Security Directory

D

Direct Fondee a.s.

fondee.cz

55

Fondee is a Czech Republic-based online investment platform specializing in simple, tailored ETF portfolios and corporate bond investments. The company targets retail investors seeking low-cost, transparent investment solutions, including sustainable ESG portfolios, children's accounts, and pension investment plans. The platform emphasizes ease of use, trust, and regulatory compliance, positioning itself as an emerging fintech player in the Czech market with growing media recognition. Technically, the website leverages modern web technologies including React, Google Tag Manager, and Google reCAPTCHA v3, hosted on DigitalOcean infrastructure with CDN support. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure reduces transparency. No WHOIS registration data was found, which impacts trust assessment but the overall site content and media presence support legitimacy. Overall, Fondee presents a secure, professional, and privacy-conscious investment platform with room for improvement in transparency and contact availability. Strategic recommendations include publishing security and incident response policies, verifying domain registration details, and enhancing visible contact information.

D

Direct pojišťovna a.s. spółka akcyjna oddział w Polsce

directubezpieczenia.pl

65

Direct ubezpieczenia is a Polish branch of the Czech insurance company Direct pojišťovna a.s., offering modern and transparent insurance solutions primarily in the automotive, property, and travel sectors. With over 300,000 clients in Poland and a decade of experience, the company emphasizes simplicity, fast claims processing, and customer-friendly service. The business model leverages direct sales and agent networks, with claims and customer service managed by UNEXT sp. z o.o., a trusted partner in Poland. The website reflects a professional and consistent brand image, targeting individual and corporate clients in Poland.

M

Ministerstvo spravedlnosti České republiky

justice.cz

59

The website msp.gov.cz is the official portal of the Ministry of Justice of the Czech Republic, serving as a comprehensive resource for justice-related information, public registries, legal news, and e-services. It targets the general public, legal professionals, and government officials, providing authoritative content and access to various justice system components. The site is well-branded, consistent, and maintains a high level of trust as a government domain. Technically, the site is built on the Liferay CMS platform with modern web technologies including React and Alloy UI. It employs HTTPS with strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. From a security perspective, the site enforces HTTPS and uses nonce-based inline scripts to mitigate injection risks. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual for a government domain but likely due to registry policies rather than malicious intent. Overall, the site presents a strong security posture and digital maturity appropriate for a government entity, with room for improvement in security header implementation and publishing a formal security policy or vulnerability disclosure program.

T

TradingView

tradingview.com

75

TradingView is a leading global financial technology platform that provides advanced charting tools, market data, and a social network for traders and investors. It serves a large user base with a freemium business model offering both free and subscription-based premium services. The platform integrates real-time market data, news, and trading capabilities, positioning itself as a comprehensive hub for market analysis and trading collaboration. Technically, TradingView employs modern web technologies including React, WebSocket communications, and advanced analytics tools, ensuring a fast, responsive, and mobile-optimized user experience. Security-wise, the site enforces HTTPS, uses multiple security headers, and integrates CAPTCHA protections, reflecting a mature security posture. However, the absence of publicly available WHOIS registration data and explicit security policies suggests areas for transparency improvement. Overall, TradingView presents a professional, trustworthy, and technically robust platform with minor gaps in public security disclosures.

D

Direct Fidoo Payments s.r.o.

fidoo.com

69

Fidoo is a Czech-based financial technology company specializing in corporate expense management solutions. Their platform offers business clients a combination of prepaid Mastercard corporate cards and a comprehensive expense management application that streamlines payment approvals, receipt digitization, and reporting. The company positions itself as a modern, digital-first alternative to traditional expense handling, targeting medium-sized businesses and enterprises seeking efficiency and transparency in financial operations. The website reflects a mature digital presence with strong branding and customer testimonials, indicating a solid market position within the Czech Republic and potentially broader European markets. Technically, the website is built on modern web frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates Google Tag Manager for analytics and marketing. The platform supports mobile optimization and accessibility, with clear SEO practices and fast performance. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data is a notable gap, potentially due to privacy protection or domain registration issues, which slightly impacts trustworthiness. However, the website's content, regulatory references, and Mastercard licensing provide strong legitimacy signals. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, Fidoo presents a professional, secure, and user-friendly platform for corporate expense management, with recommendations to enhance transparency around security policies and domain registration details to further strengthen trust and compliance.

D

Direct nadace

directnadace.cz

66

Direct nadace is a Czech non-profit foundation established in 2010, originally as Nadace VIGO, focusing on social inclusion, youth development, amateur sports, volunteerism, and emergency response. It operates under the Direct group umbrella, leveraging business resources to create social impact. The website is modern, well-designed, and mobile-optimized, built on Next.js and React with media hosted on AWS S3. Privacy and cookie policies are implemented with consent management tools. Security posture is strong with HTTPS and security headers, though no explicit security or incident response policies are published. WHOIS data is unavailable, which slightly impacts trust but the website content and external references support legitimacy.

D

Direct Group, s.r.o.

directgroup.eu

64

Direct Group, s.r.o. is a large Czech financial and technology group operating multiple subsidiaries in insurance, payment services, and investments. The company serves both individual and business clients, emphasizing simplicity, speed, reliability, and friendliness in its offerings. The website reflects a mature and professional digital presence with a modern tech stack based on Next.js and React, and uses third-party services such as CookiePro for cookie consent and Google Tag Manager for analytics. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security policies. Privacy compliance is basic, with cookie consent implemented but no clear privacy or terms of service pages found. Overall, the site is well-branded, consistent, and trustworthy, though improvements in transparency and security documentation are recommended.

M

MK Mariusz Korzekwa

embed.tube

56

embed.tube is a specialized online tool offering responsive iframe embed code generation for popular video platforms such as YouTube, Vimeo, Twitch, and Dailymotion. Founded in 2019 and operated by MK Mariusz Korzekwa in Poland, the service targets web developers, content creators, and website owners seeking easy and customizable video embedding solutions. The platform provides over 20 customization options, including autoplay, loop, and responsive sizing, enhancing user engagement on client websites. Technically, embed.tube leverages modern web technologies including React and Gatsby, with integrations of analytics and user behavior tracking tools like Google Analytics, Microsoft Clarity, and Hotjar. The website is well-optimized for performance and mobile responsiveness, with good SEO and accessibility basics in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and explicit GDPR compliance indicators. Business credibility is strong, supported by transparent WHOIS data and consistent branding. Overall, embed.tube presents a professional and trustworthy service with room for enhancements in privacy and security policy transparency.

D

Domains By Proxy, LLC

esm.sh

56

esm.sh is a specialized open source CDN service focused on delivering modern JavaScript and TypeScript modules (ESM) globally with no build steps required. It targets web developers and Deno users by providing fast, smart, and global CDN capabilities with support for import maps, on-the-fly transformation of TSX, Vue, and Svelte files, and compatibility with Deno's module system. The project is hosted on GitHub and powered by Cloudflare, indicating a modern and scalable technical infrastructure. The website is well-structured with comprehensive documentation and usage examples, supporting a developer-centric audience. However, it lacks formal privacy, cookie, and terms of service policies, which are important for compliance and user trust.

C

Cornerstone OnDemand

csod.com

74

Cornerstone OnDemand operates a leading AI-powered human capital management platform designed to empower workforce agility and talent development globally. The company serves a large enterprise customer base with comprehensive solutions including learning management, talent management, compliance, and workforce intelligence. Their market position is strong, supported by numerous industry awards and analyst recognitions. Technically, the website is built on modern frameworks such as Next.js and React, with advanced animations and integrations with marketing and analytics tools like Marketo and Google Tag Manager. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though explicit incident response and vulnerability disclosure policies are not publicly detailed. Overall, the website reflects a mature, professional, and trustworthy enterprise digital presence.

K

KLUDI

kludi.com

64

KLUDI is a well-established German manufacturing company specializing in high-quality bathroom and kitchen fixtures, combining nearly a century of engineering expertise with innovative design. The website reflects a professional digital presence built on modern technologies such as React, Next.js, and Ant Design, hosted with Cloudflare DNS services. While the site is visually appealing and mobile-optimized, it lacks explicit privacy and cookie policies, as well as visible contact information, which are important for compliance and user trust. Security posture is generally good with HTTPS enabled and domain transfer protections, but could be improved by implementing DNSSEC and security headers. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

Gas.be is a Belgian collaborative platform dedicated to promoting the use of renewable and green gases in household, mobile, and industrial sectors. The organization plays a pivotal role in supporting the energy transition by providing up-to-date information, studies, and practical solutions such as hybrid heating systems and bio-LNG for transport. The website is professionally designed, content-rich, and targets a broad audience including consumers, industry professionals, and policymakers in Belgium. Technically, the site leverages modern frameworks like Next.js and React, and uses Storyblok CMS for content management, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS and security headers implemented, though the site lacks visible cookie consent mechanisms and published security policies. WHOIS data is restricted due to registry policies, but the website's professional presentation and partner ecosystem support its legitimacy. Overall, Gas.be is a credible and authoritative source in the renewable gas sector in Belgium.

A

Albatros Media a.s.

kmc.cz

60

The website kmc.cz represents the Klub mladých čtenářů (Young Readers Club) operated under the parent company Albatros Media a.s., a well-established Czech publishing house. The club focuses on promoting reading among children and students from preschool to high school, providing catalogs, educational materials, and organizing events and competitions. The site is professionally designed with clear navigation and content relevant to its target audience of children, educators, and schools. Technically, the site uses modern JavaScript libraries such as jQuery and React, integrates Google Tag Manager and Cookiebot for analytics and consent management, and employs HTTPS with CSRF protection on forms. However, some security best practices like security headers and explicit incident response contacts are missing. The WHOIS data for the domain is unavailable, which limits trust verification, but the strong branding and content quality support legitimacy. Overall, the site is secure, compliant with GDPR, and serves its educational mission effectively.

S

Slab

slab.com

70

Slab is a technology company specializing in knowledge base and wiki software designed to facilitate easy content creation, organization, and integration for teams. The company targets both technical and non-technical users, positioning itself as a popular SaaS provider in the collaboration software market. The website demonstrates a modern technical infrastructure leveraging React and Gatsby, hosted via Cloudflare, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and publishing formal security and privacy policies are recommended. Overall, the website is professional, trustworthy, and business-focused, with no indications of adult or questionable content.

P

PUXdesign

puxdesign.cz

61

PUXdesign is a Czech-based digital agency specializing in web design, digital marketing, and SEO services. The company targets businesses seeking professional online presence and marketing solutions. Their website is built on modern technologies such as React and Gatsby, integrating marketing tools like Sendinblue and Google reCAPTCHA to secure forms and manage communications. The site is well-structured, mobile-optimized, and GDPR compliant, reflecting a mature digital infrastructure for a small agency. Security posture is good with HTTPS and security headers implemented, though no explicit security policy or incident response information is published. WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses but reduces transparency. Overall, the website is professional and trustworthy with no signs of malicious activity or adult content.

H

Najděte si skvělého terapeuta — Hedepy online terapie

hedepy.cz

10

Hedepy.cz is an established online therapy platform founded in 2020, offering clients access to a wide network of vetted therapists primarily in the Czech Republic and other European countries. The platform emphasizes personalized therapist matching and provides a mobile app for convenient access to therapy sessions. With over 50,000 clients served and 700+ therapists, Hedepy positions itself as a trusted player in the online mental health space. The website content is professionally designed, mobile-optimized, and includes positive client testimonials and insurance partnerships, enhancing its credibility. Technically, the website leverages modern web technologies including React and Next.js, hosted on Vercel, with integrated error monitoring via Sentry and analytics through Google Tag Manager. The platform supports multiple languages and regional domains, indicating a mature digital infrastructure. Performance and SEO optimizations are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses monitoring tools but lacks visible security headers and published security policies or incident response contacts. Privacy and cookie policies are not clearly accessible, which is a compliance gap. No vulnerabilities or suspicious domains were detected, and no WAF or blocking mechanisms interfere with content access. Overall, Hedepy.cz demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

T

Testuj.to s.r.o.

testuj.to

71

Testuj.to s.r.o. operates a Czech Republic-based marketing platform that leverages micro-influencer communities to provide authentic product testing and reviews. The platform enables users to test products for free or at discounted prices and share their experiences to assist other consumers and product manufacturers. The company positions itself as the largest tester community in the Czech market, focusing on user-generated content as a marketing tool. Technically, the website is built on a modern React and Next.js stack, integrating multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates good mobile optimization, SEO practices, and security posture with HTTPS and security headers properly configured. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information and social media presence enhancing trust. However, the site lacks a publicly available security policy and incident response information, which could improve transparency and security readiness. Overall, the website is professional, trustworthy, and well-positioned in its niche, with moderate to good technical maturity and security practices.

O

Ottobock

ottobock.sk

71

Ottobock is a globally recognized leader in the healthcare sector specializing in prosthetics, orthotics, and mobility solutions. The company offers a broad range of innovative products and services aimed at improving the quality of life for individuals with physical disabilities. Their market position is strong, supported by a century-long history and ISO certifications, targeting healthcare professionals, patients, and rehabilitation centers worldwide. The website is professionally designed, multilingual, and optimized for mobile users, reflecting a mature digital presence. Technically, the website leverages modern frameworks such as React and Next.js, combined with analytics and optimization tools like Google Analytics and Visual Website Optimizer. The site demonstrates good performance, accessibility, and SEO practices, ensuring a positive user experience. Security measures include HTTPS enforcement and standard security headers, although there is room for improvement in publishing explicit security policies and incident response information. From a security perspective, the site shows a solid posture with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism, aligning with GDPR requirements. However, the absence of WHOIS data and public security disclosures slightly lowers the trust score. Overall, Ottobock's website is a trustworthy and professional platform that effectively supports its business objectives. Strategic recommendations include enhancing transparency around security policies and incident response, and improving WHOIS data visibility to strengthen domain trustworthiness.

K

Komerční banka, a. s.

nastartujtese.cz

62

Nastartujtese.cz is a Czech entrepreneurship support platform sponsored by Komerční banka, offering a competition and marketplace for starting entrepreneurs. The website provides information about the competition, prizes, partners, and business advice, targeting new business founders in the Czech Republic. The platform is positioned as a reputable grant and support program with a medium-sized presence and a focus on finance and non-profit sectors. Technically, the website uses modern web technologies including React and Google Tag Manager, with good mobile optimization and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details are missing. The absence of WHOIS data is a concern for domain legitimacy verification but the website's branding and partner ecosystem support its credibility. Overall, the site is professional, trustworthy, and compliant with GDPR, serving its target audience effectively.

Střední škola zemědělská a přírodovědná Rožnov pod Radhoštěm is a well-established secondary educational institution in the Czech Republic with over 120 years of tradition. The school specializes in agricultural and natural science education, offering comprehensive programs including practical training, student accommodation, and canteen services. It serves students, parents, and applicants primarily within the region and operates under the governance of the Zlínský kraj. The website reflects a professional and consistent brand image with clear contact information and access to official documents.

C

CRIF - Czech Credit Bureau

mcribis.cz

49

CRIF - Czech Credit Bureau operates the Cribis.cz platform, providing comprehensive credit and risk information services primarily for businesses in the Czech and Slovak Republics. The platform offers tools for screening companies and individuals, including credit reports, relationship diagrams, monitoring services, and AML compliance checks. The company positions itself as a trusted partner for businesses seeking to mitigate risks associated with unreliable partners. Technically, the website is built on WordPress with modern technologies such as React and integrates multiple analytics and marketing tools, including Google Analytics and Microsoft Clarity. The site demonstrates good privacy compliance with a detailed cookie consent mechanism and a comprehensive privacy policy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers are not confirmed. The absence of WHOIS data is a notable gap, reducing domain registration trustworthiness, but the website content and business information appear professional and credible overall.

V

Vimeo Livestream

livestream.com

62

Vimeo Livestream is a mature and reputable enterprise-level live streaming platform owned by Vimeo, Inc., providing comprehensive live video streaming, hosting, and monetization services. The company targets businesses and organizations seeking scalable and professional live streaming solutions for events, webinars, and corporate communications. Their market position is strong, leveraging Vimeo's brand and infrastructure to deliver high-quality streaming experiences. Technically, the website employs modern frameworks such as React and Next.js, hosted on AWS infrastructure, with excellent performance and mobile optimization. Security posture is robust with HTTPS, security headers, and domain protections, although explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, supporting Vimeo Livestream's position as a leading live streaming service provider.

B

Buttondown

buttondown.com

63

Buttondown is a small, independent SaaS company specializing in newsletter software designed for individuals, creators, and businesses seeking a simple, privacy-focused, and reliable email platform. Founded in 2017 by Justin Duke, it positions itself as a customer-centric alternative to larger email marketing platforms, emphasizing ease of use, automation, and long-term commitment to users. The platform offers features such as markdown support, API access, paid subscriptions, and concierge migration services, catering to a broad audience from hobbyists to enterprise users. Technically, Buttondown leverages a modern web stack including React and Next.js, hosted on Vercel, with integrations for analytics and payment processing via Stripe. The website is well-optimized for performance, mobile responsiveness, and SEO, with a clean, professional design and clear navigation. Security best practices are observed with HTTPS enforcement and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. From a security and compliance perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by a comprehensive privacy policy and GDPR adherence, although a cookie consent mechanism is absent. The WHOIS data indicates domain privacy proxy usage, which is justified for this business type, and the domain is well-established with a long registration period. Overall, Buttondown presents a trustworthy and professional online presence with room for minor improvements in transparency and cookie management. Strategically, Buttondown should focus on enhancing privacy compliance by implementing cookie consent, publishing security policies, and enabling DNSSEC to further strengthen trust and security posture. These steps will support its market position as a reliable and user-friendly newsletter platform in a competitive landscape.

A

Alkotó Ifjúság Alapítvány

scheiber.hu

48

The website represents the BZSH Scheiber Iskola and the Alkotó Ifjúság Alapítvány, a non-profit educational foundation based in Budapest, Hungary. It provides educational services including school management systems (eKréta), online meal registration (eMenza), and community engagement through events and social media. The target audience includes students, parents, educators, and community members. The site positions itself as a local educational institution with a focus on youth development and community support. Technically, the website is built using modern web technologies such as React and Material-UI, providing a responsive and visually consistent user experience. The site loads moderately fast and is optimized for mobile devices, though accessibility features are basic. SEO optimization is minimal but present through structured content and meta tags. From a security perspective, the site lacks visible security headers and does not display privacy or cookie policies, which are critical for GDPR compliance. No incident response contacts or vulnerability disclosure information is provided. The site uses HTTPS (assumed from URL) but lacks advanced security best practices. No analytics or advertising scripts were detected, indicating minimal user tracking. Overall, the website is functional and professional for its educational and non-profit purpose but requires improvements in privacy compliance, security headers, and incident response readiness to enhance trust and regulatory adherence.

R

RoboRobo Chat Widget

roborobo-widget.hu

53

The website roborobo-widget.hu represents a newly launched chat widget product, likely targeting businesses or website owners seeking chat integration solutions. The domain was registered recently in April 2024, indicating a startup or new product launch. The site is built using modern web technologies such as Next.js and React, suggesting a contemporary technical infrastructure. However, the website content is minimal, lacking business details, contact information, and policy documents, which limits its credibility and user trust. From a security perspective, the site does not exhibit any blocking mechanisms or WAF challenges, and HTTPS is presumably enabled though no explicit security headers were detected. The absence of privacy and cookie policies, as well as contact channels for incident response, indicates gaps in compliance and security posture. No analytics or advertising scripts were found, which reduces privacy concerns but also limits marketing insights. Overall, the website scores low to moderate on content quality, technical implementation, security, privacy compliance, and business credibility. The lack of transparency and minimal content are key weaknesses. Strategic improvements in policy publication, contact availability, and security hardening are recommended to enhance trust and compliance.

B

Buttondown

buttondown.email

63

Buttondown is a small, independent technology company providing a focused SaaS newsletter platform designed for creators and businesses seeking simplicity and reliability in email communication. Founded in 2017, it offers key services such as email newsletter creation, subscriber management, analytics, API access, and paid subscription handling. The platform emphasizes user success, privacy, and long-term commitment, distinguishing itself with a minimalist design and strong customer support. Technically, Buttondown leverages modern web technologies including React and Next.js, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, Buttondown presents a trustworthy, professional, and user-centric service with high customer satisfaction and a clear market niche.

F

Fishmonger

fishmonger.hu

57

Fishmonger.hu is a Hungarian seafood retail and wholesale business offering fresh fish, fillets, shellfish, and related products through multiple physical locations and an online webshop. The company emphasizes freshness, quality, food safety, and sustainability, serving both consumers and businesses in Hungary. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for marketing and analytics tools like Google Tag Manager and Facebook Pixel, managed with GDPR-compliant cookie consent via Cookiebot. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-structured, supporting a medium-sized business with a strong market position in the Hungarian seafood sector.

U

UNIQA

cherrisk.com

66

UNIQA is a large Hungarian insurance company offering a range of insurance products including home, travel, and accident insurance under the CHERRISK brand. The website serves as a platform for customers to purchase insurance, report claims, and access detailed product and legal documentation. The company targets general insurance customers in Hungary and maintains a professional online presence with consistent branding and comprehensive content. Technically, the website is built on the Liferay CMS platform using modern JavaScript frameworks such as React, and integrates third-party services like Google Tag Manager and Cookiebot for analytics and cookie consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance indicators. Overall, the website demonstrates a mature digital infrastructure and trustworthy business credibility.

R

Rossmann Magyarország Kft.

rossmann.hu

71

Rossmann Magyarország Kft. operates a comprehensive online drugstore platform offering a wide range of products including cosmetics, personal care, and household items. The company holds a strong market position in Hungary as a leading retailer with a well-established brand and parent company support from Dirk Rossmann GmbH. The website demonstrates a mature technical infrastructure leveraging modern frameworks such as Next.js and React, integrated with advanced analytics and marketing tools like Google Tag Manager and Cookiebot for GDPR compliance. Security posture is robust with HTTPS enforcement, security headers, and bot protection via reCAPTCHA, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the platform is professional, trustworthy, and compliant with relevant privacy regulations.

K

Könyvtárellátó Nonprofit Kft.

pedig.hu

54

The website pedig.hu serves as the official platform for the Pedagógus Igazolvány, a service operated by Könyvtárellátó Nonprofit Kft. It provides Hungarian educators with a digital means to register, manage, and utilize their teacher identification cards to access discounts and cultural benefits. The platform includes a web portal and mobile applications for iOS and Android, enhancing accessibility and user convenience. The site is well-branded, consistent, and targets educators in Hungary with a nonprofit service model. Technically, the website is built using modern web technologies including Next.js and React, ensuring a responsive and performant user experience. The site is mobile-optimized and includes essential SEO and accessibility features, although some accessibility enhancements could be made. The hosting provider is not explicitly identified, but the site uses HTTPS with excellent SSL configuration. From a security perspective, the site enforces HTTPS and secure user registration/login flows. However, it lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is available via a dedicated contact page, though no direct emails or phone numbers are visible on the homepage. Overall, pedig.hu presents a trustworthy, professional, and secure platform for its target audience. Strategic recommendations include implementing security headers, publishing a vulnerability disclosure policy, enhancing accessibility, and maintaining regular security audits to sustain and improve the security posture.

T

Thulium sp. z o.o.

thulium.com

72

Thulium sp. z o.o. operates a professional SaaS platform providing multichannel contact center solutions including email, phone, chat, Facebook Messenger, and SMS support. The company targets businesses seeking efficient customer support tools and positions itself as a comprehensive solution provider in this niche. The website is well-structured, modern, and optimized for performance and mobile use, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and domain protections in place, though some improvements such as enabling DNSSEC and publishing explicit security policies could enhance trust further. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The site uses standard analytics and marketing tools with appropriate cookie consent mechanisms, indicating good privacy compliance.

D

Digital Thinkers

digitalthinkers.com

63

Digital Thinkers is a well-established digital innovation company founded in 1999, specializing in designing and delivering innovative digital solutions tailored to client needs. Their market position is supported by a strong portfolio of projects and client testimonials, targeting businesses seeking digital transformation and product development services. The website demonstrates a modern technical infrastructure leveraging Next.js, React, and Cloudflare DNS, with good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA on forms, and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic but present, with a privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and business credible.

K

KOOP a.s.

kooperativa.cz

67

KOOP a.s. is a well-established energy company based in the Czech Republic, specializing in electricity and gas supply for both residential and commercial customers. The company has a solid market position supported by a long domain registration dating back to 1992, indicating a mature and stable business. Their website reflects a professional and consistent brand image, targeting primarily Czech households and businesses with sustainable energy solutions. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and moderate performance. Security posture is strong with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, KOOP a.s. demonstrates a credible and trustworthy online presence with a good balance of business professionalism and technical maturity.

K

KS Digital

ksdif.no

66

KS Digital is a Norwegian government-related organization providing sustainable shared digital services tailored to the needs of the municipal sector in Norway. The website positions KS Digital as a key digital service provider for Norwegian municipalities, emphasizing sector alignment and sustainability. The company was founded in 2024, consistent with the domain registration date, indicating a new but legitimate entity. The website content is professional, well-structured, and targets the Norwegian public sector audience. Technically, the site is built on WordPress with modern plugins and React components, indicating a moderate to advanced digital maturity. SEO is enhanced through Yoast SEO and structured data implementation. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is not explicitly provided, which may impact user trust and compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

I

Itron

itron.com

77

Itron is a recognized enterprise specializing in smart energy and water management solutions for utilities and cities. Their website reflects a mature digital presence with a focus on sustainability and efficiency through intelligent networks and software services. The company targets utility providers and municipal clients, offering technology-driven solutions to optimize resource management. Technically, the website leverages modern frameworks such as React and Liferay, combined with analytics tools like Google Analytics and Matomo, indicating a well-maintained infrastructure. Security posture is strong with HTTPS enforcement and consent management, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates professionalism and trustworthiness suitable for an enterprise in the energy sector.

W

webit! Gesellschaft für neue Medien mbH

webit.de

11

webit! Gesellschaft für neue Medien mbH is a well-established full service digital agency based in Dresden, Germany, founded in 1997. The company specializes in providing comprehensive digital solutions including strategy and consulting, UX/UI design, development, and operations, targeting primarily mid-sized enterprises. Their market position is strong, supported by partnerships with leading CMS and marketing platforms such as TYPO3, Sitecore, Ibexa, Kentico, and Storyblok. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the site leverages modern frameworks like Next.js and React, hosted on Vercel, and integrates advanced CMS and marketing automation tools.

B

beckapp solutions s.r.o.

beckapp.solutions

10

beckapp solutions s.r.o. is a small technology service provider based in Prague, Czech Republic, specializing in design, coding, and ongoing support for web and application development projects. The company targets businesses seeking tailored IT solutions and emphasizes client-specific, secure, and user-friendly software. Their market position is that of a niche provider with a focus on quality and client satisfaction, supported by testimonials from notable clients. Technically, the website is built using modern frameworks such as Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS enforced and secure forms, but lacks explicit security headers and published privacy or cookie policies. The WHOIS data is privacy protected, which is common and justified for this business type, though it limits transparency. Overall, the website is professional and trustworthy, but could improve compliance and security transparency.

B

Belchim Crop Protection

belchim.sk

49

Belchim Crop Protection operates as a medium-sized agricultural chemical company specializing in crop protection products such as fungicides, herbicides, insecticides, and plant growth regulators. The website serves as a corporate portal providing product catalogs and contact avenues primarily targeting agricultural professionals and farmers in Slovakia. The parent company is Pedro De Boeck, with the main domain belchim.sk referenced throughout the site. Technically, the website is built on WordPress using the Avada theme and incorporates modern libraries like React and jQuery, with Slider Revolution for visual content. The site is hosted on Brandshelter infrastructure with DNSSEC enabled and domain transfer protections in place, indicating a secure domain registration setup. Security posture is generally good with HTTPS enforced, but lacks advanced security headers and visible incident response policies. Privacy compliance is limited due to absence of cookie consent mechanisms and detailed privacy policies. Overall, the site is functional and moderately professional but could improve in privacy and security transparency.

D

Digital Thinkers

dtapp.hu

63

Digital Thinkers is a well-established digital innovation company founded in 1999, specializing in designing and delivering innovative digital solutions tailored to business needs. Their market position is supported by a strong portfolio of projects and client testimonials, targeting businesses seeking digital transformation and product development services. Technically, the website leverages modern frameworks such as Next.js and React, with Cloudflare providing DNS and CDN services, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is basic with a privacy policy and cookie consent banner present, but lacks detailed GDPR compliance indicators. Overall, the website demonstrates high professionalism and trustworthiness with room for enhanced transparency in security and contact information.

M

Moravio s.r.o.

moravio.com

68

Moravio s.r.o. is an established international software development agency specializing in custom software, AI, data analytics, and digital transformation services. With over 14 years in the market and more than 120 projects completed, Moravio serves a broad audience from startups to Fortune 500 companies. Their service portfolio includes software development, AI software, product development, technical due diligence, and software support, positioning them as a comprehensive digital solutions provider. The company is headquartered in Ostrava, Czech Republic, and demonstrates strong market presence through client testimonials, awards, and official memberships. Technically, the website leverages modern technologies such as React, Next.js, Node.js, TypeScript, and various AI frameworks including ChatGPT and LangChain. The site is built on Webflow CMS, hosted on Webflow's platform, and integrates advanced analytics and marketing tools like Google Tag Manager and LinkedIn Insight. The website is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs security headers, integrates Google reCAPTCHA, and follows best practices for secure forms and data handling. However, explicit security policies and incident response information are not publicly available, indicating room for improvement in transparency and preparedness. The WHOIS data is unavailable, likely due to privacy protection, which is common for businesses of this nature but introduces minor uncertainty regarding domain registration details. Overall, Moravio presents a professional, trustworthy, and technically sound online presence with strong business credibility. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing accessibility features to further strengthen their security posture and compliance standing.

I

Innovasjon Norge

innovationnorway.no

60

Innovasjon Norge is a Norwegian government agency dedicated to fostering sustainable growth and export opportunities for Norwegian businesses. The organization provides comprehensive support services including advisory, capital funding, and networking to entrepreneurs and companies at various stages such as starting, scaling, internationalizing, and renewing their business models. The website reflects a strong market position as a key national innovation facilitator with a clear focus on sustainability and international growth. Technically, the website is built on modern frameworks such as Next.js and React, ensuring a responsive and accessible user experience. The site employs best practices in SEO, accessibility, and performance optimization, with a well-structured layout and clear navigation. The presence of a cookie consent mechanism and privacy policy indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS, implements security headers, and avoids exposing sensitive data. However, explicit security policies and incident response information are not publicly available, and no vulnerability disclosure program is evident. Overall, the security posture is strong but could benefit from enhanced transparency and formalized disclosure mechanisms. The domain WHOIS data is not publicly available due to Norwegian registry privacy policies, but the domain and website content strongly indicate legitimacy as the official site of Innovasjon Norge. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences.

Alkotó Energia operates a Hungarian-language online magazine focused on sustainability, conscious living, recycling, and eco-friendly lifestyle topics. Founded in 2018, the site targets environmentally aware individuals interested in practical and inspirational content about sustainable home living and circular economy principles. The business positions itself as a niche media outlet within the energy and sustainability sector in Hungary, offering articles, videos, and publications to engage its audience. Technically, the website is built using modern web technologies including React and Next.js frameworks, supported by a custom CMS. The site demonstrates good mobile optimization and SEO practices, with integration of Google Fonts and social media SDKs. Performance is moderate, with room for improvement in accessibility features and security headers. From a security perspective, the site enforces HTTPS and uses standard tracking tools like Google Tag Manager and Facebook SDK. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. Overall, the website is professionally designed, trustworthy, and aligned with its business goals. The security posture is adequate but could be enhanced by adding security headers and formal incident response information. The domain registration data supports the legitimacy of the business, with consistent registration details and no privacy protection masking ownership.

Tesco Stores ČR a.s. operates a comprehensive retail supermarket website for the Czech Republic market, offering online grocery shopping, loyalty programs (Clubcard), promotional offers, recipes, and store locator services. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated analytics, and user-friendly features including cookie consent and privacy policies. The site is well-branded, professionally designed, and optimized for mobile and accessibility standards. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS data from the CZ NIC WHOIS server limits domain registration transparency, but the website content and corporate links support legitimacy. Overall, the site is a reliable and professional retail platform serving a large customer base in the Czech Republic.

T

TopTax

toptax.cz

63

TopTax is a Czech Republic-based service provider specializing in accounting, tax, administration, and communication with authorities. The company positions itself as a top partner for these services, targeting businesses and individuals needing professional financial and administrative support. The website is built using modern web technologies such as Gatsby, React, and Tailwind CSS, indicating a contemporary digital infrastructure. However, the site content is basic and lacks comprehensive business and compliance information. Security posture is moderate with HTTPS enabled but missing critical security headers and policies. No WHOIS data is publicly available, which limits trust assessment. Overall, the website is functional and professional but requires improvements in transparency, compliance, and security disclosures.

E

Entradio

entradio.cz

55

Entradio is a Czech-based ticketing system platform offering comprehensive solutions for ticket sales, reservations, discounts, goods and services sales, and multiple payment options. The platform targets a wide range of event organizers including theaters, cultural centers, museums, sports events, transportation, and festivals. Entradio positions itself as a flexible and user-centric system with integrated marketing and payment capabilities. The website is built on modern web technologies such as React, Next.js, and Material-UI, providing a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS usage and secure forms, but lacks explicit security headers and published security policies. WHOIS data is unavailable, indicating privacy protection which slightly reduces transparency but is common for small to medium businesses. Overall, Entradio presents a professional and trustworthy platform with room for improvement in privacy compliance and security transparency.

G

GetResponse

getresponse.com

72

GetResponse is a well-established marketing automation platform founded in 1998, headquartered in Poland. It offers a comprehensive suite of tools including email marketing, landing pages, webinars, SMS marketing, and AI-driven product recommendations. The company targets entrepreneurs, ecommerce stores, and global brands, boasting over 350,000 customers worldwide. The website reflects a mature digital presence with modern technologies such as Next.js, React, and integration with analytics and consent management tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The missing WHOIS domain registration data slightly reduces trust but is mitigated by strong branding and external trust signals. Overall, GetResponse presents a professional, secure, and privacy-conscious platform with room for improvement in transparency around security policies.

A

Artslimit

artslimit.com

58

Artslimit is a prominent Czech online auction platform specializing in curated auctions of luxury and collectible items such as fine art, historic automobiles, and designer handbags. It holds a leading market position in the Czech Republic with a focus on authenticated and exceptional lots, providing a seamless and engaging bidding experience for its users. The platform supports live auctions and offers a user-friendly interface optimized for desktop and mobile devices. Technically, the website is built using modern web technologies including React and Next.js, ensuring dynamic content delivery and good performance. Integration with Google Tag Manager facilitates marketing and analytics tracking. The site employs HTTPS for secure communications but lacks some advanced security headers, which could be improved to enhance security posture. From a security and compliance perspective, Artslimit demonstrates good privacy practices with comprehensive GDPR-compliant privacy and cookie policies and a clear terms of service. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. No direct contact emails or phone numbers are provided, which may impact user trust and support accessibility. Overall, Artslimit presents a professional and trustworthy platform for online auctions in its niche, but it should address domain registration transparency and enhance security headers to strengthen its security posture and business credibility.

D

Dot Creative

dotcreative.hu

57

Dot Creative is a Hungarian creative agency established in 2018, specializing in digital design, branding, and marketing services. The company targets businesses and professionals seeking innovative digital presence solutions. The website reflects a modern, professional design with clear navigation and strong branding consistency. The technical infrastructure is based on Next.js and React, indicating a modern and performant digital platform. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not found. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, the website presents a trustworthy and professional business presence with minimal risk exposure.

A

ALLWIN Informatika Kft.

allwin.hu

59

ALLWIN Informatika Kft. is a Hungarian-based custom software development company with over 13 years of experience specializing in .NET technologies, cloud services, and enterprise web portals. The company holds reputable certifications such as Microsoft Gold Partner and Sitecore Silver Partner, positioning itself as a trusted technology partner for medium-sized businesses across various sectors including energy, healthcare, finance, and e-commerce. Their service portfolio includes IT consultancy, cloud solutions on Azure, CMS development with Sitecore and Umbraco, and e-commerce platforms like nopCommerce. Technically, the website reflects a mature digital infrastructure utilizing modern frameworks such as Angular, React, Vue.js, and Xamarin, supported by cloud-native technologies like Docker and Kubernetes on Azure. The site is well-optimized for mobile and accessibility, with good SEO practices and fast performance. Marketing and analytics tools are extensively used, including Google Analytics, Hotjar, LinkedIn Insight, and Facebook Pixel, all managed with a clear cookie consent mechanism. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements standard security headers. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, ALLWIN Informatika Kft. presents a professional and credible online presence with strong technical and business foundations. Strategic enhancements in security transparency and incident response readiness would further strengthen their risk posture and client trust.

B

Bold Commerce

shappify.com

66

Bold Commerce is a Canadian technology company specializing in ecommerce checkout and payment integration solutions. Their flagship product, Bold Booster, simplifies payment gateway integration across multiple open-source ecommerce platforms such as Magento, Adobe Commerce, OpenCart, and Shopify. The company targets payment companies and merchants seeking advanced checkout experiences including Apple Pay, Google Pay, and PayPal Fastlane. Bold Commerce holds a strong market position as an established provider with a medium-sized business footprint founded in 2014. Technically, the website is built on modern frameworks like Next.js and React, leveraging Cloudflare for DNS and CDN services, and integrates multiple marketing and analytics tools including Google Analytics, HubSpot, Hotjar, and OneTrust for cookie consent. The site is well optimized for performance, mobile responsiveness, and SEO. Security posture is solid with HTTPS enforced and a bug bounty program in place, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility, with extensive user tracking balanced by privacy controls.