Security Directory

Ž

Židovská obec v Praze

kehilaprag.cz

59

Židovská obec v Praze (ŽOP) is a well-established non-profit organization serving the Jewish community in Prague. It focuses on religious, cultural, social, and health services for its members and the wider community. The website reflects a community-oriented mission with detailed information about departments, events, partners, and services. The organization maintains partnerships with reputable international and local entities, enhancing its credibility and outreach. Technically, the website uses a moderate modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA for security on forms. The site is mobile-optimized with good navigation and content quality. However, there is room for improvement in accessibility and SEO optimization. The absence of a CMS identification suggests a custom or less common platform. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a cookie consent banner but no clear privacy policy or terms of service pages. WHOIS data is missing, which reduces domain trust assessment but the website content and contact information appear legitimate. Overall, the site is a credible digital presence for a community organization but should enhance transparency and security practices to improve trust and compliance.

S

Sportity OÜ

sportity.com

63

Sportity OÜ is a small Estonian technology company specializing in IT solutions for sports events and organizations. Their offerings include a digital infoboard app and a comprehensive accreditation system designed to streamline event management and communication. The company targets sport events, organizations, and clubs, positioning itself as a niche provider with notable clients in international sports federations. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on the Tilda CMS platform, uses modern analytics tools, and is hosted behind Cloudflare DNS, ensuring good performance and security basics. However, the absence of privacy and terms of service policies indicates compliance gaps. Security posture is solid with HTTPS and secure domain registration but lacks advanced security headers and published security policies. Overall, the website is trustworthy and functional but could improve privacy compliance and security transparency.

V

VisionSpace Intelligent Systems UG

karel.ai

62

VisionSpace Intelligent Systems UG operates the website karel.ai, offering an AI-powered conversational assistant named Karel designed to support operations of complex and critical systems. The assistant provides functionalities such as answering operational questions, predictive analytics, task automation, explainable AI reasoning, skill teaching via API, and team collaboration. The company is positioned as a niche technology provider with backing from the European Space Agency incubation program and EU funding, targeting operators and managers in aerospace and industrial sectors. The website is professionally designed, mobile-optimized, and includes EU trust signals, but lacks explicit security and incident response policies. The technical infrastructure leverages modern front-end technologies including Bootstrap, jQuery, FontAwesome, and Google Analytics, with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS implied and cookie consent implemented, but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the website and business present a credible and professional front with room for enhanced security transparency and compliance documentation.

L

LANaaS by Wavecom

lanaas.pt

50

LANaaS by Wavecom offers a managed LAN as a Service solution targeting corporate clients in Portugal. Their service includes switching, firewall security, and Wi-Fi infrastructure with 24/7 monitoring and support, enabling businesses to flexibly scale their network infrastructure. The website is built on WordPress with modern plugins and SEO tools, reflecting a professional digital presence. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and privacy policies are missing. Tracking technologies like Google Analytics and LinkedIn Insight are used moderately. Overall, the website is trustworthy and well-positioned in the technology sector, but could improve privacy compliance and contact transparency.

A

ABNT

abntcatalogo.com.br

54

ABNT Catalogo is a professional e-commerce platform operated by ABNT, the Brazilian Association of Technical Standards, providing access to Brazilian technical standards, certifications, and related educational resources. The platform targets businesses and professionals requiring official standards for compliance and quality assurance. The website is well-branded, consistent, and offers a good user experience with clear navigation and mobile optimization. It integrates Google Analytics for user tracking and provides contact information including email and phone support. Technically, the site is built on a mature ASP.NET WebForms framework with Telerik UI components, indicating a stable but somewhat legacy infrastructure. Performance is moderate with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced but lacks some advanced security headers such as Content-Security-Policy and X-Frame-Options. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the security posture is solid but could be improved by implementing additional security headers and cookie consent mechanisms. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. No critical vulnerabilities or suspicious patterns were detected, and the content is safe for general audiences.

B

B''NAI B''RITH EUROPE

jewisheritage.org

53

The European Jewish Heritage website, operated by B''NAI B''RITH EUROPE, is a well-established non-profit platform dedicated to preserving and promoting Jewish culture and heritage across Europe. The organization has been active since 2001 and offers key services such as the European Days of Jewish Culture and the European Routes of Jewish Heritage. The website targets European citizens, municipalities, and cultural organizations interested in Jewish heritage and intercultural dialogue. The content is professionally presented, with a consistent brand and clear navigation. Technically, the website is built on WordPress with a modern tech stack including popular plugins for SEO, events management, and accessibility. It uses HTTPS and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Performance and mobile optimization are good, and accessibility features are implemented. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and published security policies or incident response contacts. No critical vulnerabilities were detected, but improvements are recommended in publishing privacy and security policies and enabling DNSSEC. Overall, the website is trustworthy and professional, with a strong business credibility score. Strategic recommendations include enhancing privacy compliance, publishing security and incident response policies, and improving DNS security to further strengthen the security posture.

Ö

Ökotárs Alapítvány

okotars.hu

46

Ökotárs Alapítvány is a well-established Hungarian non-profit organization founded in 1999, dedicated to supporting citizen self-organizations to foster a democratic, sustainable, and just society. The foundation focuses on environmental protection, civil society development, and sustainability programs, offering grants, training, and advocacy. Their website reflects a mature digital presence built on Drupal 7, integrating Google Analytics and Tag Manager for user insights. The content is rich, professionally presented, and targets civil society actors, students, and environmentally conscious communities. Security posture is solid with HTTPS and no exposed sensitive data, though some improvements are needed in security headers and updating legacy libraries. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness.

I

IVT Tepelná čerpadla s.r.o.

cerpadla-ivt.cz

41

IVT Tepelná čerpadla s.r.o. operates a professional website focused on the sale and installation of Swedish quality heat pumps in the Czech Republic. The company positions itself as a market leader with over 20,000 installations and targets homeowners, commercial building managers, and new house builders. The website provides detailed product information, guides, and news updates, reflecting a mature business model centered on energy-efficient heating solutions. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and various tracking tools, managed via Topinfo CMS. The site is mobile-optimized and SEO-friendly, though some technical debt is evident with outdated libraries and missing security headers. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit incident response information. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear legitimate and professional. Overall, the site scores well on content quality and business credibility but has room for improvement in security and privacy compliance.

C

Charleston Hub

charleston-hub.com

65

Charleston Hub is a niche media outlet providing news and updates focused on libraries, publishers, book jobbers, and subscription agents. The website serves a specialized audience within the publishing and library sectors, delivering industry news and insights. Technically, the site is built on WordPress using the Divi theme and incorporates common plugins such as MonsterInsights for analytics and Advanced Ads for advertising management. The site is well-structured with good SEO practices and mobile optimization. Security-wise, the site uses HTTPS and has implemented some best practices, but lacks certain security headers and a vulnerability disclosure mechanism. The absence of WHOIS registrant data raises concerns about domain legitimacy, although the site appears professionally maintained and active. Overall, the site presents moderate risk but would benefit from improved transparency and security enhancements.

E

Escuderia Castelo Branco

escuderiacastelobranco.pt

53

Escuderia Castelo Branco is a Portuguese motorsports club dedicated to promoting and developing motor sports activities, alongside cultural and recreational events. The website serves as a hub for event information, member services, and community engagement, targeting motorsport enthusiasts and club members primarily in Portugal. The organization appears well-established with a clear focus on motorsport competitions, kartodrome operations, and enduro training. The site is professionally designed with consistent branding and good content relevance, supporting its position as a regional leader in motorsports activities.

S

Symfonický orchestr hlavního města Prahy FOK

fok.cz

55

The website fok.cz represents the official Symphonic Orchestra of the City of Prague (FOK), a well-established cultural institution founded in 1934. It provides information about concert programs, educational activities, ticket sales, and orchestra profiles. The site is professionally designed using Drupal 11 CMS and Bootstrap, offering a responsive and accessible user experience. It includes GDPR-compliant cookie consent mechanisms and clear contact information, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate organization.

N

Národní divadlo Brno

ndbrno.cz

56

Národní divadlo Brno is a prominent cultural institution in the Czech Republic, offering a wide range of performing arts including opera, ballet, drama, and concerts. It operates multiple venues such as Mahenovo divadlo, Janáčkovo divadlo, and divadlo Reduta, targeting a broad audience from general public to young and mature theatergoers. The website reflects a well-established organization with a strong market position in the cultural sector, providing ticket sales, educational programs, and outreach activities. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Tag Manager, and various plugins for SEO, multilingual support, and cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with structured data implemented for enhanced search engine understanding. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with a valid SSL certificate and employs cookie consent mechanisms compliant with GDPR. However, explicit security headers are not detected, and no public security policy or incident response information is available. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content show no suspicious indicators. Overall, the website presents a professional, trustworthy, and user-friendly platform for the national theatre, with good privacy compliance and moderate security posture. Strategic improvements in security headers and incident response transparency are recommended to enhance trust and resilience.

Signály.cz is a Czech non-profit ecumenical community platform providing spiritual content, blogs, videos, and event information to a broad audience interested in Christian dialogue and education. The website offers user registration, community forums, and multimedia content, positioning itself as a well-established community hub since 2007. Technically, the site uses modern web technologies including jQuery, Bootstrap, and OAuth integrations for login, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and secure login forms, though the absence of security headers and cookie consent mechanisms indicate areas for improvement. The lack of WHOIS data reduces domain trustworthiness, but the active social media presence and comprehensive privacy policies support legitimacy. Overall, the site is professional, content-rich, and safe for general audiences.

S

Slyš.to s.r.o.

slys.to

59

Slyš.to s.r.o. operates a Czech-language e-commerce platform specializing in audiobooks with a focus on spirituality, Christian themes, personal development, and children's stories. The website offers both paid and free audiobooks, targeting a general audience interested in faith-based and educational audio content. The company positions itself as a niche leader within the Czech Christian audiobook market, leveraging its association with Radio Proglas to build trust and authenticity. Technically, the website employs a modern tech stack including jQuery, Video.js for media playback, and CookieHub for consent management. It integrates Google Analytics and Facebook Pixel with appropriate consent controls, demonstrating a mature approach to user privacy and tracking. The site is mobile-optimized with good SEO practices and a clean, professional design that supports a positive user experience. From a security perspective, the site enforces HTTPS and manages cookie consent effectively, but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business profile, showing transparency and legitimacy. Overall, the site maintains a good security posture but could improve by publishing dedicated security and incident response information. The overall risk is low, with strong privacy compliance and business credibility. Strategic recommendations include enhancing security transparency, adding security headers, and providing incident response contacts to further strengthen trust and resilience.

M

Mateřské centrum Veselý Paleček, z.s.

veselypalecek.cz

53

Mateřské centrum Veselý Paleček, z.s. is a Czech non-profit community center focused on providing educational and recreational activities for parents, especially mothers on maternity leave, and their children. The organization operates locally in the Blansko and Boskovice regions, offering services such as children's creative workshops, Montessori educational approaches, parent-child exercise classes, and social/legal counseling. The website reflects a small-sized, community-oriented entity with a clear mission to support families and children. Technically, the website is built on WordPress using the Mesmerize theme and several plugins including Yoast SEO, Contact Form 7, and Cookie Law Info. It integrates Google Analytics and Google Maps API for tracking and location services. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. Hosting and domain registration are consistent with the Czech location, provided by Wedos. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers in the HTML source. Cookie consent mechanisms are implemented, supporting GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the Google Analytics plugin is not fully configured, and security headers like Content-Security-Policy and X-Frame-Options are not explicitly present, which could be improved. Overall, the website presents a trustworthy and professional online presence for a local non-profit organization. The risk profile is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, completing analytics configuration, and maintaining regular security updates to strengthen the security posture further.

U

Ulita Blansko, z.s.

ulitablansko.cz

41

Ulita Blansko, z.s. is a small non-profit community organization based in Blansko, Czech Republic, focused on providing cultural, social, and recreational activities through clubs, a tea house, and volunteer engagement. The website serves as an information hub for events, club activities, and contact details, targeting local community members interested in cultural enrichment and social interaction. The organization is supported by local government entities, enhancing its community trust and legitimacy. Technically, the website is built on CMS Made Simple with a modern but basic tech stack including jQuery, Foundation CSS, and FontAwesome. It integrates Google Analytics and Facebook Pixel for user tracking and marketing purposes. The site is mobile responsive and offers a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is used but no explicit security headers or incident response information are present. Privacy compliance is limited due to the absence of a privacy policy and terms of service, although a cookie consent banner is implemented. Overall, the website is functional, trustworthy, and safe for general audiences but would benefit from enhanced security and compliance documentation.

I

INSTITUTUL NAȚIONAL DE CERCETARE-DEZVOLTARE ÎN INFORMATICĂ - ICI BUCUREȘTI

lir.ro

50

The website lir.ro represents the Registru Local de Internet (LIR) operated by the Institutul Național de Cercetare-Dezvoltare în Informatică - ICI București. It serves as the first Local Internet Registry in Romania, providing critical services such as allocation of IPv4 and IPv6 addresses (both PA and PI types) and Autonomous System (AS) numbers. The organization is a longstanding member of RIPE NCC since 1992, establishing a strong market position within the Romanian internet infrastructure ecosystem. The target audience primarily includes ISPs and organizations requiring IP resources in Romania. The business model revolves around resource allocation and registry services, supported by institutional credibility and a long operational history dating back to 2001 for the domain.

R

Realness s.r.o.

realness.cz

57

Realness s.r.o. is a Czech Republic-based branding and creative marketing agency specializing in brand strategy, creative campaigns, visual and verbal identity, and digital marketing services. The company positions itself as an award-winning agency with a strong portfolio of clients across various sectors including biotechnology, education, retail, and IT. The website demonstrates a high level of professionalism, with excellent design quality, clear navigation, and comprehensive content showcasing their projects and accolades. Technically, the site is built on Webflow, leveraging modern web technologies and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected in the HTML content. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism was found, which may pose GDPR compliance risks. The absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy, though the website content and business information suggest a legitimate and credible business. Overall, the site scores well on content quality, technical implementation, and business credibility, with recommendations to enhance privacy compliance and security headers.

K

KOUDELKA DESIGN s.r.o.

koudelkadesign.cz

47

KOUDELKA DESIGN s.r.o. is a small Czech company specializing in the production of advertising materials. The website presents a professional design using the WordPress platform with the Divi theme, targeting businesses seeking advertising production services. The technical infrastructure includes modern web technologies such as jQuery, Google reCAPTCHA for bot protection, and Google Analytics for visitor tracking. The site is mobile-optimized and provides a moderate level of performance and SEO optimization. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and explicit security policies. Privacy compliance is partially addressed through a cookie consent mechanism, but no explicit privacy or terms of service pages were found. Overall, the website is accessible, safe, and moderately trustworthy, with room for improvement in security and compliance documentation.

M

Mimokolektiv

mimokolektiv.cz

54

Mimokolektiv is a small architectural and design studio based in Olomouc, Czechia, offering services in architecture, garden architecture, interior design, and product design. The company also operates a design shop and has an e-commerce presence linked via mimoshop.cz. The website is professionally designed using the Squarespace platform, featuring rich visual content and clear navigation. Technical infrastructure includes modern web technologies and Google Analytics for visitor tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy and cookie policies, indicating room for compliance improvement. WHOIS data is unavailable, which raises concerns about domain registration transparency but does not detract from the professional presentation of the business. Overall, the website is trustworthy and suitable for its target audience, though enhancements in privacy compliance and security best practices are recommended.

P

Prodesi/Domesi

prodesidomesi.cz

51

Prodesi/Domesi is a Czech Republic based architectural and construction firm specializing in wooden houses and dřevostavby (wooden buildings). The company offers comprehensive services including individual design and realization, turnkey wooden houses, and public/commercial buildings. With over 22 years of experience and 250 completed projects, they hold a solid regional market position. Their website is professionally designed, mobile optimized, and includes clear navigation and relevant content targeting clients interested in wooden architecture. Technically, the site uses WordPress CMS with modern tracking and analytics tools such as Google Analytics, Hotjar, and Google Tag Manager. Hosting is provided by OVH, a reputable provider. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though security headers and incident response policies are absent. Overall, the site is trustworthy and compliant with GDPR, with clear contact information and social media presence.

M

Malý Chmel

maly-chmel.cz

58

Malý Chmel is a small architectural studio based in Prague and České Budějovice, Czech Republic, offering architectural design and model making services. The website is built on the Wix platform and integrates Google Analytics and Google Tag Manager for visitor tracking. The site presents professional content with good design and navigation, targeting a general audience interested in architectural services. Security posture is moderate with HTTPS enabled but lacks security headers and privacy policies. The absence of WHOIS data limits domain trust assessment, but the website content suggests a legitimate small business. Strategic recommendations include adding privacy and cookie policies, improving security headers, and providing clear contact information to enhance trust and compliance.

P

Photon Remediation

photonremediation.com

52

Photon Remediation is a specialized environmental remediation company focused on providing advanced solutions for PFAS and other contamination challenges. The company leverages innovative technologies such as WaterGuard Nano™ and EarthGuard PRB™ to deliver sustainable cleanup services targeting groundwater, soil, surface water, and biosolids. Positioned as a trusted partner to militaries, airports, chemical manufacturers, and academic institutions, Photon Remediation operates under the Photon Energy Group umbrella, emphasizing eco-friendly and customized remediation strategies. Technically, the website demonstrates a modern and professional digital presence, utilizing contemporary JavaScript libraries, Google Tag Manager, and invisible reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and a clear navigation structure. However, some technical improvements could be made in accessibility and security headers to enhance overall robustness. From a security perspective, the site enforces HTTPS and employs Google reCAPTCHA to protect forms, alongside a cookie consent mechanism aligned with GDPR requirements. Despite these strengths, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No explicit security policies or incident response contacts are published, indicating room for maturity in security governance. Overall, Photon Remediation presents a credible and professional business front with solid technical implementation and privacy compliance. The main risk lies in the domain registration inconsistency, which should be addressed to strengthen trust and reduce potential reputational risks.

D

DEBYT

debyt.cz

59

DEBYT is a small Czech architecture and furniture design studio that integrates architectural services with sociological participation and community involvement. Their offerings include architectural projects, artistic creations by architect Tomáš Petrášek, and a curated e-shop for retro and antique furniture renovation and sales. The website presents a professional portfolio and clear contact information, targeting clients interested in personalized architectural and furniture solutions. Technically, the website uses modern analytics tools and is mobile-optimized, but lacks some security headers and privacy compliance features. The absence of WHOIS data raises concerns about domain legitimacy, although the website content itself is professional and safe. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

UI Avatars is a small technology service providing a free API to generate user initials avatars for developers and websites. The service is mature, founded in 2017, and enjoys high usage with over 1.7 billion monthly requests. The website is well designed, mobile optimized, and provides clear usage instructions and API parameters. The technical infrastructure leverages modern web technologies, Google Fonts, Google Analytics, and Cloudflare DNS for performance and reliability. Security posture is good with HTTPS enforced and no user data stored, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is strong with a comprehensive cookie consent management platform and GDPR-aligned vendor disclosures. Business credibility is moderate due to lack of direct contact information but supported by open source code and sponsor transparency. Overall, the website is trustworthy, safe, and professionally maintained.

K

KOUDELKA DESIGN s.r.o.

kp-design.cz

44

KOUDELKA DESIGN s.r.o. is a small Czech company specializing in advertising production services. The website presents a professional design using WordPress with the Divi theme, targeting businesses seeking advertising solutions. The technical infrastructure includes modern web technologies such as jQuery, Google reCAPTCHA for bot protection, and Google Analytics for visitor tracking. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enabled and reCAPTCHA in use, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is functional and professional but could improve transparency and security documentation.

Internetové-stránky.eu is a small Czech-based professional web development company specializing in creating websites, e-shops, and internet applications. Their services include graphic design, coding, SEO optimization, marketing, and advertising. The website content is primarily in Czech and targets local businesses and individuals seeking affordable and professional web solutions. The company provides clear contact details including email, phone, and physical address, enhancing business credibility. Technically, the website uses basic HTML, CSS, and JavaScript with legacy Google Analytics integration. There is no evidence of modern CMS or frameworks, and mobile optimization and accessibility are basic. The site lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. No forms are present, reducing data collection risks but also limiting user engagement. From a security perspective, the site shows moderate risk due to missing HTTPS and outdated analytics scripts. There are no privacy or cookie policies, indicating non-compliance with GDPR requirements. The WHOIS data is consistent with the website's business information, supporting legitimacy. Overall, the site is functional but requires significant improvements in security and privacy compliance to meet modern standards. The overall risk is moderate with recommendations to implement HTTPS, update analytics, add privacy and cookie policies, and improve security headers. These steps will enhance trust, compliance, and user safety.

F

Federace židovských obcí v České republice

10hvezd.cz

40

The website 'Deset hvězd' is a cultural heritage project managed by the Federation of Jewish Communities in the Czech Republic. It focuses on preserving and promoting Jewish cultural heritage through a network of regional cultural and educational centers located in restored synagogues. The project is part of the European Route of Jewish Heritage, certified by the Council of Europe, and offers exhibitions, cultural programs, and concerts. The target audience is the general public interested in cultural history and education. The business model is non-profit, emphasizing cultural preservation and education. Technically, the website uses a traditional tech stack including jQuery, Owl Carousel, Fancybox, and Google Analytics for tracking. It is built on the Nette Framework, a PHP-based CMS. The site shows moderate performance and basic mobile optimization but uses outdated JavaScript libraries that may pose security risks. SEO and accessibility are basic but functional. From a security perspective, the site uses HTTPS and includes Google Analytics scripts but lacks visible security headers and uses outdated libraries. There are no forms collecting sensitive data, reducing immediate risk, but the absence of privacy and cookie policies indicates compliance gaps. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professionally presented but would benefit from updating its technical stack, implementing security best practices, and adding privacy and cookie policies to improve compliance and user trust.

M

Muzeum regionu Boskovicka, příspěvková organizace Jihomoravského kraje

fantomexpozic.cz

48

The website fantomexpozic.cz represents the Fantom Expozic, a regional museum entity under the Muzeum regionu Boskovicka, a contributory organization of the South Moravian Region. The museum focuses on cultural heritage, archaeology, history, and ethnology of the Boskovice region, offering multiple exhibitions including historical residences, synagogues, and agricultural machinery. The site is professionally designed using Drupal 8 CMS and integrates modern tools such as Google Analytics and CookieHub for analytics and cookie consent management. The content is well-structured, informative, and targeted at general audiences interested in regional history and culture. From a technical perspective, the website is moderately performant with good mobile optimization and basic accessibility features. It uses HTTPS with an excellent SSL configuration, but lacks some security headers that could enhance protection. Privacy compliance is well addressed with a clear cookie policy and consent mechanism, and a privacy policy is available in Czech. However, no terms of service or incident response policies are published. Security posture is generally good but could be improved by adding security headers and publishing vulnerability disclosure information. The absence of WHOIS data is a notable concern, as the domain registration details are unavailable, which reduces trust from a domain legitimacy standpoint. Despite this, the website content and external references indicate a legitimate cultural institution. Overall, the site is safe, professional, and trustworthy for its intended audience. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving transparency by providing contact emails or phone numbers. These steps would strengthen trust and compliance, supporting the museum's digital presence and user confidence.

B

BluePool s.r.o.

neabeaute.cz

50

NEA Beauté is a luxury beauty salon based in Prague 10, Czech Republic, offering a wide range of cosmetic and wellness services including manicure, pedicure, skincare treatments, eyelash extensions, permanent makeup, and massages. The salon partners with premium brands such as BABOR and Cuccio, emphasizing high-quality products and personalized client care. The website supports online booking via a third-party service and maintains an e-shop for related products. Technically, the site uses Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. While the site is well-structured and mobile-optimized, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security headers are not evident, suggesting room for improvement in security posture. The domain registration is consistent and legitimate, with no signs of suspicious activity. Overall, the website presents a professional and trustworthy image suitable for its target audience.

S

Studio UpFront

upfront.cz

51

Studio UpFront is a small Czech graphic and web studio specializing in web development, multimedia presentations, printing services, and promotional items. The company targets local businesses and organizations seeking professional digital and print media solutions. Their website presents a consistent brand image with clear service offerings and customer references, positioning them as a trusted local service provider. Technically, the website uses legacy JavaScript libraries and lacks HTTPS enforcement, which impacts security and user trust. The absence of privacy and cookie policies further reduces compliance posture. Security-wise, the site shows no advanced protections or security headers, and the WHOIS data is missing, which raises concerns about domain legitimacy. Overall, the business appears legitimate and professional but would benefit from technical and security improvements to enhance trust and compliance.

R

RichmondShare Blog | High quality content and interaction in the ELT world | RichmondShare is a free-access blog aimed at teachers and future teachers of English as a Foreign Language where ELT professionals (authors, editors, teachers educators, teachers etc) share their ideas, experiences and reflections.

richmondshare.com.br

68

RichmondShare is a niche educational blog focused on English Language Teaching (ELT) professionals and future teachers, primarily targeting the Brazilian market. The website serves as a free-access platform for sharing ideas, experiences, and reflections within the ELT community. It operates on a WordPress CMS with standard SEO optimizations and integrates Google Analytics and Tag Manager for visitor tracking. Hosting infrastructure appears to be on Amazon AWS, providing reliable performance and scalability. The site demonstrates good mobile optimization and accessibility basics, supporting a positive user experience for its audience. However, the absence of explicit privacy and terms of service pages, as well as contact information, limits its compliance and business transparency. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published policies. Overall, RichmondShare is a credible educational resource with room for improvement in privacy compliance and business information transparency.

Santillana is a well-established educational content provider focused on Spanish language learning materials in Brazil. The website serves as a portal offering catalogs, educational resources, and accessible content for students and educators. The business operates under the Grupo Santillana umbrella, leveraging partnerships with related educational brands such as Moderna and Richmond. The site is professionally designed with consistent branding and targets educational institutions and learners. Technically, the site uses a custom CMS (Lumis Portal) and integrates common analytics and tracking tools such as Google Analytics and Facebook SDK. Hosting is professional, utilizing AWS DNS infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. Overall, the site is safe, accessible, and trustworthy for its intended audience.

S

Studio River

studioriver.fr

36

Studio River is a French award-winning motion design studio specializing in creative storytelling and video production. Their website showcases a professional portfolio of short films and motion design projects for notable clients in luxury and technology sectors. The company targets creative agencies, brands, and media professionals seeking high-quality motion design services. Technically, the website is built on WordPress using the Salient theme and employs modern web technologies including jQuery, Google Analytics, and Vimeo video integration. The site is mobile-optimized, fast-loading, and well-structured with clear navigation. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Privacy and cookie policies are not explicitly found, indicating compliance gaps. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security disclosures.

A

Associação CCG/ZGDV

ccg.pt

72

Associação CCG/ZGDV is a well-established Portuguese research and innovation institute specializing in applied research and technological innovation within the digital economy. Their expertise spans computer graphics, ubiquitous computing, human-machine interaction, and information engineering. The institute offers a range of services including consultancy, contract research and development, advanced technology training, testing and validation, and IT/data center services. Their market position is strong within Portugal, supported by a consistent brand presence and recognized certifications such as ISO 27001. Technically, the website employs modern frameworks like Bootstrap and integrates essential tools such as Google Analytics and Mailchimp for analytics and marketing. The site is mobile-optimized, well-structured, and provides a professional user experience. Security-wise, the site uses HTTPS and secure form validation, complemented by comprehensive privacy and cookie policies that demonstrate GDPR compliance. However, there is room for improvement in security headers and formal security policy disclosures. Overall, the website reflects a mature digital presence with high trustworthiness and professional content quality. The security posture is solid but could be enhanced with additional policies and technical controls. The domain registration data aligns well with the business claims, reinforcing legitimacy. No critical vulnerabilities or suspicious content were detected, and the site is safe for general audiences.

T

TRISOLARIS

trisolaris.com

55

TRISOLARIS is a technology company focused on advancing solutions and innovating technologies, as reflected in their website content and branding. The company appears to be small-sized, founded in 2015, with a professional web presence built on WordPress using Elementor and Astra theme. Their market positioning is technology-oriented, targeting clients interested in advanced technology solutions. The website demonstrates good digital maturity with SEO optimization, mobile responsiveness, and integration of analytics tools such as Google Analytics via MonsterInsights. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and publishing explicit security policies. Overall, the website is professional and trustworthy with moderate risk and no critical vulnerabilities detected.

S

STI Group

sti-group.com

54

STI Group is a large, Germany-based manufacturer specializing in sustainable packaging and point-of-sale display solutions. The company emphasizes innovation and environmental responsibility, offering fiber-based, plastic-free packaging for food and non-food products. Their market position is strong, supported by multiple certifications and awards, and they operate multiple production sites across Europe and Asia Pacific. Technically, the website is built on TYPO3 CMS with modern frontend libraries and includes comprehensive cookie consent and privacy management, reflecting good digital maturity. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, user-friendly, and trustworthy, but the lack of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy.

S

SPEEDBIRD VEICULOS AEREOS NAO TRIPULADOS SA

speedbird.aero

60

Speedbird Aero is a Brazilian-based company specializing in drone delivery logistics, offering a certified and innovative platform for commercial, industrial, and healthcare sectors. Their business model centers on Drone as a Service (DaaS), providing unmanned aircraft systems, navigation software, and droneport infrastructure to enable efficient and safe package delivery. The company has established partnerships with major clients and operates globally with plans for expansion by 2030. Technically, the website employs modern web technologies such as jQuery and Bootstrap, with integrated analytics and a cookie consent mechanism, reflecting moderate digital maturity. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and published security policies, indicating room for improvement. Overall, the website is professional, content-rich, and trustworthy, though it would benefit from enhanced privacy and security disclosures.

M

Motofil

motofil.com

51

Motofil is a Portuguese-based company specializing in the development and manufacturing of industrial robotic welding and cutting equipment, including MIG/MAG welding, submerged arc welding, robotic automation, handling, and thermal cutting technologies such as laser, plasma, and oxy-fuel cutting. Established in 1981, Motofil positions itself as a leader in robotic welding solutions serving various industrial sectors including aeronautics, automotive, metalworking, and renewable energy. The company maintains a medium-sized business model focused on B2B industrial clients, supported by a professional website with comprehensive product and service information, testimonials, and active participation in international industry fairs. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Slick Carousel, and integrates analytics and marketing tools like Google Analytics, Google Tag Manager, and HubSpot. The site is well-optimized for mobile devices, has good SEO practices, and includes GDPR-compliant privacy and cookie policies with consent mechanisms. Security posture is generally good with HTTPS enforced and reCAPTCHA on forms, though explicit security headers and a published security policy are absent. The WHOIS data for the domain www.motofil.com is not publicly available, which raises concerns about domain registration legitimacy and consistency with the company's claimed history. Despite this, the website content and business information appear professional and trustworthy. No signs of adult or questionable content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, Motofil demonstrates a strong business presence and digital maturity with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to strengthen trust and compliance.

H

Hi Fly

mesa.aero

43

Mesa is a specialized aircraft line and base maintenance provider operating primarily in Portugal with additional presence in Brussels and Brisbane. The company holds an EASA Part-145 certification and focuses on maintenance services for Airbus aircraft models. Their business model includes aircraft maintenance, technical training, logistics and procurement, and consulting services, targeting airlines and aviation operators. The website is professionally designed with clear navigation and consistent branding, supporting a medium-sized enterprise profile founded in 2005 under the parent company Hi Fly. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, but lacks some advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and publishing security policies. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and established operation.

Iberica - Indústria de Componentes Metálicos S.A. is a medium-sized manufacturing company based in Portugal, specializing in steel and aluminum components for electric vehicles, automotive, and motorcycle industries, as well as producing bicycles for bike sharing services. Founded in 1964, Iberica has established itself as an internationally recognized supplier with a strong focus on quality and innovation. The website reflects a professional business presence with clear descriptions of its business areas, technology capabilities, and commitment to quality manufacturing. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and Elementor, with integrations for Google Analytics and cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks advanced security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were found. Privacy compliance is basic, with a privacy policy and cookie consent but no explicit GDPR data retention details or data protection officer contact. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, incident response transparency, and enhanced privacy compliance would further strengthen its posture.

E

Enartin

enartin.com

55

Enartin is a specialized mechanical engineering company based in Portugal, founded in 2020, focusing on designing and producing customized machines tailored to client-specific industrial processes. Their market position is that of a niche provider offering detailed mechanical design, production oversight, and rigorous testing to ensure quality and performance. The company targets industrial manufacturing, space sector, and system development clients. Technically, the website is built on WordPress using Elementor with integrations for Google Analytics and LinkedIn tracking, hosted likely via GoDaddy. The site is mobile optimized and presents a professional design but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

M

PestaQQ ⚡️ Link PKV Games #1 Terpercaya & Seru!

megateem.com

43

The website appears to be an Indonesian-focused online platform promoting PKV games, which are a form of online gambling. It positions itself as a trusted and fun link for these games but lacks transparency in business identity and compliance documentation. The technical infrastructure relies heavily on third-party marketing and analytics tools, including Google Analytics, Facebook Pixel, AppsFlyer, MoEngage, and others, indicating a strong focus on user tracking and advertising. Security posture is weak, with no DNSSEC, no visible security headers, and suspicious WHOIS data that undermines trust. Privacy and cookie policies are absent, and no contact or business legitimacy information is provided, raising compliance and credibility concerns.

T

TSC GROUP, a.s.

tsc-cleaning.sk

47

TSC GROUP, a.s. is a holding company operating in Slovakia and the Czech Republic, specializing in facility management, cleaning, security, laundry, and technical cleaning services. The company holds a strong market position as the largest group in its sector in the Czech Republic and maintains a significant presence in Slovakia. Their service portfolio covers industrial, healthcare, commercial, and public sectors, leveraging modern technologies and extensive experience. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on its contact form to mitigate spam. Cookie consent mechanisms are implemented with granular controls, and privacy policies are comprehensive and GDPR compliant. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. The risk profile is low, with recommendations focusing on improving security headers, publishing security policies, and enhancing accessibility compliance to further strengthen the security posture and user trust.

I

Ingenta

ingenta.com

61

Ingenta is a UK-based company specializing in business publishing software and publishing technology solutions. Their offerings include intellectual property systems, rights and royalty management, and content publishing platforms, targeting media companies, publishers, and content creators globally. The company positions itself as a world-leading provider with a strong focus on configurable software and professional services to support complex business environments. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses reCAPTCHA for forms but lacks explicit security headers and a visible cookie consent mechanism. WHOIS data is unavailable, which slightly impacts trust but the professional web presence and contact information support legitimacy. Overall, Ingenta presents a credible and professional digital footprint with room for enhanced security and privacy compliance.

S

Sdružení knihoven ČR

sdruk.cz

52

Sdružení knihoven ČR is a well-established non-profit association founded in 2002, dedicated to supporting libraries and promoting access to cultural and informational resources in the Czech Republic. The organization holds a strong position as a key partner in the Czech library sector, offering services such as event organization, project support, publishing, and professional networking. Their website reflects a professional and consistent brand image, targeting librarians, cultural institutions, and the general public interested in library services. Technically, the site is built on WordPress with Elementor, integrating standard analytics and social media tools, and demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and avoids exposing sensitive data, though it lacks explicit security policies or incident response information. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact information, supporting its credibility as a reputable non-profit entity.

B

BiblioHelp

bibliohelp.cz

51

BiblioHelp is a Czech educational and therapeutic resource website focused on bibliotherapy, providing curated book recommendations for individuals facing psychological, physical, and social challenges. The site is supported by academic sponsorship from Masaryk University and funded by the Czech Ministry of Culture, positioning it as a niche non-profit resource in the education and healthcare sectors. Technically, the website runs on Drupal CMS with jQuery and integrates Google Analytics for visitor tracking. The design is professional with clear navigation, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and privacy compliance documents. WHOIS data is unavailable, which raises concerns about domain legitimacy, but the website content and academic backing provide some trust. Overall, the site is a valuable resource but needs improvements in privacy compliance and security best practices.

E

Empemont s.r.o.

empemont.cz

63

Empemont s.r.o. is a well-established Czech company specializing in the production, distribution, and installation of wireless public address systems, public lighting, radar speed measurement devices, and other municipal infrastructure technologies. With over 30 years of market presence and more than 1200 satisfied municipalities and cities as clients, the company holds a leading position in the Czech and Slovak markets. Their business model focuses on manufacturing, sales, installation, and comprehensive servicing, including financing and grant assistance. The website reflects a professional and customer-centric approach, emphasizing quality, local production, and strong partnerships.

A

AGRO 21 s.r.o.

agro21.cz

59

AGRO 21 s.r.o. is a Czech company specializing in the organization of agricultural land purchases directly for farmers, avoiding resale to maximize prices for sellers. The company positions itself as a trusted intermediary with over 4000 transactions in more than a decade, targeting landowners and farmers primarily in the Czech Republic. The website is professionally designed, with clear navigation and relevant content focused on their services, references, and social responsibility initiatives. Technically, the site uses Orchard CMS, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for tracking, complemented by a GDPR-compliant cookie consent mechanism. Security posture is moderate with no visible security headers and missing WHOIS transparency, which slightly reduces trust. Overall, the site is accessible, informative, and compliant with privacy regulations but could improve in security best practices and domain registration transparency.

C

Charita Česká republika

daranek.cz

54

Daránek dětem is a charitable initiative managed by Charita Česká republika, focused on supporting children in vulnerable situations through fundraising and social support. The website serves as a platform for donations, awareness, and partnership engagement, positioning itself as a trusted national charity. Technically, the site employs modern web technologies including Google reCAPTCHA for form security, Facebook Pixel and Google Analytics for tracking, and a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized with good design and navigation, though some security headers are not explicitly detected. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, but the presence of official charity information and partner references supports trustworthiness. Overall, the site demonstrates a solid security posture with room for improvement in explicit security header implementation and transparency around incident response.