Security Directory

The Encyklopedie dějin Brna website is a specialized educational platform dedicated to the history of Brno, offering a rich repository of historical data, biographies, events, and cultural heritage. It is supported by reputable academic and museum institutions, which enhances its credibility and trustworthiness. The site targets researchers, students, and the general public interested in regional history, operating as a non-commercial cultural resource. Technically, the website employs modern web technologies including Bootstrap, Google Fonts, and Google Analytics, ensuring a responsive and user-friendly experience across devices. The site is well-structured with clear navigation and relevant content, though it lacks some advanced accessibility features.

S

Střední škola, Základní škola a Mateřská škola Rakovník, příspěvková organizace

zsrako.cz

46

Střední škola, Základní škola a Mateřská škola Rakovník is a public educational institution based in the Czech Republic, providing preschool, elementary, special, and secondary education with a focus on special pedagogical care. The website serves students, parents, and educators with relevant information, news, and resources. It holds a stable market position as a regional educational provider with a domain registered since 2007, reflecting its established presence. The institution offers key services including various school levels, school club activities, and meal ordering facilities.

C

CBS Nakladatelství s. r. o.

malovane-mapy.cz

49

CBS Nakladatelství s. r. o. operates the website malovanemapy.cz, specializing in the creation and sale of hand-painted maps that combine artistic craftsmanship with cartographic accuracy. Their offerings include various map types such as city maps, area maps, cycling maps, panoramic maps, thematic maps, and orientation plans, targeting tourists, municipalities, schools, and cycling enthusiasts. The company positions itself as a niche provider of unique, custom-made maps that serve both decorative and practical purposes. Technically, the website is built on WordPress with Bootstrap framework, incorporating modern web technologies and Google Analytics for visitor tracking. The site is mobile-optimized with good navigation and content quality, although some accessibility features could be improved. Performance is moderate, and the site uses HTTPS with a valid SSL certificate, ensuring secure communication. From a security perspective, the site lacks several important security headers and does not display a privacy or cookie policy, which are compliance gaps especially under GDPR. No visible vulnerabilities or exposed sensitive data were detected, and the use of Google Analytics indicates moderate user tracking. The WHOIS data is unavailable or privacy protected, which is common for small businesses but limits domain registration transparency. Overall, the website is professional and trustworthy with clear business information and contact details. However, improvements in privacy compliance and security best practices are recommended to enhance user trust and regulatory adherence.

M

Move Around

move-around.cz

52

Move Around is a local dance group based in the Jihomoravský kraj region of the Czech Republic, catering to dancers of all age groups including children, juniors, adults, and those over 25 years old. The group operates primarily in Hustopeče, Velké Němčice, and Žabčice. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript libraries. The technical infrastructure is typical for small community organizations using website builders, with moderate performance and good mobile optimization. Security posture is basic, with no advanced security headers or policies detected, and the domain WHOIS data is unavailable, likely due to privacy protection. This lack of transparency impacts trustworthiness. Overall, the site serves its purpose as an informational platform for the dance group but lacks formal privacy, cookie, and security policies.

The website represents a small local school cafeteria service in Velké Němčice, Czech Republic, providing meals primarily to children attending local schools and kindergartens, as well as employees and external diners. The business has a long history dating back to 1957, emphasizing nutritious and varied meals. The website content is basic but informative, focusing on history, current operations, pricing, and contact links. Technical infrastructure is simple, relying on basic HTML, CSS, and JavaScript without modern CMS or advanced frameworks. Security posture is weak due to lack of visible HTTPS enforcement and security headers, and no explicit contact information or incident response details are provided. Privacy compliance is partially addressed with a privacy policy and terms of service pages, but cookie consent mechanisms are absent. Overall, the site is safe and appropriate for general audiences but would benefit from technical and security improvements.

The website 'Orel jednota Velké Němčice' serves as an online presence for a local sports and community organization based in Velké Němčice, Czech Republic. It primarily focuses on promoting sports activities, community events, and cultural engagement for local residents and sports enthusiasts. The site content is basic and primarily informational, with limited interactive features or advanced technical implementations. The business model is non-profit and community-oriented, targeting local audiences. From a technical perspective, the website uses standard HTML, CSS, and JavaScript, including Google Analytics for visitor tracking. There is no evidence of a modern CMS or advanced frameworks. The site lacks visible HTTPS enforcement and security headers, which impacts its security posture negatively. Mobile optimization and accessibility are basic, and SEO practices are minimal. Security-wise, the site shows several weaknesses: absence of HTTPS, no privacy or cookie policies, no contact information for security or incident response, and no visible security best practices. The WHOIS data is missing, which raises concerns about domain legitimacy and registration status. Overall, the security posture is weak, with critical recommendations needed to improve trust and compliance. The overall risk assessment indicates a low to moderate risk primarily due to missing security controls and lack of transparency in domain registration. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact information, and improving security headers and compliance measures.

The website vystavavin.cz serves as a local informational portal for wine exhibitions and tastings in Velké Němčice, Czech Republic. It primarily targets wine enthusiasts and local visitors interested in wine-related events. The site offers catalogs, photo galleries, event schedules, and rental information for wine cooling boxes. The business operates as a small-scale event promoter with a focus on community engagement and regional wine culture. Technically, the website is built with basic HTML and JavaScript, including an outdated Google Analytics urchin.js script. It lacks modern web development practices such as responsive design, accessibility features, and secure HTTPS implementation. The site performance is slow, and SEO optimization is minimal. There is no detected CMS or advanced frameworks. From a security perspective, the site does not use HTTPS, lacks security headers, and employs outdated analytics scripts, which collectively lower its security posture. No privacy or cookie policies are present, indicating poor compliance with GDPR and related regulations. Contact information is limited but available, and no forms or user data collection mechanisms are detected, reducing exposure to data breaches. Overall, the website presents a moderate risk profile due to missing security best practices and compliance policies. It is suitable for mature audiences given its alcohol-related content but does not contain any explicit or adult content. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance trust and user experience.

M

Mateřská škola Velké Němčice

msvelkenemcice.cz

57

The website represents Mateřská škola Velké Němčice, a small public preschool educational institution located in the Czech Republic. It provides preschool education and childcare services primarily targeting local parents and guardians. The site offers announcements, organizational information, and educational content relevant to its audience. The business model is that of a public educational organization with a local community focus. Technically, the website is built on the Webnode platform, leveraging Amazon Cloudfront CDN for content delivery. It uses modern web technologies including HTML5, CSS3, and JavaScript, and is optimized for mobile devices with moderate performance. The site includes a cookie consent mechanism and uses Google Tag Manager for analytics, indicating a basic level of digital maturity. From a security perspective, the site enforces HTTPS with a valid SSL certificate and implements cookie consent for privacy compliance. However, it lacks visible security headers and formal privacy or terms of service documents, which are areas for improvement. No vulnerabilities or suspicious content were detected, and the site appears safe for general audiences. Overall, the website is functional and professional for its purpose but would benefit from enhanced security practices and clearer privacy documentation to improve trust and compliance.

B

brain at work GmbH

brain-at-work.de

48

brain at work GmbH is a well-established German web agency specializing in website creation, online shops, SEO, and tailored online marketing solutions. With over 25 years of experience and a strong regional focus in Germany, the company demonstrates a solid market position supported by long-term client relationships and high customer satisfaction. Their service portfolio includes website and webshop development, SEO services, employee recruitment support, and accessibility solutions, reflecting a comprehensive digital marketing approach. Technically, the website is built on a proprietary CMS (bee.tools®), employs modern web technologies, and is hosted on reliable German infrastructure. The site is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible cookie consent mechanisms and published security policies, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

O

Místa | Okolonás

okolonas.eu

45

The website 'Okolonás' serves as an informational platform showcasing various cultural, historical, and natural places of interest primarily in the Nový Jičín region of the Czech Republic. It targets general audiences interested in local tourism and cultural heritage. The site employs modern web technologies including Vue.js for frontend rendering and Leaflet.js for interactive map features, indicating a moderate level of digital maturity. Google Tag Manager is integrated for analytics and tracking purposes. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are critical for GDPR compliance. Contact and incident response information are absent, limiting user trust and compliance readiness. Overall, the site is professionally designed with good user experience but requires enhancements in privacy, security policies, and contact transparency to improve trust and compliance.

M

MagicWare, s.r.o.

magic2g.cz

54

MagicWare, s.r.o. operates the Magic2g platform, providing comprehensive e-commerce solutions and consulting services primarily targeting businesses seeking to develop or enhance their e-business capabilities. The company leverages its experience from numerous successful projects and a proprietary framework optimized for performance to deliver services including product information management, content management, digital marketing, B2B partner management, and system integrations. The website presents a professional image with clear business information and multiple partner references, indicating a solid market position within the Czech Republic and surrounding regions. Technically, the website is built on ASP.NET Web Forms with modern JavaScript libraries such as Swiper.js for UI components and integrates Google reCAPTCHA for form security and Smartlook for user behavior analytics. The site is served over HTTPS with a valid SSL certificate, ensuring secure communications. While the site shows moderate performance and good mobile optimization, there is room for improvement in accessibility and SEO practices. Privacy compliance is partially addressed through a cookie consent banner, but lacks explicit privacy and terms of service documentation. From a security perspective, the site employs standard best practices such as HTTPS and CAPTCHA protection on forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust analysis, but the website content and business information appear legitimate and professional. Overall, Magic2g.cz is a credible and professionally maintained e-commerce platform website with moderate technical maturity and security posture. Strategic improvements in privacy documentation, security headers, and accessibility would enhance compliance and trustworthiness.

J

Jiří Prskavec

jiriprskavec.cz

41

The website www.jiriprskavec.cz is a professionally designed personal site dedicated to Jiří Prskavec, an Olympic gold medalist in canoe slalom. It serves as a platform to showcase his biography, career achievements, photo and video galleries, and partnerships with various sponsors. The site targets fans, media, and sponsors, focusing on personal branding and promotion. Technically, the site uses modern web technologies including JavaScript libraries, Google Analytics, and social media SDKs, with a responsive design optimized for mobile devices. However, the site lacks explicit privacy and cookie policies, and no WHOIS data is available for the domain, which limits trust verification. Security headers are not detected, indicating room for improvement in security posture. Overall, the site is content-rich, trustworthy, and professionally maintained but would benefit from enhanced compliance and security measures.

TÜV SÜD Czech is a well-established enterprise providing trusted solutions in safety, security, and sustainability sectors. With over 150 years of experience, the company offers a broad portfolio of services including testing, certification, auditing, inspection, calibration, cybersecurity, and training. The website reflects a mature digital presence with professional design, multi-language support, and compliance with GDPR and cookie consent regulations. Technically, the site uses modern technologies such as Sitecore CMS, Google Tag Manager, and Adobe Tag Manager, ensuring good performance and user experience across devices. Security posture is strong with HTTPS enforced and privacy-focused consent mechanisms, though explicit security headers and published security policies are absent. The lack of WHOIS data limits domain registration trust verification but does not detract from the overall legitimacy indicated by the website content and branding.

F

Freudenberg Home and Cleaning Solutions

freudenberg-homeandcleaningsolutions.com

69

Freudenberg Home and Cleaning Solutions is a well-established international company specializing in innovative cleaning products and systems for both consumers and professional markets. With a history dating back to 1948 and a strong presence in 35 countries, the company operates under the Freudenberg Group umbrella and maintains a portfolio of nine brands. Their business model focuses on manufacturing and distributing sustainable, high-performance cleaning solutions, supported by extensive consumer research and innovation. Technically, the website is built on a modern stack including Pimcore CMS, Bootstrap framework, and uses Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. However, some security headers are missing, and no explicit incident response or vulnerability disclosure information is provided. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but improvements can be made by adding security headers and publishing security policies. The WHOIS data is missing or unavailable, which slightly reduces trust from a domain registration perspective, though the website content and branding strongly indicate legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its business and customer needs effectively.

Raken, Inc. operates a professional and comprehensive cloud-based construction management software platform designed to streamline field workflows for contractors. The website demonstrates a mature digital presence with extensive features including daily reports, time tracking, safety management, and integrations. The technical infrastructure leverages modern JavaScript frameworks and marketing tools, ensuring good performance and user experience across devices. Security posture is strong with HTTPS, reCAPTCHA, and security headers, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall website professionalism and business information support legitimacy. Strategic recommendations include publishing security and incident response policies and verifying domain registration details to enhance trust.

Koszalin360.pl is a regional interactive multimedia portal focused on providing spherical tours, 360° videos, and multimedia content showcasing the beautiful areas of the Pomorze Zachodnie region in Poland. The website is operated by PERSKIMEDIA Szymon Perski, a small media company established in 2016. The business targets a general audience interested in immersive regional content and tourism-related multimedia experiences. The site uses a technology stack centered around HTML5, JavaScript, jQuery, and WebGL to deliver interactive content, although some libraries are outdated. From a technical perspective, the website demonstrates basic mobile optimization and accessibility features but lacks advanced SEO and performance optimizations. The absence of modern security headers and DNSSEC indicates room for improvement in security hardening. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities but also limiting user engagement and contact opportunities. Security posture is moderate with no visible critical vulnerabilities, but the lack of privacy and cookie policies, security headers, and contact information for incident response reduces compliance and trustworthiness. The WHOIS data aligns well with the website content, showing consistent registration details and domain age appropriate for the business history. Overall, the site is functional for its purpose but would benefit from enhanced security practices, privacy compliance, and richer business contact information to improve trust and user confidence.

K

Kocham Koszalin - Program Karta Mieszkańca Koszalina

kochamkoszalin.pl

49

Kocham Koszalin is a community social program focused on strengthening the sense of community among residents of Koszalin, Poland, and encouraging settlement in the city. The program offers an electronic resident card system providing benefits, discounts, and access to local events, targeting both residents and local business partners. The website reflects a well-structured digital presence with clear navigation, accessibility features, and active social media engagement. Technically, the site uses modern JavaScript libraries and frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and a Content Security Policy, though additional headers and DNSSEC could enhance security further. Privacy compliance is well addressed with comprehensive cookie consent mechanisms and a detailed privacy policy. Overall, the site demonstrates a professional and trustworthy digital platform for a government/community initiative.

ept GmbH is a well-established manufacturer specializing in precision electronic connectors with over 50 years of experience. The company operates internationally with subsidiaries and partner sites in the USA, China, Czech Republic, and Italy, serving primarily the automotive and electronics manufacturing sectors. Their website reflects a professional and comprehensive product catalog, emphasizing quality and customization capabilities backed by multiple ISO certifications. Technically, the website is built on a modern CMS with responsive design and interactive elements such as product finders and multimedia content, indicating a mature digital presence. Security-wise, the site uses HTTPS but lacks advanced security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain trust analysis but does not detract significantly from the company's apparent legitimacy based on content and certifications. Overall, the website is a reliable resource for industry professionals seeking high-quality connector solutions.

ept GmbH is a German-based manufacturer specializing in a wide range of industrial connectors including highspeed, miniaturized, rugged, EMC/shielding, power, and automotive connectors. The company offers both standard and customized connector solutions, targeting industrial clients and electronics manufacturers globally. Their website is professionally designed, multilingual, and provides clear contact information, reflecting a mature B2B business model with a medium-sized market presence. Technically, the website is built on the bee.tools® CMS platform, uses modern web standards (HTML5, CSS3, JavaScript), and is secured with HTTPS. The site is mobile-optimized and offers a good user experience with clear navigation. However, there is room for improvement in accessibility and SEO optimization. No analytics or tracking scripts were detected, indicating a minimal user tracking approach. From a security perspective, the site benefits from HTTPS and lacks exposed sensitive data. However, it lacks important security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration consistency, which should be addressed to enhance trust. Overall, the website presents a professional and trustworthy business front but requires improvements in privacy compliance, security headers, and domain registration transparency to strengthen its security posture and regulatory adherence.

ept GmbH is a German-based manufacturer specializing in a wide range of electronic connectors and connector solutions, serving industrial and manufacturing sectors globally. Their product portfolio includes highspeed, miniaturized, rugged, EMC/shielding, power, automotive, and customized connectors, indicating a strong focus on technical innovation and industry standards. The website supports multiple languages, reflecting an international market presence. Technically, the site is built on the bee.tools® CMS platform, uses modern web technologies including WebP and SVG images, and is mobile optimized. However, there is room for improvement in accessibility and SEO. Security posture is moderate with HTTPS enabled and use of secure image formats, but lacks visible security headers and explicit privacy or cookie policies. WHOIS data for the domain is unavailable, which raises some concerns about domain legitimacy, though the website content and branding are professional and consistent with a legitimate business. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

The website scriptxyz.xyz presents a basic login interface built on the Laravel framework, targeting users who need authentication services. The site is minimalistic with no visible business branding, contact information, or policies, indicating it may be an early-stage or internal application rather than a public-facing commercial service. The technical infrastructure leverages modern web technologies including Laravel, Bootstrap, and reputable CDNs for fonts and scripts, hosted behind Cloudflare DNS services. However, the absence of DNSSEC and security headers suggests room for improvement in security hardening. The WHOIS data is notably suspicious due to a domain creation date set in the future, which undermines trust and raises legitimacy concerns. No privacy or cookie policies are present, and no analytics or tracking mechanisms are detected, indicating minimal user data collection but also a lack of compliance transparency. Overall, the site is functional but lacks maturity in business presence and security posture.

The website mas-slavkovskebojiste.cz is currently a parked domain with no active business content or services. The page primarily serves as a placeholder indicating the domain may be for sale, with heavy reliance on advertising scripts and no meaningful user engagement features. The technical infrastructure uses standard HTML and JavaScript with Google Adsense Domains CAF and AdsDeli advertising networks, hosted via Cloudfront CDN. There is no evidence of a CMS or modern web frameworks. Security posture is weak, with no HTTPS or security headers detected, and no forms or inputs to secure. Privacy compliance is minimal, with only a basic privacy policy linked via a popup and no cookie consent mechanism. WHOIS data is suspicious, showing a domain creation date in the future and parking name servers, which undermines trust and legitimacy. Overall, the site lacks business credibility and professional content, resulting in a low trust score.

M

Město Veselí nad Moravou

veseli-nad-moravou.cz

51

The website veseli-nad-moravou.cz serves as the official online presence of the municipal government of Veselí nad Moravou, Czech Republic. It provides comprehensive information about the city, local government, services, cultural and sporting events, and contact details for citizens and visitors. The site is well-positioned as a trusted source of local information and public services, targeting residents and stakeholders in the community. The business model is that of a government information portal, focusing on transparency and citizen engagement. Technically, the website is built on the vismo® CMS platform, hosted by Wedos, a reputable Czech hosting provider. It uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics with a consent mechanism, Google Translate, and social media widgets. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and implements cookie consent in compliance with GDPR. While no explicit security policy or incident response information is published, the site shows no signs of vulnerabilities or exposed sensitive data. Security headers are partially inferred but not explicitly visible. The domain WHOIS data is consistent with the municipal nature of the site, showing a long-established registration with a known Czech registrar. Overall, the website is a professional, trustworthy, and secure municipal portal with room for improvement in explicit security disclosures and incident response transparency. It poses low risk and serves its public function effectively.

M

Městský úřad Cheb

cheb.cz

51

The website cheb.cz is the official municipal portal for the city of Cheb in the Czech Republic. It provides comprehensive information and services to residents and visitors, including access to official documents, event calendars, online reporting tools, and contact information for city administration. The site is well-positioned as a trusted government resource with a clear focus on citizen engagement and transparency. Technically, the site employs modern web technologies including HTTPS, Google Analytics with consent management, Google reCAPTCHA for form security, and a CMS platform (Vismo) tailored for municipal websites. The design is professional, mobile-optimized, and accessible, supporting a positive user experience. Security posture is solid with HTTPS enforcement and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with explicit cookie consent and a detailed privacy policy. Overall, the site demonstrates a mature digital presence appropriate for a government entity, with good trust indicators and no suspicious elements.

M

Město Králův Dvůr

kraluv-dvur.cz

47

The website kraluv-dvur.cz serves as the official digital presence for the town of Králův Dvůr in the Czech Republic. It provides residents and visitors with municipal information, including news updates, event calendars, public notices, and contact details for city offices. The site is positioned as a local government portal, focusing on transparency and community engagement. The business model is typical for a municipal government, offering public services and information without commercial intent. Technically, the website is built on the vismo CMS platform and incorporates standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Analytics and Google Tag Manager for visitor tracking, with a cookie consent mechanism that respects user privacy by default denying analytics and marketing cookies. The site is mobile-optimized and accessible, with good SEO practices and a clear navigation structure. From a security perspective, the site enforces HTTPS and implements cookie consent in compliance with GDPR. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the content. The domain registration is consistent with the municipal nature of the site, having been established in 2001, indicating a mature and legitimate online presence. Overall, kraluv-dvur.cz is a trustworthy and professionally maintained municipal website with good content quality and privacy compliance. Strategic improvements in security policy transparency and technical security headers would further strengthen its security posture.

M

Městský úřad Krnov

krnov.cz

45

The website krnov.cz serves as the official digital presence of the city of Krnov, Czech Republic. It provides comprehensive municipal information, including news, event calendars, public notices, and online services for residents and visitors. The site is well-positioned as a trusted government portal, offering clear contact details and multiple communication channels including social media. The target audience includes local citizens, tourists, and businesses seeking city-related information and services. Technically, the site uses a modern CMS (vismo), integrates Google Analytics with privacy-conscious consent defaults, and employs Google reCAPTCHA for form security. The design is professional, mobile-optimized, and accessible, supporting a positive user experience. Security posture is solid with HTTPS and spam protection, though some advanced security headers and policies are absent. Overall, the site demonstrates a mature digital infrastructure suitable for a municipal government entity.

M

Městský úřad Tišnov

tisnov.cz

49

The website www.tisnov.cz serves as the official municipal portal for the town of Tišnov in the Czech Republic. It provides residents and visitors with comprehensive information including news updates, official public notices, job vacancies, event calendars, and contact details for municipal offices. The site targets local citizens and stakeholders seeking government services and community information. The business model is that of a government service portal, focusing on transparency and public communication. Technically, the website employs a modern CMS platform (vismo), uses HTTPS for secure communication, and integrates Google services such as Analytics, reCAPTCHA, and Translate. The site demonstrates good mobile optimization, accessibility features, and SEO practices. Cookie consent mechanisms are implemented in compliance with GDPR, allowing users to manage their preferences. From a security perspective, the site benefits from HTTPS and bot protection via reCAPTCHA. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a concern, reducing trust slightly, but the official nature and content quality support legitimacy. Overall, the website is well-structured, professional, and trustworthy for its intended audience. Strategic improvements include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to strengthen trust and compliance.

P

PuzzleWebs s.r.o.

klubpodnikavcu.cz

65

Klub podnikavců is a Czech entrepreneurial community platform focused on connecting both novice and experienced entrepreneurs to foster growth, networking, and knowledge sharing. The website serves as a hub for regional business events, membership information, and partner collaborations, positioning itself as a key regional business community facilitator. Technically, the site is built on Drupal 10, leveraging modern web technologies and integrating standard tracking tools such as Facebook Pixel and Google Tag Manager, with Cloudflare DNS and REG-WEDOS registrar ensuring stable hosting infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response policies. Overall, the site is professional, compliant with GDPR, and trustworthy, serving its target audience effectively.

C

Court of Moravia

courtofmoravia.com

53

Court of Moravia is a small Czech Republic-based business specializing in organizational development and business game design services. Their offerings include culture and strategy guidance, gamification, transformation management, and related consulting services targeted at businesses seeking innovative approaches to organizational change. The website presents a professional image with clear contact information and a consistent brand presence. Technically, the site uses modern frameworks such as Bootstrap and integrates multiple analytics and advertising tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Hosting is provided by a Czech hosting provider as indicated by the nameservers. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. The domain is well-established since 2005, consistent with the company's founding date, and shows no suspicious registration patterns. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

N

Neumann János Egyetem

nje.hu

55

Neumann János Egyetem is a Hungarian higher education institution established in 2017, offering a broad spectrum of academic programs including undergraduate, graduate, doctoral, and specialized training. The university targets students and academic professionals primarily within Hungary and maintains a growing presence with nearly 5000 students. The website reflects a professional and modern digital presence with clear navigation, multilingual support, and integration of contemporary web technologies such as Vue.js and BootstrapVue. The technical infrastructure supports moderate performance and good mobile optimization, with visible efforts towards accessibility and SEO. Security posture is adequate with HTTPS enforced and CSRF protection, though it lacks explicit security headers and published incident response policies. Privacy compliance is well addressed with visible cookie consent and comprehensive privacy policies. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy institution.

E

ESTIA

estia.fr

68

ESTIA is a reputable French engineering school specializing in generalist and international trilingual engineering education. It is a member of the Groupe ISAE and affiliated with the CCI Bayonne Pays Basque. The institution offers a broad range of engineering programs, including preparatory cycles, bachelor, master, and specialized master's degrees, with a strong emphasis on international partnerships and research innovation. The website reflects a professional and well-established educational entity with comprehensive content and clear navigation. Technically, the website is built on TYPO3 CMS, uses modern analytics tools like Matomo and Google Analytics, and implements cookie consent mechanisms compliant with GDPR. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content align with a legitimate educational institution. Overall, ESTIA demonstrates a strong security and compliance posture with clear privacy policies, certifications, and contact information. The site is trustworthy and professionally maintained, serving its educational mission effectively.

ept GmbH is a German-based manufacturer specializing in electronic connectors and related solutions, serving primarily industrial and automotive sectors. The company offers a broad product portfolio including highspeed, miniaturized, robust, power, and automotive connectors, alongside customized solutions and competencies in injection molding, galvanizing, and SMT technologies. Their market position is that of an established medium-sized manufacturer with international subsidiaries and multilingual web presence. Technically, the website is built on the bee.tools® CMS platform, with modern HTML5 and JavaScript usage, and hosted likely by Deutsche Telekom. The site is mobile optimized with good navigation and professional design, though SEO and accessibility features are basic. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and formal security policies such as privacy, cookie, or vulnerability disclosure pages. No incident response contacts or security.txt files are present, which limits transparency and readiness indicators. No vulnerabilities or exposed sensitive data were found in the content. Overall, the website is professional and trustworthy with strong business credibility but could improve privacy compliance and security posture by adding formal policies and security headers. The risk level is moderate with no critical issues detected.

V

Velaro

velaro.com

69

Velaro is a well-established technology company specializing in live chat and customer engagement platforms designed to help businesses convert online prospects into customers. Their comprehensive suite includes live chat software, AI chatbots, messaging, voice communication, and knowledge base tools, targeting businesses seeking to enhance conversational marketing and sales automation. The company has a strong market position with a medium-sized operational scale and a founding date in 2000, indicating significant industry experience. Technically, Velaro's website demonstrates a mature digital infrastructure leveraging modern web technologies such as Webflow CMS, Google Tag Manager, Cloudflare security services, and Apollo.io tracking. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity and user experience focus. From a security perspective, Velaro employs HTTPS with strong SSL configurations, security headers, and client transfer protection on their domain. While no explicit security or incident response policies are published, the use of Cloudflare Turnstile captcha and absence of vulnerabilities indicate a solid security posture. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, Velaro presents a low-risk profile with strong business credibility, technical robustness, and privacy compliance. Strategic recommendations include enabling DNSSEC, publishing detailed security policies, and adding vulnerability disclosure mechanisms to further enhance trust and security transparency.

TSYS is a leading payment solutions provider specializing in scalable issuer solutions and payment processing technology. As part of the Global Payments family, TSYS serves a broad audience including financial institutions, fintech companies, and retailers worldwide. Their cloud-native, API-driven platform supports a wide range of services from digital onboarding to fraud management and loyalty programs. The website reflects a mature digital presence with professional design, clear navigation, and multimedia content that highlights their expertise and market leadership. Technically, the site leverages modern web technologies, including Sitecore CMS, advanced analytics tools, and a robust cookie consent mechanism, indicating a commitment to user privacy and data protection. Security posture is solid with HTTPS usage and privacy compliance tools, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which is a minor concern but does not detract significantly from the site's legitimacy given the strong brand presence and content quality. Overall, TSYS presents a trustworthy and professional online presence aligned with its enterprise-scale business model.

V

Vileda

vileda.sk

70

Vileda.sk is the official Slovak e-commerce website for Vileda, a leading brand in household cleaning products. Operated under Freudenberg Home and Cleaning Solutions s.r.o., the site offers a wide range of cleaning supplies including mops, cloths, and laundry care products. The platform targets Slovak consumers seeking quality and innovative household cleaning solutions, positioning itself as a trusted retail brand with a comprehensive product catalog and customer support via online forms. Technically, the website is built on SAP Hybris commerce platform, leveraging modern JavaScript libraries such as jQuery and Slick Carousel for UI components. It integrates Google Tag Manager, Microsoft Clarity, and Usercentrics CMP for analytics and privacy compliance. The site is mobile-optimized with good SEO and accessibility basics, ensuring a smooth user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It employs a consent management platform to comply with GDPR cookie regulations. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, Vileda.sk demonstrates a mature digital presence with strong business credibility and privacy compliance. The site is safe for general audiences, free from adult or questionable content. Strategic recommendations include enhancing accessibility, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and security posture.

HDT impex, s.r.o. is a medium-sized Czech company specializing in wholesale distribution of sound, lighting, stage technology, musical instruments, and artificial flowers. It is the largest supplier of large LED screens in the Czech and Slovak republics, providing installation, servicing, and content management services. The company also develops proprietary software for multimedia display and sports scoreboard management. Their target audience primarily consists of B2B clients in the Czech and Slovak markets. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and the Swiper.js library for UI elements. The site is accessible and moderately optimized for mobile devices but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS likely enabled but missing key security headers and policies. No privacy or cookie policies were found, indicating compliance gaps. WHOIS data is missing, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a real business.

T

Home page - Innovation week 2025

tydeninovaci.cz

52

Innovation Week 2025 is a major European event focused on innovation and artificial intelligence, held in Prague. The website presents a professional and comprehensive overview of the event, including detailed information about seminars, speakers, stages, and networking opportunities. The event targets leaders, tech enthusiasts, startups, investors, and companies seeking growth and innovation exposure. The technical infrastructure is modern, leveraging Vue.js and Nuxt.js frameworks, with extensive use of tracking and analytics tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, LinkedIn Insight Tag, and Smartlook. The website is mobile-optimized and provides a smooth user experience with rich multimedia content. Security posture is good with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published privacy or terms of service pages. WHOIS data is privacy-protected, which is common for event websites. Overall, the site is trustworthy and professionally managed, but could improve transparency and security practices.

S

SWCSummit

swcsummit.com

60

SWCSummit is a European startup event platform that organizes the Startup World Cup & Summit, providing a competitive environment for startups to connect with investors, access mentoring, and consume educational content such as podcasts and keynote sessions. The website presents a professional and consistent brand image with partnerships from notable organizations like Deloitte and Microsoft. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and a Solidpixels CMS platform, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. The domain WHOIS data raises concerns due to a future creation date and registrar DropCatch.com, indicating the domain may have been recently acquired or is parked, which impacts trustworthiness. Privacy and cookie policies are present but basic, and no terms of service or explicit security policies are found.

S

StartupDisrupt

startupdisrupt.com

69

Startup Disrupt is a well-established platform founded in 2014 that organizes international events and fosters a community for startups, innovators, and industry leaders. It offers networking, mentorship, and partnership opportunities, supported by Fortune 500 partners. The website is built on WordPress using modern technologies and optimized for performance and SEO. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear cookie consent and privacy policy, but lacks explicit terms of service and incident response policies. Overall, the platform demonstrates a mature digital presence with a strong market position in the technology and finance sectors.

4

4K agentura

4kagentura.cz

69

4K agentura is a recently established creative agency focused on supporting cultural and creative industries in the Karlovy Vary region of the Czech Republic. The agency provides consultation, education, workshops, and community building to foster innovation and economic development in the region's creative sector. The website is built on WordPress using the Divi theme, demonstrating a moderate level of technical maturity with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and Cloudflare used for DNS and CDN, though some security headers could be improved and a security policy is absent. Privacy compliance is strong with a comprehensive cookie consent mechanism and privacy policy in Czech. Business credibility is supported by professional content and clear navigation, though direct contact emails and phone numbers are not publicly listed, relying on contact forms instead.

C

CzechInvest

czechinvest.cz

57

CzechInvest is the official Business and Investment Development Agency of the Czech Republic, focused on advising and supporting entrepreneurs and foreign investors. The agency provides a broad range of services including investment incentives, visa support, startup incubation, and aftercare. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience of investors, startups, and businesses interested in Czechia. Technically, the site is built on ASP.NET WebForms with modern JavaScript libraries and font services, indicating a stable but somewhat traditional tech stack. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. Privacy compliance is strong with clear cookie and privacy policies aligned with GDPR. Overall, the site projects high trustworthiness and professionalism consistent with a government agency.

The analyzed website is a minimal login page hosted on the subdomain realtors.auth0.com, which is part of the Auth0 identity platform. The page serves as an authentication gateway likely for a real estate related service but contains no direct business information, content, or user-facing features beyond loading analytics scripts. The technical infrastructure is minimal, relying on external JavaScript for analytics and no visible CMS or frameworks. Security posture is weak based on the lack of visible HTTPS confirmation, security headers, or privacy policies. The WHOIS data for this subdomain is unavailable, consistent with it being a managed subdomain under auth0.com, a reputable identity provider. Overall, the site is functional for login purposes but lacks transparency and compliance features.

The website narteamstore.realtor is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content, business information, or contact details. The site appears to be protected by Cloudflare's WAF, indicating a focus on security but limiting external analysis. No metadata, structured data, or business-related content is available for review. The lack of accessible content and policies means the website's compliance, security posture, and business credibility cannot be properly assessed.

R

Regions Bank

regionsmortgage.com

68

Regions Bank is a large financial institution specializing in personal banking services with a strong focus on home mortgage loans and refinancing. The website provides comprehensive information and tools for mortgage applications, refinancing, home equity loans, and home improvement financing. The bank positions itself as a trusted advisor offering personalized service and competitive rates. The digital infrastructure is mature, leveraging multiple analytics, marketing, and tag management technologies to optimize user experience and marketing effectiveness. Security posture is strong with HTTPS enforcement, WAF protection via Incapsula, and secure login portals. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. However, WHOIS data is unavailable due to registry restrictions, which slightly impacts domain trust assessment but is mitigated by the professional presentation and branding consistency.

W

Windcave

paymentexpress.com

71

Windcave operates as a global payment gateway and EFTPOS solutions provider, delivering omni-channel payment processing services to a diverse range of industries including retail, finance, hospitality, and government. The company positions itself as a trusted platform facilitating seamless payment experiences for thousands of recognizable brands worldwide. Their key offerings include online, in-store, and unattended payments, supported by features such as global acquiring, tokenization, and data insights. Technically, the website is built with standard web technologies including HTML5, CSS, JavaScript, and leverages Cloudflare for performance and security monitoring. The site demonstrates good mobile optimization, clear navigation, and professional design quality. However, some accessibility features could be enhanced, and no CMS or hosting provider beyond Cloudflare is explicitly identified. From a security perspective, the site enforces HTTPS and includes secure login mechanisms. While no critical vulnerabilities or exposed sensitive data were detected, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is supported by a comprehensive privacy policy and terms of use, though the lack of a cookie consent mechanism is a notable gap. Overall, the website presents a professional and trustworthy front for a payment services company, but the missing WHOIS data and limited direct contact information slightly reduce trustworthiness. Strategic improvements in privacy compliance and security transparency would enhance the company's security posture and user confidence.

N

Nosco Media Inc.

goodmetrics.io

56

GoodMetrics is a newly founded technology startup (2023) offering a privacy-friendly alternative to Google Analytics. Their platform focuses on real-time website analytics, conversion tracking, and content performance measurement while respecting user privacy and GDPR compliance. The company is positioned as a small but innovative player targeting website owners and marketers dissatisfied with GA4. Technically, the website is built with modern frameworks such as Nuxt.js and Tailwind CSS, hosted behind Cloudflare DNS, and optimized for performance and mobile responsiveness. Security posture is decent with HTTPS and domain transfer protection, but lacks explicit security headers and published policies. Privacy compliance is partial due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, with active user engagement via a waitlist and contact email.

The website www.skillshare.com is currently inaccessible due to a Cloudflare security challenge page that blocks access to the actual content. This prevents a full analysis of the business, technical infrastructure, and security posture. The WHOIS lookup for the domain failed, returning no registration data, which raises concerns about the availability or legitimacy of the domain registration information. No privacy policies, cookie policies, terms of service, or contact information were found in the provided HTML content. The site appears to be protected by Cloudflare's Turnstile CAPTCHA, indicating a security measure to prevent automated access. Due to these restrictions, the security posture cannot be fully assessed, but the lack of visible security headers and metadata in the challenge page suggests minimal exposure at this stage. Overall, the site is rated low in content quality, technical implementation, security, privacy compliance, and business credibility due to the blocking mechanism.

C

Coursera, Inc.

coursera.org

80

Coursera, Inc. is a leading global online education platform founded in 2012, offering a wide range of courses, professional certificates, and degree programs in partnership with top universities and industry leaders such as Google, IBM, and Meta. The platform targets students, professionals, and lifelong learners seeking to advance their careers and acquire new skills. Coursera holds a strong market position as a trusted provider of accessible, high-quality education worldwide. Technically, Coursera employs a modern web technology stack including React, Webpack, and Amazon Cloudfront for hosting and content delivery. The website demonstrates excellent performance, mobile optimization, and accessibility features, supported by comprehensive SEO and metadata implementation. Privacy and cookie policies are clearly presented with GDPR compliance and user consent mechanisms in place. From a security perspective, Coursera enforces HTTPS, implements robust security headers, and follows best practices to protect user data and maintain platform integrity. No significant vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available incident response or vulnerability disclosure policy suggests room for improvement in transparency and security communication. Overall, Coursera presents a low-risk profile with a professional, secure, and user-friendly online presence. Strategic recommendations include enhancing incident response visibility, publishing a vulnerability disclosure policy, and maintaining continuous security audits to uphold trust and compliance.

S

Salary.com

salary.com

73

Salary.com is a leading provider of total compensation management solutions, offering a comprehensive platform that integrates compensation datasets, management software, planning tools, job architecture, pay equity analytics, and pay communications. The company serves both employers and individual employees/job seekers, providing trusted salary data and tools to optimize pay strategies and career decisions. Their market position is strong, supported by a large customer base and industry recognition. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, various analytics and marketing tools, and is well-optimized for mobile and SEO. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and business-focused.

P

Payscale

payscale.com

65

Payscale is a well-established technology company specializing in compensation data and salary comparison services. Founded in 2002 and headquartered in Seattle, Washington, it operates a trusted data platform that aggregates validated compensation data from multiple sources to assist employees, employers, and HR professionals in navigating market uncertainties. The website reflects a mature digital presence with comprehensive content, professional design, and clear business messaging targeting a broad audience interested in salary and compensation analytics. Technically, the website leverages modern web technologies including Webflow CMS, JavaScript frameworks, and integrates multiple marketing and analytics tools such as Google Analytics, Optimizely, OneTrust, and Marketo. The site is well-optimized for performance and mobile responsiveness, with strong SEO and accessibility features. Security best practices are observed with HTTPS enforcement, robust security headers, and cookie consent mechanisms integrated with OneTrust and Optimizely. From a security perspective, the site demonstrates a strong posture with no detected vulnerabilities or exposed sensitive data. However, it lacks a dedicated security policy page, incident response contact information, and a vulnerability disclosure policy, which are recommended for enhancing transparency and readiness. The WHOIS data confirms the legitimacy of the domain with consistent registrant information and appropriate domain age. Overall, Payscale.com presents a professional, secure, and privacy-conscious website suitable for its business model. Strategic improvements in publishing explicit security policies and incident response details would further strengthen trust and compliance.