Security Directory

N

Nadační fond Kateřiny Klasnové a Jaroslava Petrouše

klapeto.eu

53

Nadační fond KlaPeto is a Czech non-profit foundation dedicated to providing financial support to severely disabled children up to 18 years old. Founded in 2011 by Kateřina Klasnová and Jaroslav Petrouš, the foundation has raised over 15 million CZK and helped hundreds of children. The website serves as an information and fundraising platform, featuring detailed project descriptions, news updates, and donation options including an e-shop. The foundation emphasizes transparency and direct aid, ensuring all funds go to the intended beneficiaries without administrative overhead. The site is well-structured, professionally designed, and optimized for search engines with comprehensive privacy and cookie policies compliant with GDPR.

5

5 senses for kids Foundation

5senses4kids.org

56

5 senses for kids Foundation is a small non-profit organization dedicated to supporting educational, cultural, social, and scientific actions aimed at the harmonious development of children through multisensoriality. The foundation provides educational resources, supports scientific research, and engages parents and researchers with relevant content and activities. The website is professionally designed, bilingual (French and English), and features partnerships with recognized scientific and cultural organizations, enhancing its credibility and trustworthiness. Technically, the website is built on WordPress with Bootstrap 4 and jQuery, leveraging modern libraries such as Swiper.js and Tippy.js for UI components. It uses Google Analytics and Google Tag Manager for analytics and tracking, and employs Google reCAPTCHA v3 for form security. Hosting is provided by o2switch, a reputable French hosting provider. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections enabled. However, DNSSEC is not enabled, and some recommended security headers are missing. There is no visible security policy or incident response contact information, and no cookie consent mechanism is implemented, which could be a compliance gap under GDPR. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include enabling DNSSEC, adding security headers, implementing a cookie consent banner, and publishing a security.txt file to improve security posture and compliance.

D

DELONG INSTRUMENTS a.s.

delong.cz

55

Delong Instruments a.s. is a Czech-based company specializing in the design and manufacture of compact transmission electron microscopes (TEMs), targeting laboratories and scientific research institutions. Their product portfolio includes small, affordable, and customizable TEMs, Schottky electron guns (DIGUN), and custom electron optic solutions. The company positions itself as a niche leader in compact TEM technology, emphasizing ease of installation and high imaging contrast. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site is built on Webflow with integration of Google Analytics and Tag Manager, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and headers. WHOIS data is unavailable, limiting domain trust assessment, but the overall business credibility is high based on website content and contact details.

Tosoh Bioscience operates as a specialized division of Tosoh Corporation, focusing on scientific and clinical diagnostic products. Their website presents a professional and consistent corporate image, targeting laboratories and healthcare professionals with a broad portfolio of over 500 specialty products in separations, purification, and clinical diagnostics. The site is built on ASP.NET WebForms technology, hosted with Cloudflare DNS services, and incorporates legacy JavaScript libraries alongside modern analytics tools such as Google Analytics and Google Tag Manager. While the website is accessible and well-structured, it lacks some modern security enhancements such as DNSSEC and updated JavaScript libraries, which could pose risks. Privacy and cookie policies are present with a consent mechanism, but explicit security policies and incident response contacts are absent, indicating room for improvement in compliance and transparency.

R

RedShift BioAnalytics, Inc.

redshiftbio.com

66

RedShift BioAnalytics, Inc. is a specialized technology company focused on providing advanced analytical instrumentation for protein and biomolecule analysis, primarily serving the biopharmaceutical industry. Their innovative solutions, including Microfluidic Modulation Spectroscopy (MMS) and the HaLCon platform, enable rapid, precise structural insights critical for drug discovery, development, and manufacturing. Positioned as an innovative and trusted provider, RedShiftBio targets biopharma companies and life science researchers with a medium-sized business footprint based in the United States. The company's digital infrastructure is built on a modern Webflow CMS platform, leveraging a suite of contemporary web technologies such as Google Tag Manager, Pardot marketing automation, and Cloudflare Turnstile captcha for security. The website demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital presence. Integration of multiple analytics and marketing tools indicates a moderate level of user tracking aligned with business growth objectives. From a security perspective, the website enforces HTTPS, employs bot protection mechanisms, and secures user input forms with captchas. However, it lacks explicit published security policies, incident response procedures, and vulnerability disclosure information, which are recommended to enhance trust and compliance. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional website content and business information mitigate some risk. Overall, RedShiftBio presents a professional and trustworthy online presence with strong technical implementation and business credibility. Strategic improvements in transparency around security policies and domain registration verification would further strengthen their security posture and stakeholder confidence.

Q

QCM s.r.o.

2theta.cz

40

The website www.2theta.cz represents a specialized Czech company, QCM s.r.o., focused on the sale and servicing of laboratory analyzers and instruments primarily for clinical biochemistry and analytical chemistry. The company also organizes professional seminars, courses, and conferences in related scientific fields. The site content is professionally presented, targeting laboratories, research institutions, and industry professionals. The business model is B2B with a niche market position in laboratory instrumentation and educational services. Technically, the website uses a CMS called Marwel and includes older JavaScript libraries such as Prototype.js and Scriptaculous, alongside Google Analytics and Google Tag Manager for user tracking. The site is moderately optimized for performance and mobile use, with basic accessibility features. No advanced frameworks or modern platforms are detected. The website is accessible without any WAF or security challenge. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, indicating gaps in privacy compliance and security best practices. No WHOIS data is available, which limits domain trust verification and raises concerns about registration transparency. No contact emails or phone numbers are explicitly provided, which may affect user trust and business credibility. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen trust and security posture.

LabRulez, operated by Schizofreny s.r.o., is a specialized online platform dedicated to the analytical chemistry community, primarily serving the Czech Republic. The website aggregates scientific news, educational webinars, a comprehensive document library, and a marketplace for analytical instruments. It targets professionals and companies in the analytical chemistry sector, offering a centralized hub for knowledge sharing and commerce. The platform also plans future expansions including a virtual academy and an e-shop, indicating growth ambitions. Technically, the site is built using modern web technologies such as Gatsby and React, hosted behind Cloudflare for performance and security. The website demonstrates good design quality, mobile optimization, and SEO practices, contributing to a positive user experience. Security posture is strong with HTTPS enforced and standard security headers present, although explicit security policies and incident response information are absent. Privacy compliance is partial, with a basic terms of service PDF available but lacking a dedicated privacy or cookie policy page and consent mechanism. Overall, LabRulez presents a credible and professional digital presence with room for improvement in privacy and security transparency.

LabRulez is a specialized online platform dedicated to the analytical chemistry community, offering a comprehensive range of services including news updates, webinars, event listings, a document library, product catalogs, and a marketplace for used laboratory equipment. The platform targets analytical chemists, laboratory professionals, and companies, providing a centralized resource to facilitate knowledge sharing and commercial activities. The company behind the platform is Schizofreny s.r.o., established in 2018, operating primarily in the Czech Republic. Technically, the website is built using modern web technologies such as React and Gatsby, hosted behind Cloudflare for performance and security. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features could be improved. Security posture is strong with HTTPS enforced and security headers present, but the absence of DNSSEC and explicit privacy and cookie policies indicates room for compliance enhancement. Overall, the platform is trustworthy and professionally managed, with active social media engagement and a clear business focus.

I

International Water Association

waterdevelopmentcongress.org

45

The International Water Association operates the Water and Development Congress & Exhibition website, promoting a major global event focused on water, sanitation, and innovation scheduled for December 2025 in Bangkok. The organization is well-established with a domain registered since 2017 and a consistent brand presence. The website serves as an information and registration portal, targeting water sector professionals and stakeholders worldwide, with a particular focus on Asia. Technically, the site is built on WordPress using popular plugins for SEO and page building, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its business purpose effectively.

I

IWA Publishing

iwapublishing.com

63

IWA Publishing is a well-established international publisher specializing in water, wastewater, and environmental research. Founded in 1999, it operates a portfolio of 19 peer-reviewed journals and a range of books, serving a global audience of researchers and professionals in the water sector. The company offers open access publishing with Article Processing Charges and provides editorial and subscription services. The website reflects a strong market position with professional branding and comprehensive content tailored to its target audience. Technically, the website is built on the Silverchair platform, utilizing modern web technologies including jQuery, Google Tag Manager, Google Analytics, Stripe for payments, and MathJax for mathematical content rendering. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Hosting and DNS are managed through reputable providers, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and advanced security headers. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business profile, indicating high legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements could include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen the security posture.

I

International Water Association (IWA)

iwaconnectplus.org

52

The International Water Association (IWA) operates a global community portal aimed at water professionals worldwide. The platform facilitates networking, knowledge sharing, and community engagement, positioning itself as a key player in the water management sector. The website promotes membership benefits and hosts information about significant industry events, reflecting an active and professional organization. Technically, the site is built with modern frameworks such as Angular and integrates various analytics and user experience tools like Hotjar and Google Analytics. The presence of HTTPS and Google site verification indicates a baseline of security, though the absence of explicit security headers and privacy policies suggests room for improvement. The WHOIS data is incomplete, which slightly impacts trustworthiness, but the professional content and active communication channels support the site's legitimacy. Overall, the site demonstrates a solid digital presence with moderate technical maturity and a good security posture, though enhanced privacy compliance and security practices are recommended.

P

PIXMAN s.r.o.

ms-museum.org

63

The Czech Museum of Mass Spectrometry is a small, non-profit educational institution focused on the history and technology of mass spectrometry. The website provides detailed information about exhibits, educational quizzes, and virtual tours aimed at scientists, students, and enthusiasts. The museum is affiliated with reputable scientific partners, enhancing its credibility. Technically, the website uses a traditional tech stack including jQuery, Bootstrap, and Google Analytics, but some libraries are outdated, which may pose security risks. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security posture is moderate; while HTTPS is implied and cookie consent is implemented, the absence of security headers and use of outdated libraries are concerns. WHOIS data is unavailable, likely due to privacy protection, but the website content and partner affiliations support legitimacy. Overall, the site is safe, trustworthy, and serves its educational purpose effectively.

S

Symetro s.r.o.

symetro.cz

41

Symetro s.r.o. is a small Czech architectural and engineering project office founded in 2018, specializing in building design, engineering activities, grant management, and consulting. The company is led by Ing. Ivan Záruba, a certified engineer with extensive experience in construction and project management. The website presents a professional portfolio of projects and clearly communicates contact information, targeting clients in the Czech Republic seeking specialized construction project services. Technically, the website uses modern CSS frameworks and Google Fonts, with Google Analytics and Tag Manager integrated for user tracking. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident. The website does not implement privacy or cookie policies despite tracking usage, indicating a gap in GDPR compliance. From a security perspective, the site uses HTTPS (implied by external script URLs), but no security headers are detected, and no incident response or vulnerability disclosure information is published. No forms collect sensitive data, reducing immediate risk, but the absence of privacy and cookie policies and security headers lowers the security posture score. Overall, the website is professional and trustworthy for its business domain but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

K

KnownHost

knownhost.com

63

KnownHost is a well-established managed web hosting provider operating since 2006, offering a wide range of hosting services including shared, WordPress, VPS, and dedicated hosting. The company targets businesses, developers, agencies, and resellers, emphasizing reliability, performance, and customer support. Their market position is strong with over 1 million domains hosted and a 99.99% uptime guarantee. Technically, the website uses modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be explicitly implemented. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience. However, the absence of WHOIS data limits domain registration verification, which slightly impacts trust analysis.

T

Tady je Přeškovo s.r.o.

pivovarprestice.cz

49

Tady je Přeškovo s.r.o. operates a restaurant and brewery located in Přeštice, Czech Republic, with a focus on serving modern Czech cuisine and their own brewed beers. The business reopened in early 2025 in a historically significant location, targeting local residents, families, and visitors including cyclists. The website reflects a small hospitality business with clear contact details, social media presence, and a menu showcasing their offerings. Technically, the site is built on Drupal 7 with common web technologies and includes Google Analytics for visitor tracking. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. The domain registration is recent but aligns with the business launch timeline, supporting legitimacy. Overall, the site is professional and trustworthy but could improve privacy and security disclosures.

Z

All news - the latest and fresh topics of the day in 2025 - Znaki FM

znaki.fm

56

Znaki FM is an online multilingual news and media platform founded in 2016, providing up-to-date news on politics, economy, sports, culture, music, and more. The website targets a general global audience interested in diverse topical news coverage. Technically, the site uses Cloudflare for DNS and hosting, and Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices and a consistent branding approach. Security-wise, the site enforces HTTPS and has domain transfer protection enabled, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact or incident response information is provided. Overall, the site is accessible and safe for general audiences, but improvements in privacy and security transparency are recommended.

R

RocketPlay Casino

rocketplay.com

58

RocketPlay Casino is an established online casino platform targeting Canadian players, offering a variety of casino games including slots, live casino, tournaments, and loyalty programs. The website positions itself as the best online casino in Canada for 2025, emphasizing bonuses and cashback offers to attract users. The business model revolves around online gambling services with a focus on user engagement through promotions and VIP clubs. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates analytics tools like Google Analytics and FullStory, and uses Cloudflare DNS services. The site is mobile optimized and demonstrates good SEO practices, although accessibility features are basic. Security-wise, the domain is well protected with registrar-level client protection statuses, uses HTTPS, and includes Google site verification. However, it lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be a gap in security readiness. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

N

Národní filmový archiv

filmovyprehled.cz

43

Filmový přehled is a Czech-language web portal operated by the Národní filmový archiv (National Film Archive) that provides comprehensive information about Czech cinematography and audiovisual works. The site offers a rich database of films, reviews, profiles, event calendars, and contextual articles, serving as an authoritative resource for film enthusiasts, researchers, and the general public interested in Czech film culture. The portal maintains a consistent and professional brand presence, including social media channels on Facebook and YouTube. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics for visitor tracking. It features a cookie consent mechanism compliant with GDPR principles, supporting multiple languages. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Hosting details and CMS usage are not explicitly identified. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent controls. However, no explicit security headers were detected in the provided data, and no privacy policy or terms of service pages were found, which are areas for improvement. No WHOIS data was available, likely due to privacy protection or registry policies, but the site’s affiliation with a national archive and professional presentation support its legitimacy. Overall, Filmový přehled presents a trustworthy and valuable resource in the Czech media sector, with moderate technical maturity and a solid security posture. Enhancements in privacy disclosures, security headers, and contact transparency would further strengthen its compliance and user trust.

P

Perform Czech

performczech.cz

54

Perform Czech is a cultural organization dedicated to bridging Czech performing arts with international audiences and professionals. The website serves as a platform to showcase Czech theatre projects, provide educational content, and promote events and podcasts related to performing arts. The organization targets artists, cultural professionals, and enthusiasts globally, positioning itself as a niche intermediary in the cultural media sector. The business model revolves around cultural promotion and facilitation rather than commercial sales. Technically, the website is built on WordPress CMS with a modern tech stack including Bootstrap, jQuery, Google Analytics, Algolia Search, and GDPR compliance plugins. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The infrastructure supports multimedia content and interactive features such as search and newsletter subscription. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and there is no visible incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not raise immediate concerns given the site's nature and content. Overall, the website presents a professional, trustworthy, and compliant digital presence for a cultural organization. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date third-party components to further strengthen security posture and trust.

SoundCzech is a Czech cultural institution dedicated to supporting and promoting the Czech music scene both locally and internationally. It operates under the Institut umění – Divadelní ústav, which is transitioning to the Národní institut pro kulturu (NIK). The website provides news, event calendars, artist directories, workshops, and funding challenges, targeting music professionals and enthusiasts. The organization is positioned as a key player in the Czech cultural sector with a non-profit business model focused on cultural promotion and education. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Typekit fonts, with good mobile optimization and moderate performance. The site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, reflecting a mature digital presence. However, the absence of WHOIS data and lack of explicit security headers indicate areas for improvement in transparency and security hardening. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent with granular controls. No vulnerabilities or exposed sensitive data were detected. The lack of a published security policy or vulnerability disclosure mechanism suggests room for enhancing incident response readiness. Overall, the security posture is solid but could benefit from additional security headers and formal policies. The overall risk assessment is moderate with a good trust level based on content and institutional affiliation, but the missing WHOIS data and limited direct contact information slightly reduce credibility. Strategic recommendations include improving domain registration transparency, enhancing security headers, publishing security policies, and expanding contact options to strengthen trust and compliance.

N

Národní institut pro kulturu

idu.cz

57

Národní institut pro kulturu (NIK) operates as a Czech national cultural institution focusing on arts disciplines such as theater, music, dance, literature, and visual arts. The website serves as a comprehensive portal offering research resources, databases, publications, and professional development services targeted at cultural professionals, researchers, and the general public interested in Czech culture. The institute maintains a strong online presence with multiple partner portals and active social media channels. Technically, the website is built on the Pimcore CMS platform, uses modern web technologies including Google Analytics and Tag Manager, and provides a responsive, accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response information are absent. The lack of WHOIS data for the domain is a notable gap in trust verification but does not detract from the professional presentation and content quality of the site.

S

SUDOP GROUP a.s.

sudop-group.cz

65

SUDOP GROUP a.s. is a large, well-established company based in the Czech Republic specializing in design, consulting, and IT services primarily for the construction, transportation, energy, and water management sectors. The company positions itself as the largest group of such companies in Central Europe, offering services including Construction and BIM, Consulting & IT, and Research & Development. Their business model focuses on digitalizing construction processes and providing engineering preparation for infrastructure projects. The website content is professional and targeted at business clients in relevant industries. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Google Maps API. It is mobile-optimized with good SEO and accessibility features, though some accessibility improvements could be made. Performance is moderate with efficient use of scripts and stylesheets. The site uses HTTPS with an excellent SSL configuration but lacks explicit security headers such as CSP or HSTS. From a security perspective, the site demonstrates good practices including HTTPS enforcement and a comprehensive cookie consent mechanism with granular user controls. No exposed sensitive data or vulnerable libraries were detected. However, the absence of WHOIS data and security.txt or incident response contacts slightly reduces trust. There are no visible forms collecting user data on the homepage, reducing attack surface. Overall, the security posture is solid but could be enhanced with additional headers and published incident response policies. The domain WHOIS data is unavailable, which is a concern for trust but may be due to privacy protection or registry issues. The website content and business information appear legitimate and professional, mitigating some concerns. The overall risk is moderate with recommendations to improve transparency and security headers to enhance trust and compliance.

A

Arc Network

arc-network.com

59

Arc Network is a professional business networking and media company that connects business communities globally through live events, digital platforms, and content delivery. The company operates internationally with multiple brands and offices in the United States, United Kingdom, Netherlands, and Singapore. Their market position is strong within the media and events sector, targeting business professionals and organizations seeking networking opportunities. The website reflects a mature digital presence built on WordPress with modern SEO and analytics integrations. Security posture is solid with HTTPS and reCAPTCHA implemented, though explicit security headers and incident response information are absent. WHOIS data is unavailable, which slightly impacts trust but the overall professional presentation and business information support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving accessibility features.

C

Culture Renovation

culturerenovation.com

52

Culture Renovation is a niche business focused on organizational culture transformation through a research-backed book and associated services such as assessments, workshops, and advisory. The website serves as the official platform for the book by Kevin Oakes and offers resources and solutions to business leaders and HR professionals. The technical infrastructure is based on WordPress with Elementor and Bootstrap, hosted on A2 Hosting, and includes standard analytics tools like Google Analytics and Tag Manager. The site is well designed, mobile optimized, and provides a professional user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is legitimate, trustworthy, and serves its business purpose effectively.

E

Evisort

evisort.com

75

Evisort is a technology company specializing in AI-powered contract lifecycle management software designed to empower enterprises and growing companies. The platform offers a comprehensive suite of services including contract intelligence, drafting, negotiation, analysis, reporting, automation, and collaboration. Recently acquired by Workday, Evisort is positioned as a leading solution in the legal tech and enterprise SaaS market. The website reflects a mature digital presence with professional design and extensive marketing and analytics integrations. Technically, the site is built on Webflow CMS and leverages multiple modern marketing and tracking tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response information are not clearly published. WHOIS data is not publicly available, which is unusual but does not detract significantly from the overall trustworthiness given the company's market presence and parent company backing. Overall, Evisort presents a credible, professional, and secure online presence suitable for its enterprise audience.

T

Tenor

tenor.com

72

Tenor is a well-established technology and media company specializing in animated GIF search, sharing, and keyboard applications. The platform serves a broad audience of internet users seeking to enhance their digital conversations with expressive media. Owned or operated under Google's ecosystem, Tenor benefits from a mature domain and strong integration with Google services, positioning it as a leading player in the GIF content market. Technically, the website employs modern web technologies including React, Google Analytics, and Google Tag Manager, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforcement and domain locking, though improvements such as enabling DNSSEC and publishing explicit security policies could enhance trust further. Privacy compliance is evident through comprehensive terms and privacy policies, but the absence of a cookie consent mechanism and incident response information suggests room for improvement. Overall, Tenor presents a professional, trustworthy, and user-friendly platform with a strong market presence.

A

ADP Research Institute

adpresearch.com

63

ADP Research Institute operates as a data-driven research entity providing exclusive insights into the labor market and workforce trends. Affiliated with ADP, a leading payroll and HR services provider, the institute leverages extensive payroll data and surveys to deliver comprehensive reports such as the National Employment Report and Today at Work. The website targets business leaders, economists, policymakers, and HR professionals, positioning itself as a trusted source for workforce analytics. Technically, the website is built on WordPress with modern SEO and analytics integrations including Google Analytics, Google Tag Manager, and Eloqua marketing automation. The site is mobile-optimized, accessible, and employs cookie consent mechanisms aligned with GDPR compliance. The use of structured data enhances search engine visibility and content discoverability. From a security perspective, the site enforces HTTPS, implements security headers, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain is notable but does not detract significantly from the site's legitimacy given the strong brand association and professional content. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in transparency around security policies and direct contact information would further strengthen its security posture and user trust.

L

Liger

ligerpartners.com

65

Liger Marketing is a specialized B2B digital marketing agency focused on delivering integrated marketing strategies that drive lead generation and revenue growth for companies with complex sales cycles. The company positions itself as a top-tier agency with award-winning client service and a strong emphasis on brand positioning, SEO, content marketing, and full-service execution. The website reflects a mature digital presence with professional design, consistent branding, and clear messaging tailored to B2B buyers. Technically, the site is built on WordPress, leveraging modern analytics and marketing tools including Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel, supported by Cloudflare DNS and registrar services. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the site demonstrates a high level of professionalism and business credibility, with room for improvement in privacy and security transparency.

Vodní hospodářství is a specialized scientific-technical journal focused on water management and related environmental fields, operating since 1998. The website serves as a platform for publishing articles, providing archives, and offering advertising opportunities. It targets a global audience interested in water management science and planning. The business model revolves around publishing and information dissemination within a niche scientific community. The website is built on WordPress with WooCommerce and several plugins, including Yoast SEO and BuddyPress, indicating a moderate level of digital maturity. The technical infrastructure is functional but uses outdated software versions, which may pose security risks. The site is mobile-optimized and SEO-friendly but lacks some modern accessibility features.

P

PE Systems s.r.o.

pesystems.cz

44

PE Systems s.r.o. is an established Czech Republic-based company specializing in the distribution and servicing of high-end analytical and biomedical instruments, primarily representing PerkinElmer and Revvity brands. The company targets academic, governmental, industrial, and pharmaceutical laboratories, offering a broad portfolio of products including spectrometers, chromatographs, imaging systems, reagents, and laboratory informatics software. Their market position is supported by a long operational history since 1991 and ISO 9001 certification, indicating a commitment to quality management. The website reflects a professional and consistent brand image with good content relevance and navigation.

N

Nicolet CZ s.r.o.

nicoletcz.cz

58

Nicolet CZ s.r.o. is a Czech-based company specializing in molecular spectroscopy, providing a comprehensive range of scientific instruments including FT-IR, NIR, and Raman spectrometers, along with application support, training, and scientific project collaboration. The company has a well-established market presence since 2001, targeting scientific researchers, industrial clients, and educational institutions. Their business model focuses on B2B sales and service of specialized spectroscopy equipment. Technically, the website is built on WordPress with Elementor, utilizing modern web technologies and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and offers good navigation and content quality. Security-wise, the website enforces HTTPS, uses reCAPTCHA for forms, and includes some security headers, though there is room for improvement in header completeness and form security. Privacy compliance is strong with a comprehensive GDPR policy, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

C

Cap Enfants

capenfants.com

61

Cap Enfants operates a network of corporate and micro-crèches in France, specializing in a unique pedagogical approach that integrates music and multisensorial activities to foster early childhood development. The company targets parents, enterprises, and childcare managers, positioning itself as a socially innovative childcare provider with over 18 years of experience. The website reflects a professional and consistent brand image with comprehensive content and strong trust signals such as testimonials and media coverage. Technically, the site is built on WordPress with modern libraries like Bootstrap and jQuery, and integrates Google Analytics, Facebook Pixel, and reCAPTCHA for security and marketing purposes. Security posture is solid with HTTPS and form protections, though it lacks explicit security headers and public incident response policies. The absence of WHOIS domain registration data is a notable concern, potentially impacting trustworthiness despite the professional online presence. Overall, the site is well-optimized for SEO, mobile-friendly, and compliant with GDPR through clear privacy and cookie policies.

C

Home | CY - ecole de design

cy-ecolededesign.fr

53

The website en.cy-ecolededesign.fr represents an educational institution focused on design, hosted on the Wix platform. The site uses multiple analytics tools including Google Analytics, Microsoft Clarity, LinkedIn Insight, and Matomo, indicating a moderate level of digital maturity. The technical infrastructure is standard for Wix-hosted sites, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and Wix's built-in security hardening, but lacks explicit security headers and visible privacy or cookie policies. The absence of WHOIS data suggests domain privacy protection, which is common for small educational websites but limits transparency. Overall, the site is functional and professional but could improve in privacy compliance and contact transparency.

O

Oval Systems Limited T/A AwardStage

awardstage.com

71

AwardStage, operated by Oval Systems Limited, is a UK-based SaaS platform specializing in awards management software. The platform targets awards managers, entrants, and judges, providing a streamlined, user-friendly solution for managing, entering, and judging awards. The company positions itself as a niche provider with a professional and consistent brand presence. Technically, the website is built on Squarespace, leveraging modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and SEO, with a good user experience and clear navigation. Security-wise, the site enforces HTTPS with HSTS and includes cookie consent mechanisms, though it lacks some advanced security headers and a dedicated security policy page. The WHOIS data is missing or unavailable, which slightly impacts trust but the website content and company information are consistent and professional. Overall, AwardStage presents a credible and secure online presence suitable for its business model.

Časopis Rybnikářství is a niche quarterly publication operated by the Rybářské sdružení České republiky, serving the Czech fishing community with archival access to past magazine issues. The website is professionally designed with clear navigation and provides comprehensive contact information, including phone numbers, email, and a contact form. The technical infrastructure includes modern web fonts, Google Analytics, and Tag Manager for tracking, hosted likely by Ignum based on DNS data. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy/cookie policies, indicating compliance gaps. WHOIS data confirms domain legitimacy and consistency with the business. Overall, the site is safe, trustworthy, and functional but would benefit from enhanced privacy and security practices.

S

Symetro s.r.o.

cenyzaprojekty.cz

43

The website cenyzaprojekty.cz is a Czech-language platform offering specialized online tools for architects, project planners, and technicians to estimate construction project costs, plan schedules, and calculate professional fees. It is powered by Symetro s.r.o. and recommended by professional organizations such as ČKAIT and ČSSI, positioning it as a niche service in the construction and engineering consulting sector. The site provides multiple applications covering cost estimation for building and transport projects, honorarium calculations, professional roles budgeting, timelines, and documentation standards. Technically, the site employs modern web technologies including Vue.js, Google Analytics, Google Tag Manager, and Google reCAPTCHA v3, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and bot protection, though explicit security headers and incident response policies are absent. Privacy compliance is supported by cookie consent and published privacy and cookie policies. However, the absence of WHOIS registration data reduces domain trustworthiness and raises concerns about domain legitimacy. Overall, the site is professional and trustworthy from a content and technical perspective but would benefit from improved transparency in domain registration and security disclosures.

V

Virtual Fiction

virtual-fiction.cz

42

Virtual Fiction is a small, established Czech company specializing in 3D visualization, interior design, graphic design, printing, photography, and web hosting services. Founded in 1996, it has developed a stable presence domestically and in several European countries. The website reflects a professional business with clear service offerings and contact information. Technically, the site uses traditional web technologies such as Bootstrap and jQuery, with moderate performance and basic mobile optimization. Security posture is average, with HTTPS implied but lacking advanced security headers and privacy compliance measures. The absence of privacy and cookie policies represents a compliance risk. Overall, the business appears legitimate and stable, but improvements in security and privacy practices are recommended.

G

Griffith Foods

griffithfoods.com

63

Griffith Foods is a global leader in food product development and innovation, specializing in creating delicious, healthy, sustainable, and nutritious food solutions for top brands worldwide. Their website reflects a mature and professional business with a clear focus on culinary craftsmanship and sustainability. The company targets food industry professionals and partners seeking customized product development services. Technically, the website is built on WordPress with a modern tech stack including analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Cookiebot, ensuring good digital maturity and user experience. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though there is room for improvement in security headers and explicit security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-branded, and professionally maintained.

L

Liger

ligermarketing.com

66

Liger Marketing is a specialized B2B digital marketing agency focused on delivering integrated marketing strategies and execution for companies with complex sales cycles. The company emphasizes lead generation, brand positioning, and full-service marketing execution, positioning itself as a trusted partner with award-winning client service and a strong referral base. The website reflects a mature digital presence built on WordPress with modern marketing and analytics tools integrated, including Google Analytics, Microsoft Clarity, and OneTrust for cookie consent. Security posture is solid with HTTPS enforced and domain registration consistent with the business age and branding. However, the absence of explicit privacy and terms of service policies is a compliance gap. Overall, the site is professional, well-branded, and trustworthy, targeting B2B clients seeking growth-driven marketing solutions.

V

Visier

visier.com

76

Visier is an enterprise SaaS company specializing in people analytics and workforce planning software. Their platform enables business professionals and HR leaders to leverage data-driven insights to improve workforce outcomes and business results. Positioned as a leading people analytics provider, Visier targets medium to large enterprises with a focus on technology-driven HR solutions. The website reflects a mature digital presence with professional branding and comprehensive service descriptions. Technically, the website is built using modern frameworks such as React and Gatsby, with integration of Okta for secure authentication. The site demonstrates fast performance, good mobile optimization, and adherence to SEO and accessibility best practices. Analytics are implemented via Google Analytics and Tag Manager, supporting moderate user tracking with privacy compliance. From a security perspective, Visier employs HTTPS with strong SSL configuration and security headers. The use of Okta indicates a robust authentication mechanism. However, the absence of a dedicated security policy or incident response page and lack of a vulnerability disclosure mechanism are areas for improvement. WHOIS data is unavailable publicly, likely due to privacy protection, which is common for enterprise SaaS companies but slightly reduces transparency. Overall, Visier presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security and incident response policies, adding a vulnerability disclosure page, and enhancing transparency around domain registration to further build trust.

I

International Association for Human Resources Information Management

ihrim.org

58

The International Association for Human Resources Information Management (IHRIM) is a well-established professional association focused on developing HR technology leaders through vendor-neutral education and certification programs. The website reflects a mature organization with a global reach, targeting HR practitioners, educators, technology developers, analysts, and executives. The digital infrastructure is built on WordPress with modern optimization and analytics tools, providing a fast and responsive user experience. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are not explicitly presented, indicating room for compliance improvement. WHOIS data is unavailable, likely due to privacy protection, which is common but slightly impacts trust. Overall, the site is professional, content-rich, and trustworthy, serving its niche audience effectively.

I

ICAgile

icagile.com

67

ICAgile is a globally recognized accreditation body specializing in agile education and certification. The organization offers a comprehensive catalog of agile certifications and micro-credentials tailored for individuals and organizations seeking to advance their agile capabilities. With over 300,000 certifications awarded and backing from more than 50 industry thought leaders, ICAgile holds a strong market position in the agile education sector. The website reflects a professional and user-friendly design, targeting both individual learners and enterprise clients with clear calls to action and resources. Technically, the website leverages modern marketing and analytics technologies including HubSpot, Google Analytics, Hotjar, and Mailchimp, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with proper use of meta tags and structured data. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. No direct contact emails or phone numbers are published, relying instead on contact forms. The WHOIS data is unavailable or not publicly accessible, which limits transparency regarding domain registration details. Despite this, the website's professional appearance, extensive content, and strong trust indicators suggest legitimacy. Privacy policies and cookie consent are comprehensive and GDPR compliant. No security incident response or vulnerability disclosure information is found, representing an area for potential improvement. Overall, ICAgile's website demonstrates a high level of professionalism, technical maturity, and business credibility, with minor gaps in domain transparency and published security policies. The risk profile is low, and the site is suitable for its educational and certification purposes.

I

Institute for Corporate Productivity (i4cp)

i4cp.com

74

The Institute for Corporate Productivity (i4cp) is a leading human capital research firm specializing in discovering and advancing next practices in HR and workforce productivity. The company serves senior HR leaders, CHROs, and business executives by providing enterprise memberships, advisory services, executive search, and hosting industry-leading conferences. Their market position is strong, supported by partnerships with major global companies and a comprehensive research approach combining data and peer crowdsourcing. Technically, the website employs modern web technologies including Google Analytics, HubSpot, Bootstrap, and Vite for efficient content delivery and user experience. The site is mobile optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and Content Security Policy headers, though additional security headers could improve defenses. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and indicate GDPR compliance. However, the absence of public WHOIS data suggests domain privacy protection, which is common and justified for this business type. No incident response or vulnerability disclosure information was found, indicating an area for potential improvement. Overall, the website is professional, trustworthy, and well-maintained, reflecting a mature organization with a clear focus on human capital research and leadership. The risk level is low, but enhancing security headers and publishing incident response details would strengthen trust and compliance.

P

Personify Inc.

smallworldlabs.com

59

Personify Inc. operates The Loop, a community platform designed to connect and engage its clients, supporters, members, and volunteers. The platform facilitates sharing best practices, digital transformation, and constituent engagement, positioning Personify as a provider of enterprise community solutions. The website reflects a professional and consistent brand image aligned with Personify's corporate identity. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Google Analytics, New Relic, and marketing tools like Marketo and Drift chat, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is solid with HTTPS enforced and client-side password hashing, but lacks some security headers and explicit privacy consent mechanisms. No WHOIS data is available for the subdomain, which is expected as it is a subdomain of personifycorp.com, a legitimate corporate domain. Overall, the site is trustworthy and well-maintained, serving an enterprise audience effectively.

L

LRP Media Group

hrexecutive.com

69

HR Executive is an established online magazine focused on human resource news, analysis, and insights, targeting HR leaders and decision-makers. The website is operated by LRP Media Group, a recognized media company with a domain dating back to 1998, indicating a mature and stable presence in the HR media sector. The business model centers on providing strategic content and research to HR professionals, supported by advertising and subscription services.

I

International Canoe Federation

canoeicf.com

60

The International Canoe Federation (ICF) operates a comprehensive and professionally designed website serving as the global governing body for canoeing sports. The site offers extensive information on disciplines, events, athlete profiles, governance, and live media coverage, targeting athletes, federations, and fans worldwide. Technically, the site is built on Drupal 7 with a modern JavaScript stack, integrated with Google Analytics, Tag Manager, and YouTube for multimedia content. The website demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS and security headers, though the absence of a published security policy and incident response details suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data is missing, which slightly impacts trust but does not detract significantly given the professional content and external validation. Overall, the site is a reliable and authoritative resource for the canoeing community.

B

BUSHMAN

bushman.si

58

BUSHMAN.si is an e-commerce retailer specializing in quality outdoor clothing for men, women, and children, targeting nature enthusiasts primarily in Slovenia and surrounding European markets. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Google Analytics, Facebook Pixel, and Judge.me for customer reviews. The business appears to be a medium-sized regional player founded in 2020, with a consistent brand presence and multiple regional partner sites. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with strong security headers, indicating a mature digital infrastructure. However, privacy compliance could be improved by implementing explicit cookie consent mechanisms and publishing dedicated security policies. Overall, the site demonstrates a good security posture with no critical vulnerabilities detected, but could enhance transparency and user trust by adding incident response contacts and vulnerability disclosure information.

M

MORAVSKÁ VODÁRENSKÁ, a.s.

smv.cz

50

MORAVSKÁ VODÁRENSKÁ, a.s. is a regional water utility company operating primarily in the Moravian region of the Czech Republic. The company provides essential water supply and wastewater management services, supported by a customer portal and accredited laboratory testing for water quality. It is part of the larger Veolia group, indicating a strong market position within the energy and utilities sector. The website reflects a professional and consistent brand image with relevant content targeted at residential and commercial customers. Technically, the website is built on the Vizus CMS platform and employs modern web technologies including JavaScript, CSS, and HTML5. It integrates analytics tools such as Google Analytics and Matomo for traffic and user behavior tracking. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy page was found in the provided content. From a security perspective, the site uses HTTPS and implements cookie consent controls, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and affiliation with Veolia support its credibility. Overall, the website is functional, professional, and trustworthy for its intended audience, but improvements in transparency around privacy policies, security headers, and domain registration information are recommended to enhance trust and compliance.

S

Sdružení české filmové kritiky, z.s.

filmovakritika.cz

44

The website filmovakritika.cz represents the Sdružení české filmové kritiky, a Czech non-profit organization dedicated to film criticism, awards, and cultural promotion within the Czech film industry. It serves a niche audience of film critics, cinephiles, and industry professionals by providing reviews, award information, premieres, and critic profiles. The site is well-structured, primarily in Czech, and demonstrates consistent branding and good content quality. The domain is well-established since 2010, supporting the organization's credibility. Technically, the site is built on WordPress using the Elementor page builder, with modern JavaScript libraries such as Swiper.js and jQuery. It integrates Google Analytics and Facebook SDK for user tracking and marketing purposes. The site is mobile-optimized and has good SEO practices but lacks some accessibility features. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. No forms collect sensitive user data except a basic search form. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. External links include many gambling-related domains embedded in hidden elements, which may be unrelated or potentially spammy, warranting further review. Overall, the website is a legitimate cultural media platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and vulnerability disclosure would enhance trust and regulatory adherence.

C

CFPE Europe

cfp-e.com

54

CFPE Europe is a federation representing commercial film producers associations across 21 European countries, encompassing over 900 independent production companies. The organization serves as a collective voice and support network for the advertising production industry in Europe, providing resources, advocacy, and organizing industry events such as summits. The website reflects a professional and consistent brand image, targeting industry stakeholders and members of national associations. Technically, the site is built on WordPress and employs modern web technologies including jQuery, Slick Carousel, and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks some recommended security headers and visible privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is missing or unavailable, which is inconsistent with the active and professional nature of the website and reduces domain trustworthiness. Overall, the site is functional, professional, and serves its business purpose well, but could enhance privacy compliance and security posture.