Security Directory

S

ShipEngine

shipengine.com

71

ShipEngine operates as a technology platform specializing in multi-carrier shipping and logistics APIs, serving platforms, third-party logistics providers, brands, and developers. The company positions itself as a leading API provider with a significant shipment volume, offering services such as shipping APIs, address validation, tracking, rate comparison, and embeddable components. The website reflects a mature digital presence with modern technologies including WordPress CMS, jQuery libraries, Google Tag Manager, and Optimizely for marketing and analytics. Privacy compliance is supported by a cookie consent mechanism, although explicit privacy and terms of service pages were not detected in the provided content. Security posture is moderate with HTTPS implied but lacking visible security headers or published security policies. WHOIS data for the www subdomain is unavailable, which is unusual but does not detract from the professional appearance and trustworthiness of the site. Overall, the website demonstrates a strong business and technical foundation with room for improvement in security transparency and contact information clarity.

P

PAPRIKA

my-paprika.com

52

PAPRIKA is a hospitality business specializing in Mediterranean street food, particularly hummus, with multiple locations in Prague and Brno, Czechia. The website presents a professional and user-friendly interface offering menus, table reservations, catering services, and a kitchen market. The business targets general consumers seeking quality Mediterranean cuisine and related catering services. Technically, the site is built on the Site123 CMS platform, utilizing modern web technologies and includes analytics and marketing tracking tools. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy policies. The absence of WHOIS data for the domain raises some legitimacy concerns, though the website content and business presence appear genuine. Privacy compliance is weak due to missing policies and cookie consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

G

GULE FOOD TRUCK

gulefoodtruck.cz

52

GULE Food Truck is a Czech social enterprise operating a food truck in Prague, specializing in fresh curd mini-doughnuts, coffee, and catering services. The business focuses on creating employment opportunities for people with disabilities, positioning itself as a socially responsible local food provider. The website is built on WordPress with modern SEO and analytics tools, demonstrating a moderate level of digital maturity. While the site is well-designed, mobile-optimized, and provides clear navigation, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the active social media presence and quality content support the legitimacy of the business. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.

P

Pivovar Obora

pivovarobora.cz

58

Pivovar Obora is a small craft brewery established in 2015 in the south of Bohemia, Czech Republic. The company specializes in brewing unfiltered and unpasteurized beers using their own hops and malt, offering a variety of beer types including bottom-, top-, and spontaneously fermented beers. Their products are available in multiple packaging formats and sold both through an online e-shop and local distribution channels. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting their market position as a niche local brewery. Technically, the website is built on the Solidpixels CMS platform and employs modern web technologies including Google Fonts, Google Analytics, Facebook Pixel, and Google Tag Manager. The site is HTTPS secured with valid SSL certificates and includes cookie consent mechanisms, although it lacks explicit privacy policy and terms of service pages. Performance and mobile optimization are good, but security headers are not detected, indicating room for improvement in security hardening. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and secure form validation with anti-spam measures. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms limits transparency and preparedness. The WHOIS data for the domain is unavailable, likely due to registry privacy policies, which restricts domain registration verification but does not raise immediate suspicion given the legitimate business content. Overall, the website is trustworthy and professionally maintained, serving its business purpose effectively. Strategic improvements in privacy documentation, security headers, and incident response transparency would enhance compliance and security posture, further strengthening user trust and regulatory alignment.

P

Pivovar Clock s.r.o.

pivovarclock.cz

47

Pivovar Clock s.r.o. is a small craft brewery based in Potštejn, Czech Republic, established in 2012. The company produces a variety of craft beers and operates an e-shop alongside participation in local beer festivals and events. The website reflects a well-maintained digital presence with clear branding and user engagement features such as newsletters and social media integration. Technically, the site uses modern web technologies including Laravel backend, jQuery, Bootstrap, and Google Analytics, providing a responsive and user-friendly experience. Security measures include HTTPS enforcement, CSRF tokens, age verification overlays, and hCaptcha for form protection. However, the absence of WHOIS data and explicit privacy policy reduces overall trust and compliance posture. The site is free from WAF blocks or malware indications, making it accessible and functional for users.

P

Pivovar Mazák

pivovarmazak.cz

46

Pivovar Mazák is a small craft brewery based in Dolní Bojanovice, Czech Republic, established in 2011. The company specializes in brewing fresh, balanced craft beers that respect tradition and modern trends. The website reflects a local business with a clear focus on quality and craftsmanship, targeting adult consumers interested in craft beer. The site includes an age verification popup to restrict access to users 18 years or older, aligning with legal requirements for alcohol-related content. Technically, the website is built on WordPress using WPBakery Page Builder, hosted by cesky-hosting.eu, and integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. The site is mobile optimized and SEO friendly with good content quality and consistent branding. Security posture is moderate with HTTPS enabled and basic best practices observed, but lacks explicit security headers and published security policies. Privacy compliance is strong with GDPR-compliant cookie consent and a comprehensive privacy policy. WHOIS data is consistent with the business claims, showing domain registration since 2011 without privacy protection, supporting legitimacy. Overall, the website is professional and trustworthy but could improve security headers and incident response transparency.

M

Mad Scientist

madscientist.hu

61

Mad Scientist is a small, independent craft brewery based in Budapest, Hungary, known for its experimental and innovative beer recipes. Established around 2016-2017, the company focuses on producing unique beers including alternative fermentation products, honey beers, and barrel-aged projects. The website serves as an e-commerce platform built on WordPress and WooCommerce, targeting beer enthusiasts and the general mature audience interested in craft beers. The site is well-branded and consistent with the company's identity.

P

Panský pivovar Vlachovo Březí s.r.o.

brezikoza.cz

42

Březí Koza is a small craft brewery based in Vlachovo Březí, Czech Republic, reviving a historic brewing tradition with a focus on traditional brewing methods and quality. The website presents the brewery's products, history, and contact information clearly, targeting a mature audience interested in craft beer. The company operates with a clear local identity and maintains active social media channels to engage customers. Technically, the website uses a modern but common technology stack including jQuery, Bootstrap, and Google Analytics, hosted by a Czech registrar WEDOS, ensuring regional consistency. Security posture is moderate with HTTPS implied and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial with a cookie consent banner but no visible privacy or terms of service policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

W

Wild Creatures

wildcreatures.cz

43

Wild Creatures is a small Czech craft brewery specializing in wild fermentation beers, offering both on-site visits and online sales through their e-shop. The website is professionally designed with good navigation and mobile optimization, targeting adult beer enthusiasts. The technical infrastructure includes standard web technologies and Google Analytics for tracking, but lacks advanced security headers and privacy compliance features. The security posture is moderate, with an age gate implemented to restrict underage access, but missing privacy and cookie policies reduce compliance. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not directly impact the legitimacy of the business as presented on the site. Overall, the website is functional and trustworthy for its business purpose but could improve in security and privacy compliance.

P

Pivovar Volt

pivovarvolt.cz

40

Pivovar Volt is a Czech craft brewery established in 2017, specializing in a wide variety of beers including traditional Czech styles and innovative ales. The business operates a brewery, restaurant, and pension, targeting beer enthusiasts and local customers. The website reflects a well-structured and professional digital presence with detailed product information and active social media engagement. Technically, the site uses established libraries such as jQuery and Bootstrap, and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced compliance and security measures.

Ú

ÚRS CZ a.s.

cs-urs.cz

54

ÚRS CZ a.s. operates the Cenová soustava ÚRS, a comprehensive pricing system and methodological guide for construction works in the Czech Republic. The company provides structured data, training, and software solutions to support construction cost estimation and public procurement processes. The website reflects a mature and professional digital presence with clear business information and compliance with GDPR and cookie regulations. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the business appears legitimate and well-positioned in its niche market.

A

AnOther Magazine

anothermag.com

58

AnOther Magazine is a well-established digital media outlet specializing in high fashion, art, and culture. The website presents a professional and visually appealing platform targeting fashion and culture enthusiasts with editorial content, photography, and features. The business model revolves around digital publishing, advertising, and magazine sales through partner sites. Technically, the site employs a modern tech stack with multiple analytics and advertising integrations, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and consent management, though explicit privacy and terms policies are not detected, and security headers are missing. The absence of WHOIS data raises some concerns about domain registration transparency, but the overall site professionalism and branding consistency support legitimacy. Extensive user tracking is present, necessitating improved privacy disclosures. Strategic recommendations include publishing clear privacy and terms policies, enhancing security headers, and providing explicit contact information for security and privacy matters.

A

Audience

audience.io

69

Audience is a professional audience management platform focused on helping brands and media companies grow, engage, and monetize their audiences through interactive campaigns and data-driven tools. The platform boasts a large number of campaigns and data points collected, supported by extensive integrations with advertising and marketing services. The website demonstrates a mature digital presence with modern technologies and strong marketing infrastructure. Technically, the site is built on Webflow CMS and uses a variety of modern analytics and marketing tools including Google Analytics, HubSpot, Facebook Pixel, and LinkedIn Insight Tag. The site is well optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, the website enforces HTTPS and uses secure third-party services. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present and comprehensive, indicating good compliance with data protection regulations. Overall, the website and business appear legitimate and professional, with no signs of suspicious activity. The lack of WHOIS data is due to privacy protection, which is common and justified for this type of business. Strategic recommendations include enhancing security headers and publishing a formal security policy or vulnerability disclosure to further improve trust and security posture.

B

Biskupství českobudějovické

bcb.cz

48

Biskupství českobudějovické is a regional religious organization serving the Českobudějovice diocese in the Czech Republic. The website functions as an information hub providing news, events, and resources related to the diocese's activities. It targets the general public interested in religious and community matters. The organization operates as a non-profit entity with a focus on community engagement and religious services. Technically, the website is built on WordPress with modern SEO plugins like Yoast and integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and demonstrates good content quality and navigation clarity. However, some accessibility features could be improved. The website uses HTTPS with a strong SSL configuration but lacks some security headers that could enhance protection. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms are implemented, but the absence of a clear privacy policy and incident response contacts indicates room for improvement in compliance and transparency. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations. Overall, the website is professional, trustworthy, and serves its community well. Strategic improvements in privacy documentation, security headers, and incident response information would enhance its security and compliance standing.

M

MUDr. Marie Ládová

internacb.cz

38

The website represents a small specialized medical clinic in České Budějovice, Czech Republic, focusing on internal medicine and hematology services. It offers patient consultations, blood testing, and online appointment booking. The business is positioned locally with contractual relationships with major Czech health insurance companies, indicating a stable client base and professional service offering. The website content is clear, professionally presented, and targeted at local patients seeking specialized medical care. Technically, the website uses legacy JavaScript libraries such as jQuery 1.8.6 and jQuery UI, with Google Analytics for visitor tracking. The site lacks modern CMS indicators and does not display advanced frameworks or hosting details. Performance and mobile optimization are basic but functional. There is no evidence of advanced accessibility or SEO optimization beyond basic meta tags. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are critical for GDPR compliance given the use of Google Analytics. The WHOIS data is missing, which reduces domain trustworthiness and raises concerns about domain registration transparency. The email address is obfuscated via JavaScript, indicating some attention to spam protection. No incident response or security policy information is published. Overall, the website is functional and professional but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and regulatory adherence.

P

Povoda s.r.o.

povoda.cz

46

Povoda s.r.o. operates a specialized travel agency focused on water sports vacations, including canoeing and kayaking trips primarily in Central Europe. Their offerings include family-friendly tours, school courses, and corporate events, positioning them as a niche player in the hospitality and outdoor adventure market. The website demonstrates a good level of digital maturity with modern JavaScript frameworks and tracking technologies, alongside GDPR and cookie compliance mechanisms. However, the absence of WHOIS data and security headers slightly diminishes the overall trustworthiness. Security posture is adequate with HTTPS and consent management but lacks formal incident response and vulnerability disclosure policies. Overall, the site is professional, user-friendly, and safe for general audiences.

Posázaví o.p.s. is a non-profit organization focused on destination management and tourism promotion in the Posázaví region of the Czech Republic. The website serves as a comprehensive portal for tourists, offering detailed information on local events, tourist attractions, active tourism activities, services, and regional products. The organization appears well-established since 2004 and maintains partnerships with regional and national tourism bodies, enhancing its market position as a key regional tourism information provider. Technically, the website employs modern JavaScript libraries such as jQuery, jQuery UI, Swiper, and Plupload, alongside Google Analytics and Google Tag Manager for visitor tracking. The site uses the Apollo publishing system, indicating a professional content management approach. The website is moderately performant, mobile-optimized, and provides good navigation and content relevance, although accessibility features could be improved. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No vulnerabilities or malicious content were detected. The WHOIS data for the subdomain is unavailable, which is typical, but the main domain's legitimacy is supported by the website's content and partnerships. Overall, the site is a trustworthy and professional tourism portal with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility to strengthen user trust and regulatory compliance.

A

Abintus Consulting Ltd.

abintus.consulting

52

Abintus Consulting Ltd. is a specialized media consultancy focused on empowering small to medium-sized advertisers through services such as media auditing, agency pitch management, media performance tracking, and media management training. The company positions itself as an international expert with over 20 years of experience, serving notable clients and emphasizing transparency and efficiency in advertising spend. The website is professionally designed, leveraging HubSpot CMS and marketing automation tools, with strong branding consistency and multimedia testimonials enhancing credibility. Technically, the site uses modern technologies including Google Analytics and Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. WHOIS data is privacy protected, which is typical for consulting firms but reduces transparency. Overall, the website presents a trustworthy and professional image with moderate to high digital maturity.

K

Kronospan

mojekrono.cz

55

Kronospan is a global leader in wood-based panel manufacturing serving the furniture and construction industries. The company operates a large network of 42 firms worldwide and emphasizes sustainability and community engagement. Their website reflects a professional corporate presence with comprehensive content about their business, projects, and career opportunities. Technically, the site is built on WordPress with modern tracking and SEO tools, offering good mobile optimization and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and explicit security policies are missing. The absence of WHOIS data reduces domain trust but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing security headers, publishing incident response policies, and adding vulnerability disclosure information.

BIM Platforma is a Czech Republic-based cloud platform operated by DEK a.s., providing integrated applications for construction professionals to manage projects efficiently across all phases from study to realization. The platform offers tools for cost estimation, 3D model viewing, project documentation sharing, and communication, targeting investors, architects, cost estimators, contractors, and facility managers. The website is professionally designed with consistent branding and clear navigation, hosted on Microsoft Azure cloud, and uses modern web technologies including Bootstrap, jQuery, and OAuth 2.0 authentication. Security posture is strong with HTTPS and penetration testing, though improvements are possible in security headers and incident response transparency. Privacy and terms documents are comprehensive and GDPR compliant. Overall, the platform demonstrates a mature digital presence with moderate user tracking and advertising integration.

A

Assistant Pro

assistant.pro

46

Assistant Pro is a specialized SaaS platform targeting WordPress developers, freelancers, and agencies by providing cloud storage and a community-driven marketplace for page builder templates. The platform aims to streamline website creation by enabling users to save, share, and import design assets across multiple WordPress sites. The business is positioned as a niche productivity tool with a clear value proposition and a consistent brand presence. Technically, the website is built on WordPress, hosted on DigitalOcean, and leverages modern web technologies including JavaScript, jQuery, and SEO plugins like Yoast. The site demonstrates good mobile optimization and SEO practices, though accessibility is basic. Security posture is adequate with HTTPS and domain-level protections, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism detected despite use of tracking scripts. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Budějovický Budvar, n.p.

slavapivu.cz

62

The website www.slavapivu.cz is a professionally designed event site dedicated to the Sláva pivu! beer festival organized by Budějovický Budvar, a well-known Czech brewery. The site provides comprehensive information about the festival dates, participating breweries, food vendors, entertainment programs, and ticket purchasing options. It targets beer enthusiasts and festival attendees primarily in the Czech Republic. The business model focuses on event organization and promotion, leveraging the strong brand presence of Budějovický Budvar to attract visitors. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Analytics, Google Tag Manager, Cookiebot for cookie consent, and Typekit fonts. The site is mobile optimized with good SEO practices and moderate performance. However, some accessibility features are basic, and there is room for improvement in security headers and incident response transparency. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating a good baseline for privacy compliance. However, no explicit security policy or incident response contacts are provided, and no WHOIS data is publicly available for the domain, which limits the ability to fully verify domain legitimacy. No vulnerabilities or malicious content were detected. Overall, the website presents a trustworthy and professional front for the festival, but the lack of WHOIS transparency and some missing security best practices suggest moderate risk. Strategic improvements in domain registration transparency, security headers, and incident response information would enhance trust and security posture.

A

AutoVerify

autoverify.com

61

AutoVerify is a Canadian-based technology company specializing in automotive digital merchandising, customer engagement, and transaction solutions for dealers, manufacturers, lenders, and marketplaces. The company offers a suite of products designed to improve customer experience, maximize profits, and streamline automotive sales processes. Their market position is strong, representing over 900 dealers and major automotive brands, supported by trust indicators such as SOC II compliance and customer testimonials. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Analytics, Facebook Pixel, Hotjar, and Splitbee for analytics and user tracking. The site is well-optimized for mobile devices, fast loading, and features good SEO and accessibility practices. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. The presence of SOC II compliance indicates a commitment to security standards, but the absence of visible security headers and lack of published incident response or vulnerability disclosure policies suggest areas for enhancement. The missing WHOIS data for the domain is a notable anomaly that reduces overall trustworthiness. Overall, AutoVerify presents a professional and trustworthy online presence with a solid business model and technical foundation. Strategic improvements in privacy compliance and security transparency would further strengthen their security posture and customer trust.

Buffalo News is a well-established regional news media outlet serving Buffalo, NY, and Erie County, operated under Lee Enterprises. The website provides comprehensive local news, weather, entertainment, and event coverage, supported by subscription and advertising revenue models. The digital platform is built on a modern technology stack including Google Analytics, Google Tag Manager, Amazon Publisher Services, and a proprietary CMS (BLOX). It demonstrates good mobile optimization, accessibility, and SEO practices. Privacy compliance is robust with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Security posture is strong with HTTPS enforcement, reCAPTCHA Enterprise integration, and consent management, though some security headers could be improved. The domain is longstanding and consistent with the business profile, enhancing trustworthiness. Overall, the website is professional, secure, and compliant, serving a general audience with safe content.

A

Advance Local Media LLC

cleveland.com

70

Cleveland.com is a prominent local news website serving Cleveland, Ohio, and the broader Northeast Ohio region. It provides comprehensive coverage including local news, sports, weather, and entertainment. The site is part of Advance Local Media LLC, a major media company with a network of regional news sites. The platform targets residents and visitors seeking timely and relevant local information. Its business model relies on digital advertising, subscription services, and sponsored content. The website demonstrates a professional design and consistent branding, supporting its position as a leading regional news source. Technically, the site employs modern web technologies including React and Arc Publishing CMS, supported by a robust ad and analytics ecosystem featuring Google Tag Manager, Amazon Ads, Rubicon Project, and others. Performance is moderate with good mobile optimization and SEO practices. Accessibility is basic but functional. Security posture is solid with HTTPS enforced and use of adblock detection, though explicit security headers are not clearly visible in the provided content. No critical vulnerabilities were detected. Privacy compliance is limited based on the provided content, with no explicit privacy or cookie policies found, which is a gap for a site handling extensive user data and tracking. The WHOIS data is missing or unavailable, which is unusual and reduces trust slightly, but the website's content and branding strongly indicate legitimacy. No direct contact emails or phone numbers were found, and no security or incident response policies are publicly visible. Overall, Cleveland.com is a credible and professional local news platform with strong business credibility and technical infrastructure. Enhancements in privacy transparency and security header implementation are recommended to improve compliance and security posture.

W

WRAL

wral.com

64

WRAL.com is a professional local news and weather website serving the Raleigh, North Carolina area. It provides breaking news, weather forecasts, traffic updates, and lottery information, positioning itself as a leading regional media outlet. The site leverages a modern technology stack including Google Analytics, Google Tag Manager, VideoJS for video content, and multiple advertising networks such as PubMatic and Amazon APS. The presence of structured data and social media integration further supports its digital maturity. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though explicit security headers and privacy policies are not clearly visible in the provided content. The absence of WHOIS data is notable but likely due to privacy protection or registry limitations, not detracting significantly from the site's legitimacy. Overall, WRAL.com demonstrates a solid business and technical foundation with room for improvement in privacy transparency and security header implementation.

C

Chicago Reader

chicagoreader.com

60

Chicago Reader is a well-established nonprofit alternative weekly newspaper based in Chicago, providing news, arts, culture, food, music, and event coverage since 1971. The website serves as a digital platform complementing its print edition, targeting Chicago residents and those interested in local cultural content. The business model relies on advertising and donations, with integrated donation processing via Donorbox. Technically, the site is built on WordPress using the Newspack theme, optimized for SEO, mobile responsiveness, and accessibility. It employs modern analytics and advertising technologies including Google Analytics, Facebook Pixel, and Broadstreet Ads. Security posture is solid with HTTPS enforced and standard best practices, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, with minor gaps in privacy and security policy disclosures.

STLtoday.com is the digital presence of the St. Louis Post-Dispatch, operated by Lee Enterprises, a large media company. The website provides comprehensive news coverage, weather, sports, entertainment, and lifestyle content focused on the St. Louis metropolitan area and Missouri. It targets local residents and readers interested in regional news and events, offering subscription-based access alongside advertising revenue streams. The site is well-branded and maintains a consistent professional appearance with a strong social media footprint.

N

New/Mode

newmode.net

66

New/Mode is a technology company specializing in providing an empowerment and community action platform designed to help non-profits, unions, and advocacy groups amplify their voices and launch campaigns efficiently. The platform offers a suite of tools including smart petitions, email outreach, click-to-call, and campaign analytics, positioning itself as a trusted partner for leading campaigners globally. The website is built on HubSpot CMS and integrates modern analytics and marketing technologies, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, New/Mode presents a professional, credible, and secure online presence suitable for its target audience.

D

Discover Magazine

discovermagazine.com

63

Discover Magazine is a well-established science media publication providing accessible and relevant science news, feature articles, and multimedia content. It operates under LabX Media Group and targets a broad audience interested in science, health, environment, and technology. The website offers subscription services, newsletters, and advertising opportunities, positioning itself as a reputable source in the science media sector. Technically, the site uses modern frameworks such as Next.js and React, integrates with major analytics and advertising platforms, and is hosted on a reliable CDN infrastructure. The site is mobile-optimized with good SEO and accessibility features, delivering a professional user experience. Security-wise, the site enforces HTTPS and uses reputable third-party services but lacks some security headers and published security policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. The absence of WHOIS registration data is a concern, reducing trust scores, though the site's content and social media presence support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security disclosures.

S

SOPREMA

soprema.ae

59

SOPREMA is an international manufacturer specializing in innovative waterproofing, insulation, soundproofing, and vegetated solutions for roofing, building envelopes, and civil engineering sectors. The company maintains a strong market presence with subsidiaries in Canada, France, Italy, and other regions, targeting construction professionals and building owners. Their website reflects a professional business model focused on manufacturing and supplying high-quality building materials. Technically, the site is built on WordPress with modern JavaScript frameworks like Vue.js and Axios, supported by analytics and marketing tools such as Google Analytics, Crazy Egg, and HubSpot. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

S

SOPREMA Polska Sp. z o.o.

soprema.pl

49

SOPREMA Polska Sp. z o.o. is a well-established manufacturer and distributor of advanced thermal and waterproofing insulation materials, operating since 1996 as part of the global SOPREMA Group. The company serves the construction sector in Poland with a broad product portfolio including bituminous membranes, synthetic membranes, green roof systems, and construction chemicals. Their market position is strong, supported by a modern production facility near Warsaw and presence in over 90 countries globally. Technically, the website is built on Joomla CMS with modern frontend libraries and integrates Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and provides comprehensive content and navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. WHOIS data is unavailable, which slightly impacts trust but is mitigated by clear business information and contact details on the site. Overall, the website reflects a professional and credible business with good digital maturity.

S

SOPREMA GmbH

soprema.de

72

SOPREMA GmbH is a leading German manufacturer specializing in sealing systems, insulation materials, and sustainable building solutions such as photovoltaic and green roof systems. The company targets construction professionals, architects, and planners, offering a broad portfolio of products and technical services. Their market position is strong within the manufacturing sector, emphasizing innovation and sustainability. The website is built on TYPO3 CMS and incorporates modern web technologies including Bootstrap, jQuery, and Font Awesome, ensuring a responsive and accessible user experience. Hosting is managed via Gandi.net, a reputable provider. Security posture is solid with HTTPS enforced, cookie consent mechanisms in place, and use of analytics tools respecting user privacy. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is professional, trustworthy, and well-optimized for its audience.

S

Soprema

soprema.com.br

48

Soprema is a leading global waterproofing group with a strong presence in Brazil, specializing in manufacturing and distributing waterproofing and construction chemical products. Their website targets construction professionals, applicators, technical experts, and consumers seeking waterproofing solutions. The company emphasizes quality certifications and offers extensive product lines and technical content to support their customers. Technically, the website uses a modern JavaScript stack including jQuery and Google Analytics, hosted on Gandi.net infrastructure. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and secure forms, though some security headers and incident response disclosures are missing. Overall, the website is professional, trustworthy, and compliant with basic privacy and cookie policies. No blocking or WAF mechanisms hinder access.

S

SOPREMA

soprema.com.au

59

SOPREMA is an international manufacturer specializing in innovative waterproofing, insulation, soundproofing, and vegetative solutions for the roofing, building envelope, and civil engineering sectors. The company targets construction professionals and operates primarily in the manufacturing and construction industries with a large-scale business presence in Australia and internationally. The website reflects a professional B2B business model with a focus on product documentation, warranties, and project showcases, supporting its market position as a trusted supplier. Technically, the website is built on WordPress with Elementor and uses modern JavaScript frameworks such as Vue.js and Axios for enhanced user experience. It integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, Crazy Egg, and HubSpot, indicating a mature digital marketing infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and does not provide visible security or incident response policies. No privacy or cookie policies were found, which is a compliance gap. The WHOIS data shows a legitimate domain registration without privacy protection, consistent with a professional business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and incident response disclosures to improve its security posture and regulatory adherence.

M

Middle East Eye

middleeasteye.net

71

Middle East Eye is a professional online news media platform focused on delivering news, opinion, video, and analysis related to the Middle East and surrounding regions. The website demonstrates a strong market position as a regional news outlet with a consistent and professional brand presence. Technically, the site is built on Drupal CMS with modern web technologies including Font Awesome, Google Analytics, Google Tag Manager, and Cookiebot for consent management. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of publicly available WHOIS data and explicit privacy policies slightly reduce trust and compliance confidence. Overall, the site is well-maintained and trustworthy for general audiences interested in Middle East affairs.

S

Street Art Utopia

streetartutopia.com

62

Street Art Utopia is a niche media and blog platform dedicated to street art culture, providing news, artist profiles, thematic coverage, and reviews. Established in 2010, it serves a general audience interested in urban art and graffiti. The website is built on WordPress and hosted on the WordPress.com platform, leveraging popular plugins and themes such as Yoast SEO and Newspaper. It integrates Google Analytics and AdSense for analytics and monetization. While the site demonstrates good content quality, branding consistency, and technical implementation, it lacks explicit privacy and cookie policies, as well as security headers, which are important for compliance and security posture. No contact emails or phone numbers are publicly available, limiting direct communication channels.

O

Optable Technologies Inc.

optable.co

77

Optable Technologies Inc. operates a sophisticated identity management and data collaboration platform designed for the advertising ecosystem, focusing on privacy-first solutions. The company targets publishers, media owners, and ad platforms, enabling them to build and manage identity graphs to optimize advertising revenues. Positioned as a next-generation technology provider, Optable integrates with major ID frameworks and marketplaces to enhance programmatic and direct ad sales. The website reflects a mature digital presence with comprehensive content, professional design, and strong branding consistency. Technically, the site leverages modern web technologies including Webflow CMS, Google Analytics, HubSpot forms, and multilingual support via Weglot, hosted on Webflow's platform with fast performance and excellent mobile optimization. Security posture is solid with HTTPS, SOC 2 certification, cookie consent mechanisms, and a responsible disclosure program, though explicit security headers and incident response contacts could be improved. WHOIS data is privacy protected, which is typical for tech companies, and does not detract from the overall legitimacy supported by business and trust indicators. Overall, the site demonstrates a high level of professionalism, compliance, and technical maturity suitable for its B2B SaaS market niche.

N

National Heritage Institute

zamek-manetin.cz

45

The website represents the official online presence of the Manětín chateau, a Baroque cultural heritage site managed by the National Heritage Institute of the Czech Republic. It provides comprehensive visitor information including tours, opening hours, admission, and contact details, targeting tourists and cultural heritage enthusiasts. The site is well-branded and consistent with government heritage management standards. Technically, the website employs a modern tech stack including jQuery, Leaflet.js for maps, Google Analytics and Tag Manager for analytics, and integrates fonts from Typekit and Google Fonts. The site is mobile optimized, accessible, and performs moderately well, hosted under a reputable registrar. Cookie consent is implemented with granular user controls, reflecting good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy or incident response contact information, and no vulnerability disclosure mechanism is present. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness. The risk assessment is low with no critical issues detected. Strategic recommendations include publishing a security policy, incident response contacts, and a vulnerability disclosure page to enhance transparency and security maturity.

DATA JOBS CZ is a Czech Republic based personnel agency specializing in job placement and recruitment services within the Czech Republic and the broader EU region. The company operates a professionally designed website offering job listings, consulting, and CV submission services targeting job seekers and employers. The business is small-sized, founded in 2017, and maintains a consistent brand presence with partner logos and active social media channels. Technically, the website leverages modern web technologies including Bootstrap 4, jQuery, and Google Analytics, hosted by WEDOS, a Czech hosting provider. The site is mobile optimized and SEO friendly, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security best practices. No signs of WAF or content blocking were detected, allowing full content accessibility. WHOIS data aligns well with the business profile, supporting legitimacy. Overall, the website scores a solid 78 out of 100, reflecting good content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture.

T

TECHNICOAT Bakeware s.r.o.

technicoat-bakeware.com

51

TECHNICOAT Bakeware s.r.o. is a Czech Republic based small manufacturing company specializing in high-quality coated and uncoated bakeware products and related coating services for industrial bakeries. The company emphasizes improving baking efficiency, hygiene, and safety through its non-stick coating technology. The website reflects a professional and consistent brand presence with clear product and service offerings, targeting industrial baking businesses. Technically, the website uses modern JavaScript libraries and Google services with GDPR-compliant cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS and consent mode implemented, but lacks explicit security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration legitimacy and reduces overall trust. The site is free from adult or questionable content and provides clear contact information and business credentials. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from improved transparency on domain registration and enhanced security disclosures.

C

Czech Online System s.r.o.

digitalniurednideska.cz

51

Czech Online System s.r.o. operates the website digitalniurednideska.cz, offering specialized digital official notice boards primarily targeting municipalities and local government offices in the Czech Republic. Their business model focuses on providing outdoor digital signage hardware combined with proprietary content management software, enabling remote and automated display of official documents and local information. The company is small-sized, founded in 2011, and presents a professional and consistent brand image with clear contact and reference information. Technically, the website employs common web technologies including jQuery, Swiper.js, and Google Analytics, with a moderate performance profile and good mobile optimization. The digital signage hardware supports Windows and Android platforms, emphasizing all-in-one outdoor solutions with touch capabilities. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. From a security perspective, while HTTPS is implied, explicit security headers are not detected, and no dedicated security or incident response policies are published. The absence of WHOIS data reduces domain trustworthiness, though the website content and company information appear legitimate and professional. No vulnerabilities or malicious content were identified. Overall, the website scores well in content quality, privacy compliance, and business credibility, but could improve in security posture and transparency. Strategic recommendations include enhancing security headers, publishing security policies, and resolving WHOIS data visibility to strengthen trust and compliance.

C

Czech Online System s.r.o.

digitalnipanely.cz

52

Czech Online System s.r.o. operates the website digitalnipanely.cz, specializing in the sale and rental of digital LED touch panels primarily targeting businesses, hospitality, public institutions, and event organizers in the Czech Republic. The company positions itself as an innovative provider of modern digital signage solutions, offering remote content management software and a variety of panel products. The website reflects a professional and consistent brand image with comprehensive contact information and social media presence, supporting its market credibility. Technically, the website employs modern web technologies including Google Analytics and Google Tag Manager for analytics and marketing, alongside Swiper.js for UI components. The site is mobile-optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details are explicitly identified, and some security headers are missing, suggesting room for technical hardening. From a security perspective, the site enforces HTTPS and uses secure forms with required fields, but lacks explicit security policies or incident response information. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, although the website content and business information appear legitimate and professional. No vulnerabilities or suspicious content were detected. Overall, the website presents a solid business front with good technical and privacy compliance but would benefit from enhanced security policies, WHOIS transparency, and additional trust signals to improve its security posture and domain legitimacy.

B

Budějovický Budvar, n. p.

budweiser-budvar.cz

58

Budějovický Budvar, n. p. is the national brewery of the Czech Republic, with a strong heritage and a significant export presence in over 70 countries. The company produces a variety of beer products, including limited edition collaborations with microbreweries, and offers brewery tours and educational content through its website. The brand is well recognized and maintains consistent, professional digital branding. Technically, the website is built on Webflow with modern JavaScript libraries and integrates Google Analytics and Cookiebot for tracking and compliance. Security posture is solid with HTTPS enforced and age verification implemented to comply with alcohol advertising regulations. However, explicit security headers are not detected, and no incident response contact is provided. WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by its content and external references. Overall, the site is professional, secure, and compliant, targeting adult consumers and partners in the beer industry.

R

RRT s.r.o.

autaslovensky.sk

52

AUTÁSLOVENSKY.sk is a specialized service provider focused on integrating Slovak and Czech language translations into vehicle control systems. With over 17 years of experience and more than 17,500 vehicles served, the company operates primarily in Slovakia and the Czech Republic, offering on-site installation and custom software development for automotive brands. The website reflects a professional and trustworthy business with clear contact channels and customer testimonials. Technically, the site uses modern web technologies including Google Tag Manager, reCAPTCHA v3, and LiveChat, ensuring user interaction and marketing capabilities. Security posture is solid with HTTPS and form protections, though additional HTTP security headers and incident response information could enhance resilience. Overall, the site is well-structured, GDPR compliant, and presents a credible business presence in the automotive localization niche.

P

protea.cz

protea.cz

59

Protea.cz operates as a specialized reseller and support provider for BricsCAD software, a competitive alternative to mainstream 2D and 3D CAD programs. The company targets professionals such as architects, engineers, and designers primarily in the Czech Republic, offering various BricsCAD licenses and related services. Their market position is that of a leading local distributor with a focus on quality service and localized support. Technically, the website is built on the Shoptet e-commerce platform, leveraging modern web technologies including Bootstrap and jQuery, and integrates standard analytics and marketing tools with user consent mechanisms. Security posture is solid with HTTPS enforcement and CSRF protections, though additional security headers could enhance defenses. The absence of WHOIS data is a notable concern but is offset by the professional presentation and clear contact information. Overall, the site demonstrates a mature digital presence suitable for its business model.

DEKSOFT operates as a specialized web portal providing cloud-based computing applications tailored for the construction industry, with a focus on energy and building physics. The company primarily serves professionals in the Czech Republic and Slovakia, offering a subscription licensing model that includes a free trial period. Their product suite includes thermal analysis, acoustics, photovoltaics, and BIM-related tools, positioning them as a regional leader in construction software solutions. The website reflects a professional and consistent brand image with clear business and contact information. Technically, the website employs modern web technologies including Vue.js, Google Tag Manager, Microsoft Clarity, and Facebook Pixel for analytics and marketing. The infrastructure is cloud-based, supporting multi-device access and seamless software updates. Performance and mobile optimization are good, though accessibility features are basic. SEO is adequately addressed with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The use of third-party analytics and marketing scripts is transparent, though monitoring and updating these dependencies is recommended. Overall, the security posture is solid but could be enhanced with formal policies and security headers. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include publishing a formal security policy, incident response contacts, and vulnerability disclosure information to improve transparency and trust. Enhancing accessibility and security headers would further strengthen the site’s security and compliance posture.

Remington is a well-known brand specializing in personal care and grooming products, targeting a general consumer audience through retail and e-commerce channels. The website presents a professional and consistent brand image with a focus on product offerings such as hair care and shaving tools. Technically, the site employs modern frameworks like Bootstrap 4 and integrates multiple third-party analytics and advertising services, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS but lacks visible security headers and privacy compliance indicators, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about registration transparency, impacting trustworthiness. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices to improve compliance and user trust.

Č

Český rozhlas

ceskyrozhlas.cz

68

Český rozhlas is the Czech Republic's public radio broadcaster, offering a comprehensive online portal with news, live radio streaming, podcasts, cultural content, and audiobooks. The website is professionally designed, mobile-optimized, and provides extensive multimedia content targeting the general public interested in news and culture. Technically, the site is built on Drupal 7 with modern web technologies and integrates Google Tag Manager and advertising services. Security posture is good with HTTPS enforced, though some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy policy detected. WHOIS data is missing, which slightly impacts trust but the site’s branding and content strongly indicate legitimacy.