consent management, indicating a mature digital presence. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and includes standard security headers, contributing to a solid security posture. The presence of a comprehensive cookie consent mechanism aligns with GDPR compliance efforts, although explicit privacy policy and terms of service pages were not detected in the provided content. No critical vulnerabilities or exposed sensitive data were found, but the absence of a security.txt or vulnerability disclosure page suggests room for improvement in incident response transparency. Overall, the website is safe, trustworthy, and professionally maintained, with extensive user tracking and marketing integrations. The lack of WHOIS data limits domain ownership verification, but the website content and technical indicators support legitimacy. Strategic recommendations include publishing clear privacy and terms policies, providing direct company contact information, and establishing a formal vulnerability disclosure process to enhance trust and compliance.

L

Louda Holding a. s.

louda.cz

10

Louda Holding a. s. is a well-established Czech family-owned holding group founded in 1992, operating across six diverse sectors including automotive sales and service, mobility and financing, real estate development, manufacturing, glass production, and education. The company employs over 1,500 people and holds a strong market position as the largest ŠKODA and Hyundai car dealer in the Czech Republic and the largest carsharing provider. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting a general Czech audience. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Cookiebot, hosted via REG-ZONER, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, reCAPTCHA integration, and cookie consent management, though it lacks some advanced security headers and explicit security policies. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or blocking mechanisms.

I

innogy Česká republika a.s.

innogy.cz

10

Innogy Česká republika a.s. is a prominent energy supplier in the Czech Republic, offering natural gas and electricity services to households, businesses, and large firms. The company provides a comprehensive digital experience including online price calculators, a customer portal named 'innosvět' for energy consumption monitoring, and additional services such as home assistance and insurance. The website is well-branded, professionally designed, and targets a broad audience of energy consumers in the region. Technically, the site employs modern JavaScript frameworks, Google Tag Manager for analytics, and Cookiebot for privacy compliance, ensuring a good level of digital maturity. Security posture is strong with HTTPS enforced and CAPTCHA protections on forms, though explicit security headers and a public security policy are absent. Overall, the site is trustworthy and compliant with GDPR, with clear contact information and social media presence. The lack of WHOIS data is likely due to privacy protection, which is justified for this business type.

G

Gymnathlon

gymnathlon.cz

69

Gymnathlon.cz is a Czech website offering a sports program targeted at children aged 2.5 to 11 years, focusing on versatile physical development and playful experience rather than competitive sports. The website is built on TYPO3 CMS and integrates modern tracking and consent management tools such as Cookiebot, Google Tag Manager, and Facebook Pixel. The site is well-structured with good SEO and mobile optimization, providing a professional user experience. Security measures include HTTPS enforcement and standard security headers, though there is room for improvement in content security policies and incident response transparency. The absence of WHOIS data limits domain trust assessment, but the website's content and technical posture suggest a legitimate small business. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and privacy policy. Overall, the site is safe, professional, and suitable for its target audience.

S

Schweizer Alpen-Club SAC

sac-cas.ch

55

The Schweizer Alpen-Club SAC is Switzerland's leading alpine sports association with approximately 180,000 members. The organization focuses on promoting mountain sports, providing safety and training, and managing memberships and events. Their market position as the foremost alpine club in Switzerland is well established, supported by a comprehensive digital presence. The website is built on TYPO3 CMS, integrating modern technologies such as Cookiebot for consent management, Stripe for payment processing, and analytics tools like Google Analytics and Facebook Pixel. The technical infrastructure reflects a mature digital setup with good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is robust, with clear cookie and privacy policies and GDPR-aligned consent mechanisms. Overall, the website demonstrates a high level of professionalism and trustworthiness, suitable for a large non-profit organization. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and enhancing accessibility features to further improve compliance and user trust.

B

BrandBits

brandbits.com

46

BrandBits is a small technology company founded in 2009 that offers cloud-hosted SaaS tools designed to enhance customer engagement and brand presentation. Their key services include interactive flipbooks, slidebooks, store locators, visitor recordings, and feedback widgets, targeting businesses seeking to improve their digital customer experience. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience and moderate SEO optimization. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and analytics tools such as Matomo and Google Tag Manager. Hosting and DNS are managed via Cloudflare, with SSL properly configured. The site is mobile optimized and performs moderately well, though accessibility features are basic. Cookie consent is managed through Cookiebot, indicating some privacy compliance efforts. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited domain status, but lacks DNSSEC and explicit security headers. There is no published security policy or incident response contact, and no vulnerability disclosure mechanism is present. The login form uses secure POST methods but no advanced security features are evident. Overall security posture is moderate but could be improved with additional controls and transparency. The overall risk is moderate with no critical issues detected. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and improving privacy compliance disclosures to enhance trust and security culture.

D

Dr. Max

drmax.cz

68

Dr. Max is a prominent pharmacy chain operating in the Czech Republic, offering a wide range of pharmaceutical products, dietary supplements, medical supplies, and cosmetics through both physical locations and an e-commerce platform. The website demonstrates a mature digital presence with modern technologies such as Magento for e-commerce, Nuxt.js for frontend, and integration with various marketing and analytics tools. The company maintains active social media channels and provides clear contact information, enhancing customer trust and engagement. However, the absence of publicly accessible WHOIS data and explicit privacy and terms of service pages slightly detracts from the overall transparency and compliance posture. Security measures are robust, including HTTPS enforcement, security headers, and CAPTCHA mechanisms, indicating a strong commitment to protecting user data and preventing abuse. Overall, the site is professional, user-friendly, and well-optimized for performance and accessibility.

G

GoOut

goout.net

76

GoOut.net is an established online platform specializing in cultural event listings and ticket sales, primarily serving the Czech Republic and surrounding regions. Founded in 2010, it offers users comprehensive information about concerts, festivals, theatre, exhibitions, and parties, positioning itself as a key player in the regional cultural media sector. The website provides inspiration and ticketing services for various cultural venues including theatres, cinemas, galleries, clubs, and museums. Technically, the site leverages modern JavaScript frameworks such as Nuxt.js, integrates reputable third-party services for analytics and advertising, and employs Cloudflare for DNS management. The presence of a detailed cookie consent mechanism powered by Cookiebot demonstrates a commitment to privacy compliance and user consent management. Security-wise, the site enforces HTTPS and domain registration protections but could improve by enabling DNSSEC and publishing explicit security policies. Overall, the website is professionally designed, user-friendly, and trustworthy, with a good balance of content quality and technical implementation.

M

Montura

montura.it

75

Montura is an Italian outdoor clothing brand specializing in apparel for mountain activities such as mountaineering, skiing, trekking, sailing, and biking. The company operates a professionally designed e-commerce website built on the Shopify platform, targeting outdoor enthusiasts primarily in Italy and Europe. The site offers a range of products and promotes its brand story, news, and initiatives. Technically, the website leverages modern technologies including Shopify's Dawn theme, Google Tag Manager, Klaviyo for marketing automation, and Cookiebot for GDPR-compliant cookie consent management. The site is well-optimized for performance and mobile devices, with good SEO and accessibility basics. Security posture is strong with HTTPS enforced and multiple security headers present, though there is no publicly disclosed security policy or incident response information. The WHOIS data for the domain is missing or privacy protected, which slightly reduces trust but does not outweigh the professional presentation and compliance measures observed. Overall, Montura's website reflects a mature digital presence suitable for a medium-sized retail business in the outdoor apparel sector.

M

makandra GmbH

makandra.de

74

makandra GmbH is a German-based technology company specializing in custom software development, hosting, DevOps, AI consulting, and UI/UX design. The company positions itself as a reliable full-service agency focused on delivering high-quality, maintainable software solutions tailored to client needs. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions targeting business clients seeking bespoke software solutions. The company leverages modern technologies including Ruby on Rails, JavaScript, and integrates analytics tools such as Matomo and Google Analytics to monitor performance and user engagement. Privacy compliance is well addressed with a comprehensive privacy policy and an active cookie consent mechanism, indicating adherence to GDPR requirements. Security posture is strong with HTTPS enforced, CSRF protection, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, makandra GmbH demonstrates a solid business and technical foundation with a high level of professionalism and trustworthiness.

The website www.parkovanivbrne.cz serves as the official information portal for the new parking system in Brno, Czech Republic. It provides comprehensive details about parking zones, regulations, payment options, and mobility funds targeted at residents, subscribers, and visitors. The site is positioned as a municipal service platform, aiming to simplify parking management and user experience in the city. Technically, the site employs modern web technologies including HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, Smartlook, and Cookiebot for analytics and marketing purposes. The site is mobile optimized and features a cookie consent mechanism compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent to manage user privacy. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data reduces trust slightly but does not negate the official nature of the site. Overall, the website presents a professional, trustworthy, and user-friendly platform for parking information in Brno. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and providing clearer contact information to improve business credibility and user trust.

W

WELL OKNA s.r.o.

wellokna.cz

58

WELL OKNA s.r.o. is a Czech Republic-based manufacturer and supplier specializing in plastic and aluminum windows and doors, operating since 1991. The company targets residential and commercial customers primarily in the Plzeňský kraj region, offering products made from SCHÜCO profiles along with related accessories such as shading and ventilation technology. The website reflects a well-established regional business with a clear focus on manufacturing and direct sales. Technically, the website is built on WordPress with a modern tech stack including popular plugins for SEO, analytics, and cookie compliance, indicating a moderate level of digital maturity. Security posture is solid with HTTPS, security headers, and reCAPTCHA protections, though the absence of a public security policy and incident response contacts suggests room for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of malicious activity or content blocking.

A

Asociácia informačných centier Slovenska

aices.sk

59

Asociácia informačných centier Slovenska (AiCES) is a Slovak non-profit association that coordinates and supports tourist information centers across Slovakia. The website serves as a central hub for information about the association, its members, and tourism-related initiatives, including sustainable tourism campaigns. The site is well-positioned in the Slovak tourism sector with partnerships including the Ministry of Tourism and other regional entities. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for privacy compliance, and uses popular libraries like jQuery and Swiper.js for UI enhancements. Security posture is strong with enforced HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

ČEZ Distribuce, a. s. is a major electricity distribution company in the Czech Republic, providing services related to electricity outage reporting and planned outage information. The website is designed to serve electricity consumers by allowing them to check for outages and report issues. The company operates under the parent company ČEZ, a. s., and maintains a professional online presence with clear branding and relevant content. The target audience is primarily residential and commercial electricity customers within the Czech Republic. Technically, the website uses modern web technologies including React and Next.js frameworks, with integrations such as Google reCAPTCHA for spam prevention and Cookiebot for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA and cookie consent mechanisms, indicating a good baseline security posture. However, explicit security headers are not detected in the provided data, and no dedicated security or incident response pages are found. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the website presents a trustworthy and professional utility service platform with good privacy compliance and moderate technical sophistication. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the security posture and user experience.

Č

ČEZ Distribuce

cezdistribuce.cz

59

ČEZ Distribuce is a major electricity distribution company in the Czech Republic, serving over 3.7 million households and businesses. It operates as a distributor rather than a supplier, focusing on reliable and safe electricity distribution. The company provides a wide range of services including new connections, meter readings, outage reporting, and support for electricity producers such as photovoltaic systems. The website reflects a mature digital presence with modern technologies like Next.js and Vue.js, offering user-friendly portals and mobile applications for customer convenience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response information are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

D

Dům zahraniční spolupráce

dzs.cz

53

Dům zahraniční spolupráce (DZS) is a Czech government-affiliated organization under the Ministry of Education, Youth and Sports, serving as the national agency for international education. The website provides comprehensive information on international education programs, grants, projects, statistics, and events, targeting students, educational institutions, and project applicants. It holds a strong market position as an authoritative source for international education in the Czech Republic. Technically, the website is built on Drupal 9, leveraging modern web technologies including Google Tag Manager, Cookiebot for consent management, and various tracking tools for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and clear navigation. From a security perspective, the site enforces HTTPS, uses consent management for cookies, and does not expose sensitive data. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly detected and could be improved. The absence of WHOIS data is notable but likely due to CZ NIC policies rather than malicious intent. Overall, the site demonstrates a mature security posture with room for minor enhancements. The overall risk is low given the official nature of the organization, the quality of content, and the security measures observed. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and maintaining up-to-date CMS components to mitigate vulnerabilities.