Security Directory

A

ABF, a.s.

forgames.cz

50

FOR GAMES is a well-established Czech interactive entertainment and video game festival organized by ABF, a.s., with a history dating back to 2012. The festival attracts over 26,000 visitors and offers a variety of activities including BYOC LAN tournaments, cosplay events, and gaming zones, positioning itself as a significant player in the Czech gaming and entertainment market. The website reflects a professional and consistent brand image, targeting gamers, families, and cosplay enthusiasts. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers and incident response information are missing. Overall, the site is safe, compliant with GDPR, and free from adult or questionable content, making it suitable for a general audience.

H

H2 Times s.r.o.

h2times.news

49

H2 Times s.r.o. operates a Czech-language media website focused on news and developments in the hydrogen energy sector. The company provides news articles, interviews, video content, and downloadable newspapers targeting Czech-speaking audiences interested in hydrogen technology and related scientific and business topics. The website positions itself as a niche media outlet within the energy and media sectors in the Czech Republic. Technically, the site is built on Joomla CMS with modern front-end technologies including Bootstrap 5, jQuery, and Swiper.js, and integrates common marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. The website is mobile-optimized and presents a professional design with clear navigation and consistent branding. Security-wise, the site uses HTTPS and includes CSRF tokens in forms but lacks visible security headers and published security policies, indicating room for improvement in security posture and privacy compliance. The WHOIS data is unavailable due to unsupported TLD or privacy protection, which limits domain trust verification but the website content and business information appear legitimate. Overall, the site demonstrates moderate digital maturity with good content quality but needs to enhance privacy and security transparency to improve trust and compliance.

K

Kolofix

kolofix.cz

49

Kolofix.cz operates as a professional bicycle repair service with multiple branches and mobile service points across the Czech Republic. The company specializes in servicing all types and brands of bicycles, including electric bikes, and offers an online booking system for customer convenience. With over 65,000 completed services and a network of 15 branches plus additional points, Kolofix holds a strong market position in the Czech cycling service industry. The website is well-structured, providing clear service descriptions, customer testimonials, and multiple contact channels, enhancing user trust and engagement. Technically, the site employs modern web technologies including jQuery, Google Fonts, Swiper.js, and integrates analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Google Tag Manager. Hosting is provided by Active24, a reputable Czech hosting provider. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although the site lacks explicit security policies and incident response contacts. Overall, the website is professional, user-friendly, and compliant with GDPR requirements, reflecting a mature digital presence for a medium-sized transportation service business.

K

KERAIN, a.s.

kerain.cz

56

KERAIN, a.s. is a Czech company specializing in real estate rental services including residential and commercial properties, alongside production, trade, and other services outside the scope of standard trade licensing annexes. The company maintains strategic partnerships with KERAMOST and KERACLAY, key players in the mining and processing of mineral raw materials in the Czech Republic and abroad, combining traditional manufacturing with modern technological innovations. The website presents a professional and business-focused image with clear contact details and links to official Czech business registries, supporting its market credibility. Technically, the website employs a basic but functional technology stack including jQuery 1.11.3 and Swiper.js for UI elements. The site is mobile-optimized with good design quality and navigation clarity, though some accessibility features could be improved. No advanced CMS or hosting provider details were detected. Performance is moderate, with no evident analytics or tracking scripts, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy or cookie policies, which are important for GDPR compliance. The use of an outdated jQuery version poses potential security risks. No forms collecting sensitive data were found, reducing immediate exposure risks. WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional site content. Overall, the website is safe, business-oriented, and trustworthy for general audiences. However, improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and security posture.

K

KERACLAY, a.s.

keraclay.cz

57

KERACLAY, a.s. is a Czech Republic-based manufacturer specializing in clays and ceramic materials, serving both professional industrial processors and amateur ceramic creators. The company emphasizes sustainable production and environmental care, with a product portfolio including clays, ceramic masses, chamotte masses, and sandstone aggregates. The website reflects a medium-sized enterprise with a history dating back to 2012 and roots extending to 1975, with annual revenues exceeding 130 million CZK. The business model focuses on manufacturing and direct sales, positioning KERACLAY as a reputable regional player in the manufacturing sector. Technically, the website employs jQuery 1.11.3 and Swiper.js for UI components, with a responsive design optimized for mobile devices. The site demonstrates good content quality, clear navigation, and professional branding consistency. However, the technical stack includes an outdated jQuery version, and no CMS or hosting provider information is evident. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which impacts privacy compliance. No incident response or vulnerability disclosure information is present. The WHOIS data is unavailable, limiting domain trust assessment and raising concerns about registration transparency. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy in content and business representation but would benefit from improved privacy compliance, updated technical components, and enhanced security practices. The absence of WHOIS data is a notable gap that should be addressed to improve domain legitimacy confidence.

G

GOBELINS Paris

gobelins.fr

57

GOBELINS Paris is a prestigious French educational institution specializing in arts and digital creation, including animation, photography, video, graphic and interactive design, game development, and music. It operates as a private non-profit higher education establishment under the Chamber of Commerce and Industry of Paris Ile-de-France and is recognized as a member of the Conférence des Grandes Ecoles. The school has a strong market position with international partnerships and a broad target audience including students, professionals, and enterprises. The website reflects a mature digital presence with comprehensive content and clear navigation.

Actu-Environnement is a well-established French independent media outlet specializing in environmental news, sustainable development, and related technical and legal information. The website offers daily updated content, newsletters, event agendas, and expert blogs targeting professionals and stakeholders in the environmental sector. The business model relies on subscriptions, advertising, and partnerships. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js, implements responsive design, and integrates Google Analytics for user tracking. The security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not evident. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust, but the website's content quality and branding strongly indicate legitimacy. Overall, the site provides a professional and trustworthy user experience with room for security enhancements and better transparency in domain registration.

Městské kulturní středisko Třebíč operates as a municipal cultural center providing comprehensive information on cultural events such as cinema, theater, concerts, and exhibitions in the city of Třebíč. The website serves as a centralized platform for residents and visitors to access event schedules, ticket sales, and cultural news, positioning itself as a key local cultural institution. The business model focuses on event promotion and community engagement through digital channels. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, and Fancybox, alongside Google Analytics and Tag Manager for tracking. Cookie consent is managed via CookieScript, ensuring GDPR compliance. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response information. The absence of WHOIS data limits domain legitimacy verification, though the website content and external references suggest a legitimate municipal entity. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

C

Chvalský zámek

chvalskyzamek.cz

47

Chvalský zámek is a cultural and hospitality venue located near Prague, offering event space rentals, including weddings and exhibitions. The website presents a professional and well-structured digital presence built on WordPress with Elementor, featuring good mobile optimization and clear navigation. The site includes GDPR-compliant privacy and cookie policies with an active consent mechanism, reflecting attention to privacy compliance. Security posture is adequate with HTTPS enabled, though security headers are not visibly implemented, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website supports a small hospitality business with a focus on cultural events and venue rentals, maintaining a trustworthy and user-friendly online presence.

D

Danubius Expert Zrt.

booked4.us

64

booked4.us is a Hungarian-developed online appointment booking system operated by Danubius Expert Zrt., established in 2013. The platform offers a customizable, automated booking solution tailored for various industries including fitness, healthcare, coaching, beauty, massage, education, and veterinary services. It supports features such as 24/7 booking management, personalized notifications, online payments, and calendar synchronization. The website demonstrates a mature digital presence with modern technologies, mobile optimization, and comprehensive content including FAQs, customer testimonials, and demo calendars. Security posture is strong with HTTPS, GDPR compliance, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The domain registration data aligns well with the business identity, enhancing trustworthiness.

K

Knoppers

knoppers.cz

63

Knoppers.cz is the official Czech website for the Knoppers brand, a well-known confectionery product line specializing in wafers and bars. The site is part of the larger Storck group ecosystem, as indicated by multiple references and linked domains. The website targets general consumers interested in confectionery products, providing product information and brand engagement. The business model focuses on brand marketing and consumer interaction rather than direct e-commerce. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as RequireJS and Swiper.js, indicating a moderate level of digital maturity. The site is mobile-optimized and includes SEO best practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible advanced security headers and explicit incident response policies. WHOIS data is unavailable, which limits domain trust assessment, but the website’s branding and content align with the known Storck confectionery brand, mitigating concerns. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

KERAMOST, a.s.

keramost.cz

57

KERAMOST, a.s. is a Czech manufacturing company specializing in the mining and processing of natural mineral raw materials such as bentonites, cat litter products, metakaolin, and other industrial minerals. The company emphasizes sustainability, environmental protection, and quality assurance with certifications aligned to European standards. Their market position is that of an established regional player with a long history and significant raw material reserves. The website reflects a professional digital presence with modern technologies and user-friendly navigation. However, the absence of WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Security measures such as HTTPS and form validation are in place, but additional security headers and incident response information would strengthen their posture. Overall, the company presents a credible and trustworthy business profile with room to enhance privacy and security disclosures.

R

ReklamniPlachty.cz s.r.o.

reklamniplachty.cz

46

ReklamniPlachty.cz s.r.o. is a Czech-based company specializing in the production and installation of advertising tarpaulins and banners, serving customers in the Czech Republic and Slovakia. With over 15 years of experience, the company offers a strong value proposition combining quality and competitive pricing. Their services include graphic design, printing, and installation, supported by an e-commerce platform with customer accounts for order tracking and management. The website is professionally designed, mobile-optimized, and includes essential business contact information and social media presence. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Analytics and Facebook Pixel for marketing and analytics, and employs a cookie consent mechanism to comply with privacy regulations. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit security policies. WHOIS data is unavailable, which slightly reduces transparency and trust. Overall, the website is functional, professional, and trustworthy for its business domain.

R

Reality z celé ČR i zahraničí - RealHit.cz

realhit.cz

51

RealHit.cz is a Czech real estate portal established in 2010, offering a wide range of property listings including sales, rentals, auctions, and shares. The platform also provides additional services such as free price estimation, contract creation, legal advice, mortgage calculators, and educational content. The website targets general users interested in real estate within the Czech Republic and some international locations, supporting multiple languages for broader accessibility. Technically, the site is built on WordPress and leverages modern JavaScript libraries and analytics tools like Google Tag Manager and Microsoft Clarity, indicating a moderate level of digital maturity. The site is hosted behind Cloudflare nameservers, ensuring reliable performance and security. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks some security headers and formal security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is professional, trustworthy, and safe for general audiences.

D

DAKACOM.CZ s.r.o.

dakacom.cz

58

DAKACOM.CZ s.r.o. is a Czech Republic-based market leader specializing in comprehensive marketing campaigns and instore solutions, leveraging advanced printing and 3D technologies with a strong emphasis on sustainability. The company serves a broad B2B audience including businesses and institutions across the EMEA region. Their service portfolio includes high-quality printing, 3D printing, plastic and plexi work, and carton packaging, supported by a robust technological infrastructure and a skilled workforce. The website reflects a professional and modern digital presence with multilingual support and multimedia content.

A

ABF, a.s.

veletrhkosmetiky.cz

50

The website veletrhkosmetiky.cz represents a professional event organizer, ABF, a.s., specializing in biannual beauty trade fairs in the Czech Republic. The site targets beauty professionals, exhibitors, and visitors interested in cosmetics, hairdressing, nail design, and foot care. It offers comprehensive event information, exhibitor catalogs, and professional competition details, positioning itself as a leading organizer in the beauty industry within the region. Technically, the site is built on WordPress with modern libraries and plugins, including Google Tag Manager and Yoast SEO, ensuring good SEO and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with room for improvement in security best practices and accessibility.

G

Grassrootz

grassrootz.com

49

Grassrootz is a small Australian-based company providing a SaaS platform focused on event fundraising and community engagement for non-profit organizations and event organizers. Their website is professionally designed using Squarespace, featuring clear navigation, social media integration, and modern web technologies such as Google Tag Manager and reCAPTCHA. The platform offers services including event ticketing, registrations, and integrations to support fundraising efforts. Technically, the site is well-implemented with HTTPS and HSTS enabled, indicating a strong security posture. However, the absence of WHOIS data and lack of explicit privacy and terms of service policies represent gaps in transparency and compliance. No direct contact information or security incident response details are provided, which could impact trust and user confidence.

T

Tourny Meyer

tournymeyer.fr

62

Tourny Meyer is a well-established French real estate consultancy specializing in commercial properties such as offices, warehouses, retail spaces, and investments. The company positions itself as a trusted advisor for professionals seeking to buy, rent, or invest in business real estate across multiple French regions. Their website reflects a mature digital presence with comprehensive service descriptions, multiple agency locations, and a professional design consistent with their market position. Technically, the site is built on WordPress, leveraging modern JavaScript libraries and Google APIs for enhanced user experience and property search functionality. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie management. The absence of WHOIS data reduces transparency but is typical for commercial entities using privacy protection. Overall, the site is credible, professional, and well-suited for its target audience.

P

Plus Production Prague s.r.o.

plusproduction.cz

46

Plus Production Prague s.r.o. is a Czech-based company specializing in outdoor LED advertising, offering strategically located LED screens primarily in Prague and select regional cities. The company provides high-impact advertising solutions with a focus on maximizing daily reach and visibility for clients. Their business model revolves around renting advertising space on LED screens and supporting clients with production and campaign services. The website reflects a professional and consistent brand image, targeting advertisers and marketing agencies seeking effective outdoor media solutions. Technically, the website is built on WordPress with Elementor and incorporates modern SEO and privacy compliance tools, including GDPR cookie consent management. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though explicit security policies and incident response information are absent. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, supporting a trustworthy online presence for the business.

Floya is a Brussels-based transportation app that consolidates multiple mobility services into a single platform, enabling users to plan, book, and pay for various transport modes including bikes, public transit, taxis, and shared vehicles. The website demonstrates a mature digital presence with professional design, strong SEO, and integration of modern technologies such as WordPress CMS, Google Tag Manager, and consent management tools. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Floya presents a trustworthy and user-friendly service for urban mobility in Brussels, supported by reputable partners including STIB-MIVB and Brussels Mobility.

L

Luxor

knizniklub.cz

67

Luxor.cz is a leading Czech Republic-based bookstore offering the largest selection of books and authors in the country, with over 160,000 products in stock. The business operates both online and through 38 physical stores nationwide, providing customers with convenient shopping options including online purchases, affordable shipping, and free in-store pickup. The website is professionally designed using modern web technologies such as Angular and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site demonstrates good mobile optimization and SEO practices, supporting a positive user experience. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly detailed. Privacy and cookie policies are present and GDPR compliant, including consent mechanisms. Overall, Luxor.cz presents a trustworthy and credible online presence consistent with a large retail business in the Czech market.

O

OMAX Holding s.r.o.

befity.cz

56

Befity.cz is a Czech online magazine dedicated to promoting an active lifestyle through fitness, health, nutrition, and psychological well-being content. Operated by OMAX Holding s.r.o., the site maintains a strong market position within the Czech media landscape, supported by partnerships with related media brands such as bety.cz and prostreno.cz. The platform offers a mix of editorial content, product testing, and advertising services, targeting a general adult audience interested in health and fitness. Technically, the site employs modern JavaScript libraries and ad technologies, with a custom CMS backend. It demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS and cookie consent mechanisms, but could benefit from additional security headers and explicit incident response documentation. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable source for its audience.

The website www.visittrebic.eu serves as the official tourism portal for the city of Třebíč, Czech Republic. It provides comprehensive information about the city's UNESCO heritage sites, cultural events, museums, natural attractions, and wellness activities. The portal targets tourists and visitors interested in exploring the historical and natural beauty of Třebíč and its surroundings. The business model is focused on tourism promotion, supported by local government and regional partners, positioning itself as a trusted source for visitor information. Technically, the website employs a traditional web stack including jQuery, Swiper.js for sliders, Fancybox for media display, and integrates multiple third-party analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Seznam Retargeting. The site is mobile-optimized with good navigation and SEO practices, although no explicit CMS or hosting provider details were identified. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers and explicit security or incident response policies. The WHOIS data is unavailable due to privacy protection, which is common and justified for this type of municipal website. No critical vulnerabilities or suspicious patterns were detected in the content or technical setup. Overall, the website presents a professional, trustworthy, and user-friendly platform for tourism promotion. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

S

Stellplatz Lednice s.r.o.

stellplatzlednice.cz

47

Stellplatz Lednice s.r.o. operates a specialized hospitality business offering a peaceful camping site in the heart of the Lednicko-valtický wine region in the Czech Republic. The business integrates camping services with a winery experience, including wine tastings, tours, and a bistro serving regional specialties. The website is professionally designed using WordPress and Elementor, providing multilingual support and clear navigation. Contact information and partner affiliations are prominently displayed, enhancing trust and business credibility. Technically, the site uses modern web technologies and tracking tools such as Google Tag Manager and Facebook Pixel, with HTTPS enabled and basic security practices in place. However, explicit security policies and incident response information are absent, representing an area for improvement. Overall, the website presents a legitimate, small-sized hospitality business with a good security posture and compliance with privacy regulations.

H

HZ Hotel s.r.o.

chateaudefrontiere.com

47

Chateau de Frontiere is a luxury 4-star hotel resort located in South Moravia, Czech Republic, within the UNESCO-listed Lednicko-valtický area. The business offers upscale accommodation, wellness, fine dining through its restaurants ESSENS and Chateau Petit, wine cellar experiences, and event hosting services. The website is professionally designed with multilingual support and integrated booking functionality, reflecting a mature digital presence. Technically, the site uses modern libraries and tracking tools but lacks some advanced security headers and explicit incident response information. The security posture is adequate with HTTPS and cookie consent mechanisms but could be improved with additional security best practices. WHOIS data is missing, which slightly reduces trustworthiness, but the overall business credibility is high due to clear contact information, social media presence, and external references.

Actu-Environnement is a well-established French independent media outlet specializing in environmental news, sustainability, and development topics. The website offers daily updated content including news articles, newsletters, event agendas, and expert blogs targeting professionals and subscribers interested in environmental issues. The business model relies on subscriptions and advertising, supported by a consistent brand presence and social media engagement. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js, implements responsive design, and integrates Google Analytics GA4 for user tracking. The site is served over HTTPS with cookie consent mechanisms in place, indicating a good baseline for privacy compliance. However, no explicit security headers were detected, and no direct contact emails or phone numbers are publicly listed, which could be improved for transparency and trust. The WHOIS data for the domain is missing or unavailable, which is unusual for a site with a claimed history since 2003, but the website content and social presence strongly suggest legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security posture and contact transparency.

O

OMAX Holding s.r.o.

bety.cz

48

Bety.cz is a Czech online magazine primarily targeting women and mothers, offering lifestyle content including horoscopes, recipes, discussions, and product testing. Operated by OMAX Holding s.r.o., the site has a solid market position within the Czech media sector, focusing on family and women's interests. The website demonstrates a mature digital presence with structured data, social media integration, and a comprehensive content offering. Technically, it employs modern JavaScript frameworks and ad management tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and consent management, though lacking explicit security headers and incident response information. The absence of WHOIS registrant data reduces domain trust verification but does not detract significantly from the overall legitimacy given the business transparency and policy disclosures.

Cargo-Hortim, spol. s r.o. is a Czech-based transportation and logistics company providing both domestic and international freight services. The company operates multiple branches across the Czech Republic and Slovakia and offers additional services such as vehicle washing. The website reflects a professional business presence with clear service offerings and contact information. The company is affiliated with the Total Produce group, indicating a solid market position in the transportation sector. Technically, the website employs modern web technologies including Bootstrap, jQuery, and FontAwesome, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, but lacks visible advanced security headers and incident response disclosures. Overall, the site is trustworthy and well-maintained, though improvements in security transparency and WHOIS data availability could enhance credibility further.

T

Technique Solaire

techniquesolaire.com

64

Technique Solaire is an established French company specializing in renewable energy production, particularly photovoltaic roof solutions. Founded in 2008, it holds a leadership position in the French solar energy market. The website reflects a professional and consistent brand image, targeting a general audience interested in sustainable energy solutions. The business model appears to serve both B2B and B2C segments with a focus on clean energy technologies. Technically, the website is built on WordPress with modern tools such as Yoast SEO, Swiper.js, and integrated marketing and analytics platforms including HubSpot, Google Tag Manager, and Matomo. Hosting is provided by OVH sas, a reputable provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement. From a security perspective, the site uses HTTPS and domain locking mechanisms, but lacks DNSSEC and some recommended security headers. Cookie consent is managed via Cookiebot, indicating awareness of privacy compliance, though no privacy policy or terms of service pages were detected. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website is trustworthy and professionally managed, with a solid business foundation. Strategic recommendations include publishing comprehensive privacy and terms policies, enabling DNSSEC, adding security headers, and providing clear incident response contacts to strengthen security posture and regulatory compliance.

W

WS Interactive

ws-interactive.net

59

WS Interactive is a small, established web agency based in Toulouse, France, with 25 years of experience providing tailored web development, mobile app creation, SEO, UX/UI design, and digital marketing services. The company targets businesses seeking professional digital solutions and positions itself as a high-quality service provider in the local market. Technically, the website is built on WordPress with modern JavaScript libraries and includes analytics and optimization tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses CAPTCHA on contact forms, and implements cookie consent with Google Consent Mode, but lacks explicit security policies and incident response information. The absence of WHOIS domain registration data reduces trust in domain legitimacy, though the website content and branding are professional and consistent. Overall, the site scores well on content quality, technical implementation, and security posture, with room for improvement in business credibility and transparency.

L

Le Comptoir des Solutions

comptoirdessolutions.org

47

Le Comptoir des Solutions is a French non-profit association dedicated to cataloging and promoting innovations that assist people with disabilities. The organization operates a free and accessible web platform that regularly updates with new innovations, news, and interviews related to disability support technologies and solutions. Their target audience includes individuals with disabilities, caregivers, professionals, and partner organizations. The platform is supported by notable partners such as Crédit Agricole, Microsoft, and IFP Energies nouvelles, enhancing its credibility within the niche market of disability innovation. Technically, the website is built on WordPress and leverages modern web technologies including Bootstrap for responsive design, Swiper.js for interactive sliders, and multiple analytics tools such as Google Analytics, Google Tag Manager, and Plausible Analytics. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience and effective content delivery. From a security perspective, the site enforces HTTPS and uses secure forms for data collection. However, it lacks several recommended security headers and does not provide a cookie consent mechanism, which may impact GDPR compliance. The absence of WHOIS data limits domain trust analysis, but the presence of partner endorsements and consistent branding supports legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for its mission, with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding cookie consent, publishing a security policy, and establishing a vulnerability disclosure process to enhance trust and compliance.

S

Société coopérative éponyme

polymny.studio

43

Polymny Studio is a French cooperative software project focused on providing educators and trainers with an open-source web platform to create and manage pedagogical videos easily. The platform supports multiple operating systems through modern browsers and offers advanced video production services, including virtual green screen and studio bookings. The project is supported by regional and educational institutions, enhancing its credibility and market position in the educational technology sector. Technically, the website employs modern frontend technologies such as Rust, Elm, and Bulma CSS, delivering a responsive and well-structured user experience. Security posture is solid with HTTPS enforced and secure login forms, though improvements can be made by adding explicit security headers and cookie consent mechanisms. Overall, the website is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable due to TLD restrictions, the business legitimacy is supported by institutional partnerships and open-source transparency.

V

Viveris

viveris.fr

68

Viveris is a French IT engineering group specializing in embedded systems, digital transformation, and cybersecurity services. The company operates across multiple cities in France, Belgium, and Morocco, offering a broad portfolio including projects, training, and consulting. Their market position is that of a medium-sized, established technology service provider with a focus on innovation and simplification of IT solutions for enterprises. Technically, the website is built on WordPress with modern JavaScript libraries and analytics tools, showing a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response information could enhance their stance. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, though the absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy.

E

eezy.cz

eezy.cz

44

eezy.cz is a Czech-based media company specializing in organizing conferences, custom events, and publishing books and magazines. With over 15 years of market presence, they have published more than 450 titles and realized over 215 events, positioning themselves as a trusted service provider in their sector. Their target audience includes professionals and organizations seeking tailored event solutions and quality publications. Technically, the website is built on WordPress using popular plugins like Elementor and WooCommerce, indicating a modern and maintainable infrastructure. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS and bot protection via reCAPTCHA, but lacks advanced security headers and formal policies. No privacy or cookie policies were detected, which is a compliance gap. Overall, the business appears legitimate and professionally presented, but could improve transparency and security practices.

N

National Scleroderma Foundation

scleroderma.org

59

The National Scleroderma Foundation is a well-established non-profit organization dedicated to advancing research, raising awareness, and providing support for individuals affected by scleroderma. The website reflects a mature digital presence with comprehensive educational resources, support group information, and event management capabilities. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and no obvious vulnerabilities, though improvements such as enabling DNSSEC and publishing security policies would enhance trust. Privacy compliance is limited by the absence of explicit privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the site is professional, trustworthy, and serves its target audience effectively.

N

National Alopecia Areata Foundation

naaf.org

51

The National Alopecia Areata Foundation (NAAF) is a well-established non-profit organization dedicated to supporting individuals affected by alopecia areata, a common autoimmune disease causing hair loss. The foundation provides a comprehensive range of services including education, support groups, research funding, advocacy, and awareness campaigns. Their website reflects a strong market position as a leading resource in the alopecia community, targeting patients, families, medical professionals, and researchers. The organization leverages digital platforms effectively to engage its audience and facilitate donations and community involvement. Technically, the website is built on WordPress with modern plugins and frameworks such as Visual Composer, Gravity Forms, and Swiper.js. It integrates key marketing and analytics tools including Google Tag Manager and Facebook Pixel, enabling moderate user tracking and data collection. The site demonstrates good performance, mobile optimization, and accessibility, with a professional design and clear navigation enhancing user experience. From a security perspective, the site employs HTTPS with good SSL configuration and standard security headers, indicating a solid security posture. However, there is no publicly available security policy or vulnerability disclosure program, which could be improved to enhance transparency and incident response readiness. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR considerations. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a security policy, establishing a vulnerability disclosure channel, and enhancing incident response contact visibility to further strengthen trust and security culture.

M

Krby a kamna

mojekrby.cz

60

The website www.mojekrby.cz is a Czech e-commerce platform specializing in the sale of fireplaces, stoves, and related accessories. It targets residential customers and craftsmen seeking heating solutions. The business operates a niche retail model with a clear product catalog and online shopping capabilities, including user registration and newsletter subscription. The site is professionally designed with good navigation and mobile optimization, leveraging modern web technologies such as jQuery, Swiper.js, and Google Analytics for tracking and marketing. Technically, the site uses the K2 e-shop system and integrates several third-party services including Google Tag Manager and Packeta for logistics. Performance is moderate with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though no advanced security headers or explicit security policies are published. The absence of WHOIS registration data is a concern for domain legitimacy and trust. Overall, the site presents a professional and trustworthy front for its business, but the lack of publicly available domain registration details and direct contact information slightly reduces its credibility. There are no indications of malicious content or security vulnerabilities in the visible content. Strategic improvements in security transparency and contact information disclosure would enhance trust and compliance.

G

GECV: Grupo Español para el Crecimiento Verde

grupocrecimientoverde.org

50

The Grupo Español para el Crecimiento Verde (GECV) is a Spanish non-profit association established in 2016, dedicated to fostering public-private collaboration to address environmental challenges and promote sustainable, circular, and efficient economic growth. The website serves as a platform to share news, documents, working groups, and member information, targeting stakeholders interested in green growth and sustainability in Spain. The organization holds a solid market position as a recognized environmental non-profit with a medium-sized membership base. Technically, the website is built on WordPress with Elementor and Yoast SEO, hosted by Webempresa, and integrates modern web technologies including jQuery, Swiper.js, and GDPR compliance plugins. The site demonstrates good mobile optimization, SEO practices, and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and advanced security headers are not explicitly detected, representing areas for enhancement. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and cookie policies are comprehensive and clearly accessible, supporting strong privacy compliance. Overall, the website is professional, trustworthy, and well-maintained, with no signs of adult or questionable content. The domain registration is consistent with the business history and shows legitimacy. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing security headers to further strengthen the security posture.

A

AEDIVE

aedive.es

56

AEDIVE is a Spanish business association dedicated to the development and promotion of electric mobility, representing a broad industrial, technological, service, and institutional value chain. The organization holds a strong market position in Spain, supported by institutional partners and a diverse membership base. Their services include advocacy, networking, events, consultancy, and legislative influence, positioning them as a key player in the electric vehicle ecosystem. Technically, the website employs a modern technology stack including jQuery, Handlebars, RequireJS, Bootstrap 5, and Swiper.js, with good mobile optimization and performance. The site integrates analytics and marketing tools with a GDPR-compliant cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent controls, but lacks visible security headers and explicit incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to .es domain query restrictions, but the website's professional presentation and institutional backing support its legitimacy. Overall, AEDIVE's website is professional, secure, and compliant, with strong business credibility and user experience. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

D

Das WeltAuto®

dasweltauto.cz

51

Das WeltAuto® is a well-established brand specializing in the sale of certified pre-owned vehicles, primarily targeting consumers in the Czech Republic. The website reflects a professional automotive business model under the Volkswagen Group umbrella, offering quality assurance and dealer network support for used car buyers. The digital infrastructure leverages modern frontend technologies such as Angular and Swiper.js, complemented by cookie consent mechanisms to address privacy requirements. While the website is accessible and well-structured, the absence of WHOIS data and explicit privacy and terms of service policies indicates areas for improvement in transparency and compliance. Security posture is adequate with HTTPS enforced, but could benefit from enhanced security headers and published security policies. Overall, the site presents a trustworthy and professional image consistent with a large automotive brand.

P

Porsche Česká republika s.r.o.

cupraofficial.cz

59

CUPRA Česká republika operates as a premium automotive brand website focused on high-performance sports and electric vehicles. The site is professionally designed, featuring rich multimedia content, detailed product offerings including plug-in hybrids and electric models, and integrated configurator and stock vehicle listings. The brand is affiliated with Porsche Česká republika s.r.o., indicating strong market positioning in the Czech automotive sector. Technically, the website leverages modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the site presents a trustworthy and professional digital presence with minor areas for improvement in security transparency.

H

HZ Vinařství s.r.o.

valtickepodzemi.cz

49

Valtické Podzemí is a hospitality and wine tourism business based in the Czech Republic, specializing in historic wine cellar tours, wine tastings, and cultural events. The company operates a unique project connecting 13 historic wine cellars dating back to the 13th century, offering individual visits, group programs, and private events. The business holds a prestigious award, CHAMPION TOP VINAŘSKÝ CÍL ČR, underscoring its quality and reputation in the local market. The website is professionally designed, mobile-optimized, and rich in relevant content targeting wine enthusiasts, tourists, and corporate clients. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and AOS for animations. It employs performance optimization tools like WP Rocket and SEO enhancements via Yoast SEO. The site uses Google Tag Manager and Microsoft Clarity for analytics and tracking, with a GDPR-compliant cookie consent mechanism in place. Social media integration and partner links further enhance its digital presence. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security policy and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the presence of clear contact information and business details supports legitimacy. Overall, the site demonstrates a strong security posture with room for improvement in transparency and formal security documentation. Strategically, the business should focus on publishing a security policy, establishing incident response contacts, and enhancing domain registration transparency to improve trust. Continued monitoring of third-party scripts and regular security audits will help maintain a robust security posture. The website's excellent content quality and user experience position it well for growth in the wine tourism sector.

S

Svatební centrum Caxa Brno

caxabrno.cz

49

Svatební centrum Caxa Brno is a well-established wedding and formal wear rental and sales business located in Brno, Czech Republic. The company offers a wide range of wedding dresses, formal dresses, men's suits, and accessories, complemented by wedding coordination services. The website reflects a professional and comprehensive digital presence with rich content, customer testimonials, and active social media engagement. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and tracking tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the overall business credibility is supported by consistent branding and detailed service offerings. Privacy compliance is strong with clear policies and consent management. Strategic recommendations include enhancing security headers, adding incident response information, and maintaining up-to-date software to mitigate vulnerabilities.

Frac Nouvelle-Aquitaine MÉCA is a regional public art fund based in France, managing a public collection of approximately 1200 artworks. The institution focuses on exhibitions, cultural events, educational collaborations, and publishing editions related to contemporary art. The website serves as an information portal for visitors, collaborators, and the general public interested in the cultural offerings of the Nouvelle-Aquitaine region. Technically, the site is built on WordPress with modern front-end technologies such as Swiper.js and jQuery, and it employs SEO best practices via the Yoast SEO plugin. The site is hosted by IONOS SE and secured with HTTPS, providing a safe browsing experience. However, some security headers are not visibly present, and Google Analytics is installed but not configured, indicating room for improvement in analytics and security monitoring. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though no explicit GDPR compliance statements or data protection officer contacts are found. Overall, the site is professional, trustworthy, and well-maintained, serving its cultural mission effectively.

BeSignal is a specialized software provider offering whistleblowing reporting platforms tailored to meet the requirements of the European Whistleblowing Directive and data protection standards. Founded in 2021 and based in France, the company targets organizations in both the corporate and public sectors, including schools, to streamline whistleblowing report management and resolution. Their business model is primarily SaaS, delivering compliance-focused solutions with multi-language support and a professional online presence. Technically, the website leverages modern JavaScript frameworks such as Vue.js, integrates HubSpot for marketing and analytics, and employs Cookiebot for cookie consent management. The hosting is provided by OVH sas, a reputable European hosting provider. Security-wise, the site enforces HTTPS and has domain protections against unauthorized transfers or deletions, but lacks DNSSEC and some security headers. No explicit privacy policy or terms of service were found, which is a compliance gap. Overall, the website is professional and functional with moderate security posture and good business credibility.

S

Svět notebooků

svetnotebooku.cz

39

Svět notebooků is a Czech language media website specializing in news, reviews, and insights about notebooks and related technology. The site targets technology enthusiasts and notebook users primarily in the Czech Republic. It operates on a WordPress CMS platform with modern web technologies and integrates Google Analytics for visitor tracking. The website presents professional content with good design and navigation, optimized for mobile devices. However, it lacks published privacy and cookie policies, which are critical for GDPR compliance and user trust. Security practices are basic, with HTTPS enabled but missing important security headers and incident response information. Overall, the site is legitimate and functional but would benefit from enhanced privacy and security measures.

Bluesight is a healthcare technology company specializing in hospital and pharmacy operations intelligence. Their website showcases a suite of products designed to optimize inventory management, drug diversion surveillance, purchasing, compliance, drug shortage management, and patient privacy monitoring. Positioned as a market leader with multiple industry awards, Bluesight targets hospitals and health systems seeking to improve operational efficiency and compliance. The company has a well-established digital presence with a professional, user-friendly website that integrates modern web technologies and analytics tools. The site is optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, domain locking, and good security practices, though DNSSEC is not enabled. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. Overall, Bluesight presents a trustworthy and credible business with clear contact channels and transparent information.

R

re:cap global investors ag

re-cap.ch

51

re:cap global investors ag is an established Swiss investment advisory and asset management firm specializing in renewable energy investments. With over 15 years of experience and a presence in seven European countries, the company offers services including investment advisory, asset management, transaction consulting, project development, and project sales. Their market position is strong, supported by a significant asset portfolio and investment volume. The website reflects a professional and modern digital presence built on WordPress with Elementor and Astra theme, optimized for SEO and mobile devices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR.

C

C & K člen skupiny AUTO UH a.s.

motouh.cz

42

The website www.motouh.cz represents a medium-sized Czech retail and service business specializing in CFMOTO motorcycles and ATVs. It operates under the parent company AUTO UH a.s., offering sales, service, and rental of motor vehicles primarily targeting customers in the Czech Republic. The site is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it employs modern JavaScript libraries and Google Fonts, with HTTPS enforced and a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with no evident vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS data is a notable gap, reducing domain trustworthiness, but the visible business information and social media presence support legitimacy. Overall, the site is a reliable digital presence for a local transportation retailer.