Security Directory

M

MIDOCAR Logistic, s.r.o

dopravomat.cz

49

Dopravomat.cz is a Czech-based platform operated by MIDOCAR Logistic, s.r.o, founded in 2020, specializing in group transportation services. The website enables users to submit transportation requests for groups and receive competitive offers from a network of verified transport providers across the Czech Republic. The business model focuses on transparency, no hidden fees, and payment only after service completion, positioning itself as a trusted intermediary in the transportation sector. The platform targets groups needing various transport sizes, from personal cars to large buses, emphasizing convenience and cost-effectiveness. Technically, the website employs a custom-built infrastructure leveraging modern web technologies including Google Maps API for location autocomplete, jQuery and jQuery UI for UI components, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good navigation and user experience, though some accessibility features are basic. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses secure form inputs but lacks visible security headers and published security policies. There is no cookie consent mechanism, which may impact privacy compliance. No incident response or vulnerability disclosure information is available. The WHOIS data is consistent with the business identity, indicating legitimacy. Overall, the security posture is adequate but could be improved with additional best practices. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security headers, and transparency around security policies would enhance trust and reduce risk. The platform is well-positioned in its niche with a clear value proposition and solid business credibility.

Bohemiasoft s.r.o. operates a Czech-language website offering a suite of integrated online business tools tailored for small and medium entrepreneurs. Their services include online invoicing, email hosting on custom domains, e-commerce solutions, website creation, and digital office integration, positioning them as a comprehensive SaaS provider in the Czech market. The website is professionally designed with clear navigation and good content relevance, targeting entrepreneurs seeking centralized business management solutions. Technically, the site is built on WordPress with modern JavaScript libraries and includes analytics and social media integrations, reflecting a moderate level of digital maturity. Security posture is adequate but could be improved by implementing additional security headers and anti-spam measures on forms. Privacy and terms of service documents are provided, indicating a commitment to compliance, though cookie consent mechanisms are lacking. Overall, the domain registration is consistent with the business claims, showing a long-standing presence since 2008. Strategic recommendations include enhancing security headers, adding bot protection, and improving privacy compliance mechanisms to strengthen trust and security.

B

Bisport

bisport.cz

53

Bisport is a well-established small business specializing in water sports rental services, particularly canoe and raft rentals on the Sázava river in the Czech Republic. The company also offers accommodation, catering, and organizes school and corporate events, positioning itself as a regional leader in outdoor hospitality and tourism. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to families, schools, and outdoor enthusiasts. Technically, the site is built on WordPress, leveraging modern web technologies such as Google Analytics and Tag Manager for tracking, and includes a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers and policies could be improved. Overall, the site is trustworthy, user-friendly, and compliant with privacy regulations, supporting the business's credibility and customer engagement.

D

DRONTE s.r.o.

dronte.cz

45

DRONTE s.r.o. operates a specialized boat rental and water sports service primarily in the Czech Republic, focusing on rivers such as Berounka, Hron, Ohře, Otava, Sázava, Lužnice, Vltava, and Malý Dunaj. The company offers rentals of kayaks, rafts, and canoes, organizes water sports events, and provides accredited courses through its water sports school. The business also engages in boat manufacturing and sales, targeting outdoor enthusiasts and tourists interested in water activities. The website reflects a small but established regional player with a clear focus on water recreation and tourism. Technically, the website employs a moderately modern tech stack including jQuery, Nette Framework, and various UI libraries. It integrates multiple third-party analytics and advertising tools such as Google Analytics, Google Tag Manager, Google Ads, and Seznam Retargeting. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. Cookie consent is implemented, indicating some privacy compliance. No incident response or vulnerability disclosure information is publicly available. The absence of WHOIS data limits domain trust verification, though the website content and business information appear consistent and legitimate. Overall, the security posture is average with room for improvement in headers, policies, and transparency. The overall risk assessment is moderate. The business appears credible and operational, but the lack of WHOIS transparency and limited security policies suggest caution. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, auditing third-party scripts, and improving accessibility and privacy compliance to strengthen trust and security culture.

M

Městská knihovna Písek

knih-pi.cz

40

Městská knihovna Písek is a municipal public library serving as a cultural and educational hub in the city of Písek, Czech Republic. The website provides comprehensive information about library services, including book lending, access to online catalogs, public internet, educational courses, and cultural events such as exhibitions and workshops. The library targets a broad audience including children, students, researchers, and the general public. The site is professionally designed with consistent branding and multilingual support, enhancing accessibility and user experience. Technically, the website is built on WordPress CMS with WPBakery Page Builder and uses common web technologies such as jQuery, Google Fonts, and Owl Carousel for interactive content. Google Analytics and Google Tag Manager are employed for user tracking and analytics. The site is served over HTTPS, ensuring secure communication, but lacks some recommended security headers and a cookie consent mechanism, which are areas for improvement. From a security perspective, the site shows good practices like HTTPS enforcement and no visible sensitive data exposure. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, although the website content and branding strongly indicate a legitimate municipal institution. No signs of adult or inappropriate content were found, making the site safe for general audiences. Overall, the website is a well-maintained digital presence for a public library with room for enhancements in privacy compliance and security headers. The missing WHOIS data should be investigated to confirm domain registration status. Strategic recommendations include implementing security headers, adding cookie consent, publishing a security policy, and verifying domain registration to strengthen trust and compliance.

M

MUDr. Marie Ládová

osteoambulance.cz

39

The website www.osteoambulance.cz represents a small healthcare provider specializing in osteology and densitometry services located in České Budějovice, Czech Republic. The business is led by MUDr. Marie Ládová and offers medical consultations and diagnostic services with an online appointment booking feature. The site content is professional and targeted at local patients seeking specialized bone health care. Technically, the site uses legacy JavaScript libraries such as jQuery 1.8.6 and jQuery UI, with Google Analytics integrated for visitor tracking. The site is accessible over HTTPS but lacks modern security headers and privacy disclosures, which are important for compliance and trust. No WHOIS data was retrievable, which limits domain legitimacy verification but does not necessarily indicate malicious intent given the professional nature of the site content. Overall, the site is functional and informative but would benefit from technical and compliance improvements.

D

Dřevo UM s.r.o.

drevoum.cz

39

Dřevo UM s.r.o. is a traditional Czech manufacturer specializing in wooden doors, euro-windows, staircases, and solid wood furniture. With over 25 years of experience, the company operates two workshops in České Budějovice and Heřmaň, serving both local and national markets. Their product range includes entrance and interior doors, wooden gates, windows, staircases, and custom furniture, complemented by services such as tool sharpening, wood drying, and impregnation. The company targets carpenters, construction firms, and end customers seeking quality wooden products. Technically, the website employs common JavaScript libraries like jQuery and Google Analytics for tracking, but lacks modern CMS or advanced frameworks. The site is moderately optimized for mobile and SEO, with a professional design and clear navigation. Security posture is average, with no visible security headers and unknown SSL status, and no privacy or cookie policies are published, indicating compliance gaps. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website is functional and professional but would benefit from enhanced security and privacy compliance measures.

C

Coweo Technologies s.r.o.

tvpisek.cz

72

Coweo Technologies s.r.o. operates JenPráce.cz, the second largest job and gig advertisement portal in the Czech Republic, serving job seekers and employers with a comprehensive platform for job listings, HR advertising services, and career advice. The company has a solid market position with experience dating back to 2007 and maintains a professional online presence with consistent branding and quality content. The website is well-structured, mobile-optimized, and integrates modern tracking and analytics technologies such as Google Tag Manager, Facebook SDK, and Sentry for error monitoring. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms in place. Security posture is strong with HTTPS enforced and use of security best practices, although explicit security headers could be improved. The absence of WHOIS data reduces domain transparency and trust slightly, but overall business credibility remains high based on available information and certifications like ISO 27001.

E

Elifin s.r.o.

elifin.cz

39

Elifin s.r.o. is a Czech Republic based small professional services firm specializing in comprehensive consulting services including legal, tax, accounting, and financial controlling. Established in 2006, the company offers a broad range of services such as mergers and acquisitions advisory, crisis management, corporate consulting, asset management, and company liquidation. The firm maintains partnerships with recognized organizations like KODAP and the international ETL group, enhancing its market credibility and reach. Technically, the website employs a custom or legacy CMS with JavaScript libraries such as jQuery and carouFredSel for UI components. Google Tag Manager and Google Analytics are used for tracking, although no explicit cookie consent mechanism or privacy policies are present. The site is moderately optimized for mobile and SEO, with a consistent and professional design. From a security perspective, the site uses HTTPS URLs but lacks visible security headers and published security policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. The contact information is clearly presented, supporting business credibility. Overall, the website is safe, professional, and well-aligned with its business purpose. However, it would benefit from enhanced privacy compliance, security best practices, and transparency regarding data protection and incident handling.

Kolem Kamen is a specialized Czech Republic-based business focused on the distribution and representation of premium heating stoves, fireplace inserts, and related products. The website serves as a universal portal for customers, architects, builders, and stove specialists, offering product catalogs, brochures, and links to partner e-shops. The company collaborates with well-known brands such as Spartherm, Brunner, FireTube, and Swedish Classics, positioning itself as a trusted distributor in the energy heating sector. Founded in 2013, the business has a consistent domain registration history and a focused market presence. Technically, the website employs modern frontend technologies including jQuery, Bootstrap, Google Fonts, and Google Analytics. It is hosted behind Cloudflare DNS, suggesting some level of infrastructure robustness. The site is mobile-optimized with good navigation and content relevance, although it lacks a CMS and advanced accessibility features. SEO is basic but functional. From a security perspective, the site uses HTTPS and includes no visible exposed sensitive data or vulnerable forms. However, it lacks explicit security headers and does not provide privacy or cookie policies, which are compliance gaps. Google Analytics is used without a visible consent mechanism, indicating potential GDPR compliance issues. No incident response or security policy information is available. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in policy transparency and security headers would strengthen its security posture and regulatory adherence.

V

Vlasový ateliér BONA FIDE

bona-fide.cz

29

Vlasový ateliér BONA FIDE is a small, local hairdressing and beauty service provider based in České Budějovice, Czech Republic. The website serves primarily as an informational platform showcasing the business, its services such as hairdressing and permanent make-up, and contact details. The business appears to have an established local presence since 2010, supported by consistent domain registration data and social media presence on Facebook and Foursquare. Technically, the website uses common JavaScript libraries including jQuery and Google Analytics for visitor tracking, but lacks modern security implementations such as HTTPS and security headers. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. The site design and content quality are basic, with limited mobile optimization and accessibility features.

N

Netpromotion

muzeum-st.cz

45

Muzeum středního Pootaví Strakonice is a regional cultural institution operating under the South Bohemian Region of the Czech Republic. It manages historical exhibitions primarily located in the Strakonice castle complex and the unique water mill in Hoslovice. The museum offers a variety of cultural and educational services including exhibitions, lectures, virtual tours, and special events. The institution benefits from EU funding and government support, positioning it as a key cultural heritage site in the region. The website reflects a professional and consistent brand image with clear navigation and relevant content for tourists, educators, and the general public. Technically, the website is built on WordPress using Elementor and several Jet plugins, integrating modern web technologies such as Google Tag Manager, Facebook SDK, and YouTube API. The site is mobile optimized and includes SEO best practices. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid with good privacy compliance, including a comprehensive GDPR policy and cookie consent. However, the site lacks explicit security policies and incident response contacts. Analytics and tracking are moderate, using Google Analytics and Facebook Pixel, with appropriate privacy notices. Overall, the website is trustworthy, well-maintained, and suitable for its audience. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.

K

Krmiva Ritta

krmivaritta.cz

41

Krmiva Ritta is a Czech Republic-based small e-commerce retailer specializing in premium pet food and accessories for dogs and cats. The company emphasizes high-quality, super-premium, and bio-quality products, avoiding fillers and additives, and has been operating for approximately 12 years. Their market position is that of a niche retailer focused on quality and customer satisfaction, serving pet owners seeking trusted nutrition and pet care products. The website is built on the PrestaShop platform, utilizing technologies such as jQuery and Google Analytics, and features a moderate performance with good mobile optimization and basic accessibility. Security posture is adequate with HTTPS enforced and secure tokens in forms, but lacks advanced security headers and cookie consent mechanisms, indicating partial GDPR compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the website content and business information appear professional and trustworthy. Overall, the site scores well on business credibility and content quality but has room for improvement in privacy compliance and security best practices.

L

LAD.CZ

pracujnalodi.cz

40

Pracujnalodi.cz is a specialized employment agency focused on providing job placement services for positions on river and ocean cruise ships, primarily in hospitality and service roles. The website targets job seekers interested in maritime employment, offering job listings, CV submission, and updates on seasonal opportunities. The business operates from the Czech Republic and maintains partnerships with recognized cruise and travel companies, enhancing its market credibility. Technically, the website employs a modern tech stack including Bootstrap 4, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. While the site is well-structured and mobile-optimized, it lacks some advanced accessibility features and security headers that could improve its overall robustness. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and obfuscates email addresses to reduce spam. However, it lacks explicit privacy and cookie policies, security headers, and a vulnerability disclosure mechanism, which are important for compliance and trust. The WHOIS data aligns well with the business claims, showing transparency and legitimacy. No adult or questionable content is present, making the site safe for general audiences. Overall, Pracujnalodi.cz presents a professional and credible platform for maritime job seekers but should enhance its privacy compliance and security posture to meet modern standards and increase user trust.

T

TECHNICOAT s.r.o.

technicoat.cz

53

TECHNICOAT s.r.o. is a well-established, family-owned company specializing in high-performance functional coatings based on fluoropolymer technology. Founded in 1999 and headquartered in the Czech Republic, it serves a broad range of industrial sectors including automotive, energy, food, semiconductor, chemical, and general engineering. The company is part of the ADELHELM group and operates subsidiaries such as TECHNICOAT Bakeware s.r.o. Their business model focuses on B2B service provision with a strong emphasis on quality, innovation, and customer responsiveness. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js, with integrated Google Analytics and Consent Mode for privacy compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and published security policies could enhance protection. The absence of WHOIS data due to privacy protection is noted but does not detract significantly from the legitimacy of the business, which is supported by certifications such as ISO 9001:2015 and multiple trust indicators including customer testimonials and industry awards. Overall, the website and business present a credible, professional, and secure digital presence suitable for their industrial clientele. Recommendations include enhancing security headers, publishing a security policy and incident response information, and considering a vulnerability disclosure program to further strengthen trust and compliance.

T

Technische Hochschule Deggendorf / University of West Bohemia in Pilsen

peregrinus.online

65

The Peregrinus Silva Bohemica website represents an academic and cultural tourism project focused on enhancing historical and cultural landscapes along Bavarian and Bohemian forests. It offers a multimedia tourist guide with digital content such as 3D models, augmented reality, and audio-visual materials aimed at pilgrims, hikers, and history enthusiasts. The project is realized by reputable academic institutions including the Technische Hochschule Deggendorf and the University of West Bohemia, supported by EU and Bavarian funding programs. The website serves as an information portal and digital platform for this initiative, targeting tourists and cultural heritage stakeholders.

Š

Šumavaprodukt s.r.o.

regionalnispeciality.cz

42

Šumavaprodukt s.r.o. operates an e-commerce platform specializing in regional specialty food products from the Šumava region and surrounding areas in the Czech Republic. The website offers a variety of local products including meats, dairy, bakery items, beverages, and other traditional foods, targeting consumers interested in authentic regional specialties. The business model focuses on online retail with a curated selection of local producers and suppliers, positioning itself as a niche regional food retailer. Technically, the website is built on the PrestaShop CMS platform, utilizing common web technologies such as jQuery, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. Performance is moderate, and the site uses HTTPS to secure communications. From a security perspective, the site implements basic best practices including HTTPS and cookie consent mechanisms compliant with GDPR. However, no advanced security headers were detected, and there is no visible security policy or incident response contact information. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and business information appear professional and consistent. Overall, the website presents a trustworthy and functional e-commerce platform for regional specialty foods but would benefit from enhanced security measures, clearer contact information, and domain registration transparency to improve trust and compliance.

T

TETRONIK - výrobní družstvo Terezín, družstvo

qtcloud.cz

48

QTCloud is a Czech Republic-based technology company specializing in cloud-based queue management system enhancements. Founded in 2017, it offers modular applications including reservation systems, statistics, central kiosk management, mobile apps, and monitoring tools. The company targets both private sector businesses and public sector offices, with notable clients such as T-Mobile and government agencies. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site uses modern frameworks like Bootstrap and jQuery, hosted likely on Wedos infrastructure, and integrates Google services for analytics and spam protection. Security posture is solid with HTTPS and reCAPTCHA, but lacks published privacy and cookie policies, which impacts compliance. Overall, the site is accessible, well-structured, and trustworthy, though improvements in privacy transparency and security headers are recommended.

G

GRASPO CZ, a.s.

graspo.store

60

GRASPO CZ, a.s. operates the website www.graspo.store as a Czech manufacturer and retailer specializing in diaries, planners, notebooks, and related stationery products. The company emphasizes environmental responsibility, demonstrated by ISO 140001:2004 certification and the use of FSC® certified paper. The website targets general consumers interested in quality stationery and offers both retail and custom manufacturing services. Technically, the site uses modern web technologies including UIkit, jQuery, Google Tag Manager, and analytics tools like Google Analytics and Smartlook, providing a moderate to good performance and mobile optimization. Security posture is strong with HTTPS enforcement, secure forms, and standard security headers, though a dedicated security policy and incident response information are absent. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website presents a professional and trustworthy e-commerce platform with good business credibility and technical maturity.

K

Kloeber UK Ltd

kloeber.co.uk

51

Kloeber UK Ltd is a well-established bespoke glazing solutions provider founded in 2006, specializing in made to measure doors and windows including bifold, sliding, French, and front doors. The company targets self-builders, home improvers, architects, and developers across the UK, offering a comprehensive product range and services such as technical surveys, showroom visits, and participation in exhibitions. Their market position is strengthened by multiple industry certifications and awards, reflecting a strong reputation in the real estate sector. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Facebook Pixel, and VWO for analytics and marketing optimization. The site is hosted with Cloudflare, uses HTTPS with DNSSEC enabled, and implements cookie consent mechanisms, demonstrating a mature digital infrastructure. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS, uses DNSSEC, and manages cookie consent properly. However, explicit security headers like Content-Security-Policy are not detected, and no public security policy or incident response contacts are provided. No vulnerabilities or exposed sensitive data were found, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with GDPR. The business credibility is high, supported by clear contact information, certifications, and consistent branding. Recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen the security and compliance posture.

B

Big Flow Production

bigflowproduction.com

46

Big Flow Production is a small Czech-based company specializing in creating online personal branding solutions including websites, photography, videos, social media content, and online marketing. Their market position is focused on delivering fast, quality, and client-tailored services to individuals and small businesses seeking to enhance their online presence. The website is built on WordPress with Elementor and optimized for SEO and mobile devices, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements such as DNSSEC and security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a positive business credibility profile.

F

FAPI

fapi.cz

63

FAPI is a Czech-based SaaS platform specializing in automated online sales and payment processing for digital products, courses, memberships, and physical goods. The company targets small businesses and freelancers seeking an easy-to-use solution to manage orders, invoicing, payments, and product delivery without programming knowledge. Established in 2012, FAPI has positioned itself as a reliable and professional player in the Czech e-commerce automation market, supported by a well-designed website and positive customer testimonials. Technically, the website is built on WordPress and leverages a modern tech stack including jQuery, Google Tag Manager, multiple analytics and tracking pixels (Google Analytics, Facebook Pixel, TikTok Pixel, Hotjar, Microsoft Clarity), and Vimeo for video content. Hosting is provided via AWS infrastructure, ensuring scalability and reliability. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no suspicious registration patterns. Overall, FAPI demonstrates a mature digital presence with strong business credibility and privacy compliance. The main areas for improvement include enhancing security posture by adding security headers, publishing a security policy, and providing clear incident response contacts to strengthen trust and compliance further.

D

Dave Design

davedesign.cz

43

Dave Design is a Czech-based graphic and web design studio established in 1998, specializing in custom web design, graphic design, corporate identity, SEO, e-shops, and related digital services. The company serves a diverse client base ranging from small businesses to large corporations such as Vítkovice Steel. Their website reflects a professional and consistent brand image with a portfolio showcasing various projects and client references. Technically, the website uses traditional web technologies including HTML, CSS, JavaScript, and jQuery, supplemented by Google Analytics and Tag Manager for tracking. While the site is functional and well-structured, it lacks modern security headers and privacy compliance features such as a privacy policy or cookie consent mechanism. Security posture is moderate with room for improvement, especially in enforcing HTTPS and updating outdated libraries. Overall, the website is trustworthy and credible but would benefit from enhanced security and privacy practices.

O

Obchodní a technologický holding a.s.

otholding.cz

40

Obchodní a technologický holding a.s. is a Czech investment holding company focused on technology and startups. The company provides a portfolio of services including lead management, mobile app development, web notifications, LED panel rentals, and digitalization solutions for municipalities. Their market position is that of an innovator and quality leader in their sectors, targeting businesses and startups primarily in the Czech Republic and Slovakia. The website content is professional and well-structured, supporting their business model and market positioning. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and popular libraries such as jQuery, Swiper.js, and BaguetteBox.js. Google Analytics and Google Tag Manager are used for tracking, but no explicit privacy or cookie policies are present, indicating a gap in privacy compliance. The site shows moderate performance and basic mobile optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, no security headers were detected, and there is no visible incident response or security policy information. The lack of WHOIS data reduces trust and transparency, which is a concern for legitimacy. Overall, the security posture is moderate but could be improved with better privacy compliance and security best practices. The overall risk assessment suggests a generally trustworthy and professional business website with some compliance and transparency gaps. Strategic recommendations include implementing privacy and cookie policies, adding security headers, improving mobile and accessibility features, and enhancing contact and incident response information to strengthen trust and security posture.

A

APPKEE s.r.o.

appkee.sk

55

APPKEE s.r.o. is a technology company specializing in custom mobile application development for iOS and Android platforms, serving a diverse clientele including businesses, municipalities, and retail sectors primarily in Central Europe. The company offers a comprehensive suite of services including app creation, management via their APP manager platform, push notifications, coupon distribution, and advanced features like iBeacon and integrated analytics. Their market position is solidified by over 750 deployed applications and a presence in multiple countries with regional offices. Technically, the website employs modern web technologies and analytics tools, with good mobile optimization and SEO practices. Security posture is generally strong with HTTPS and secure forms, though it lacks some advanced security headers and formal security policies. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, APPKEE demonstrates a professional and trustworthy digital presence aligned with its business objectives.

A

APPKEE s.r.o.

appkee.pl

54

APPKEE s.r.o. is a technology company specializing in custom mobile application development for iOS and Android platforms, targeting businesses and municipalities primarily in Central Europe. The company offers a comprehensive app management platform and premium features such as push notifications, coupons, analytics, and iBeacon technology. Their market position is supported by a portfolio of over 750 apps and multiple regional offices. Technically, the website employs modern analytics and tracking tools, is mobile-optimized, and uses HTTPS with secure forms compliant with GDPR. However, the absence of WHOIS data and explicit security policies slightly impacts trust. Overall, APPKEE demonstrates a solid digital presence with good business credibility and technical maturity.

A

APPKEE s.r.o.

appkee.eu

60

APPKEE s.r.o. is a Czech-based technology company specializing in the development of custom mobile applications for iOS and Android platforms. The company targets a diverse audience including municipalities, businesses, restaurants, hotels, and e-commerce stores, offering a comprehensive app management platform called APP manager. With over 750 mobile applications deployed, APPKEE holds a solid regional market position supported by clear pricing models and premium features such as push notifications, app vouchers, and payment gateway integration. The company is part of the OT Holding group, enhancing its business credibility. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and YouTube APIs, ensuring good SEO and mobile optimization. The site is well-structured with multi-language support and a responsive design. Security posture is strong with HTTPS enforced and secure form handling, though some security headers are missing. Privacy compliance is evident with a comprehensive privacy policy, cookie consent mechanisms, and GDPR notices on data collection forms. Security-wise, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response information suggests room for improvement in transparency and preparedness. The WHOIS data is privacy protected, which is common for small tech firms, but limits domain ownership visibility. Overall, the website and business present a trustworthy and professional front with minor technical and security enhancements recommended. Strategically, APPKEE should focus on implementing security headers, publishing incident response details, and enhancing accessibility to further strengthen trust and compliance. Continued monitoring of third-party scripts and maintaining GDPR compliance will support sustainable growth and risk mitigation.

E

EnvoThemes

envothemes.com

56

EnvoThemes is a specialized provider of free and premium WordPress themes, focusing primarily on WooCommerce and multipurpose themes for businesses and eCommerce stores. Established in 2017, the company offers a variety of themes compatible with popular page builders such as Elementor, Brizy, Visual Composer, and KingComposer. Their market position is that of a niche player catering to WordPress users seeking customizable and fast-loading themes. The website demonstrates a good level of technical maturity, leveraging WordPress 6.6.2, WooCommerce 7.8.0, and modern JavaScript libraries, along with integration of Google Analytics and Tag Manager for marketing insights. Hosting appears to be Czech-based, consistent with the registrant information.

I

IKAR

kniznykompas.sk

44

The website podcast.kniznykompas.sk is a media platform dedicated to podcasts about books and reading, operated by IKAR, the largest Slovak publishing and book distribution company. It offers literary content including book tips, interviews, bestseller rankings, and contests, targeting book readers and podcast listeners. The site integrates with multiple popular podcast platforms, enhancing accessibility and reach. Technically, the site uses a modern tech stack including Google Analytics, Facebook SDK, Adform tracking, and the Yii PHP framework, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and CSRF tokens but lacks important security headers and a published security policy. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

I

IKAR, a.s.

ikar.sk

54

IKAR, a.s. is the largest publishing house in Slovakia, specializing in publishing and wholesale distribution of a wide variety of books including Slovak and international authors. The website reflects a mature digital presence with a professional design, clear navigation, and a broad catalog of books across multiple genres. The company targets a general audience of readers of all ages and maintains active social media channels to engage with customers. Technically, the website employs modern web technologies such as Google Tag Manager, Facebook Pixel, and Google Analytics for marketing and analytics purposes, with optimizations like preloading fonts and images to enhance performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements could be made by implementing security headers and a cookie consent mechanism to enhance privacy compliance. Overall, the website demonstrates a high level of professionalism and trustworthiness, supported by consistent WHOIS data and clear business information.

Z

Knižnica | ziveknihy.sk

ziveknihy.sk

47

The website ziveknihy.sk serves as a Slovak digital literary platform offering book excerpts, audiobooks, author readings, and related multimedia content. It targets Slovak-speaking readers interested in literary content and provides free access to a broad range of books and audiobooks. The business model appears to rely on advertising and partnerships, with a niche market position in Slovakia. Technically, the site is built on Drupal 7 with Bootstrap 3 for responsive design, integrating common web technologies such as jQuery and Google Analytics for tracking. The site demonstrates moderate digital maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks advanced security headers and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is trustworthy and professionally presented but could improve privacy compliance and security hardening.

K

Knihomola

knihomola.sk

44

Knihomola.sk is a Slovak-based online platform dedicated to aggregating quality book reviews from Slovak and Czech bloggers, readers, and reviewers. Established in 2017, it serves a niche audience passionate about literature, offering book discovery, blog hosting, and a widget for embedding book reviews. The website maintains a consistent brand presence and targets readers seeking curated literary content. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Owl Carousel, Google Analytics, and Facebook SDK, hosted on Webglobe servers. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and published security policies. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms domain legitimacy and consistency. Overall, the site is professional, trustworthy, and well-positioned within its niche.

M

Montáže Brož s.r.o.

montazebroz.com

67

Montáže Brož s.r.o. is a well-established company specializing in the installation of technologically advanced racking system solutions, operating globally across Europe, Australia, America, and Canada. Founded in the early 1990s, the company has grown to become a world leader in its niche, providing assembly services for automated storage equipment primarily targeting large distribution centers. Their market position is reinforced by certifications such as ISO 45001 and active engagement in health and safety and research and development initiatives. The website reflects a professional and consistent brand image with comprehensive content tailored to business clients seeking specialized installation services. Technically, the website is built on WordPress using modern plugins like Yoast SEO and WPBakery Page Builder, hosted on Wedos servers. It employs Google Analytics for traffic analysis and Cookiebot alongside Complianz GDPR plugin for privacy compliance. The site is mobile-optimized and SEO-friendly, though performance is moderate and accessibility could be improved. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place, but additional HTTP security headers are absent, representing an area for enhancement. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for maturity in security governance. Privacy compliance is strong, with a clear privacy policy and cookie consent banner, aligning with GDPR requirements. Business credibility is high, supported by clear company information, certifications, and trust signals such as social media presence and professional content. Overall, Montáže Brož presents a trustworthy and professional online presence with a strong business foundation and good technical implementation. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance their digital maturity and risk posture.

R

Remington

remington-europe.com

60

Remington Europe operates as a regional online presence for the established Remington brand, specializing in haircare and personal care appliances for men and women. The website serves as a gateway to multiple country-specific subdomains, reflecting a broad international market reach. The business is positioned as a large retail entity with a long history dating back to 1937 and is part of Spectrum Brands. The site content is minimal but consistent with the brand's identity and product focus. From a technical perspective, the website employs basic technologies including JavaScript and Google Analytics for tracking. The site is served over HTTPS, but lacks advanced security headers and DNSSEC, indicating room for improvement in security hardening. Mobile optimization and accessibility are basic, and SEO practices are minimal but present. The absence of privacy and cookie policies, as well as contact information, limits the site's compliance posture. Security posture is moderate with HTTPS enabled but missing key security headers and DNSSEC. No forms or sensitive data collection points were detected, reducing immediate risk exposure. However, the lack of privacy and cookie policies and absence of GDPR compliance indicators represent compliance gaps. The domain WHOIS data is consistent and trustworthy, with a long registration history and appropriate domain status flags. Overall, the website is functional and legitimate but would benefit from enhanced security configurations, improved privacy compliance, and richer content to increase trust and user engagement.

D

DEK a.s.

atelier-dek.cz

60

DEK a.s. operates a specialized construction services website atelier-dek.cz, offering a broad range of expert services including accredited laboratory testing, project consulting, expert opinions, and energy certifications. The company is well-established with a domain age since 2007 and targets construction professionals and investors primarily in the Czech Republic. The website is built on Drupal CMS with a moderate technical infrastructure including modern analytics and tracking tools. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is evident with cookie consent and a privacy policy page. Overall, the site presents a professional and trustworthy business presence.

B

Bohemiasoft s.r.o.

mepodnikani.cz

51

MéPodnikání.cz is an established Czech online magazine operated by Bohemiasoft s.r.o., providing valuable business information, software recommendations, and marketing insights primarily for entrepreneurs and e-commerce operators. The website leverages WordPress CMS with a modern theme and integrates popular analytics and social media SDKs, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and formal privacy/cookie policies, indicating room for compliance improvement. The domain registration is consistent and legitimate, supporting the business's credibility. Overall, the site serves as a trusted resource within its niche but should enhance privacy and security practices to align with best standards.

B

Bohemiasoft s.r.o.

dropareal.cz

52

Dropareal is a Czech Republic-based e-commerce platform specializing in dropshipping services. It enables entrepreneurs to launch their own online stores without upfront inventory costs by partnering with 33 wholesalers offering over 100,000 products. The platform handles order fulfillment and customer service through wholesalers, allowing users to focus on marketing and sales. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy documentation, including GDPR compliance and cookie consent mechanisms. Technically, Dropareal employs a modern tech stack including Bootstrap, jQuery, Google Fonts, and various third-party analytics and retargeting tools such as Google Analytics, Facebook Ads, and Seznam Retargeting. The site uses HTTPS with good SSL configuration and secure form handling, though it lacks explicit HTTP security headers and a dedicated security policy page. The website performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site demonstrates good practices with encrypted connections and cookie consent but could improve by implementing additional security headers and providing incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms. Business credibility is supported by clear company information, contact details, and legal terms. Overall, Dropareal presents a trustworthy and professional dropshipping platform with solid technical and privacy foundations. Recommendations include enhancing security headers, adding incident response information, and improving accessibility to further strengthen the security posture and user trust.

B

Bohemiasoft s.r.o.

shopareal.cz

51

Shopareal, operated by Bohemiasoft s.r.o., is a specialized e-commerce platform enabling users to embed their products on any website, effectively transforming any site into a functional online store with shopping cart capabilities. The platform targets small to medium-sized e-commerce businesses and website owners seeking to expand their sales channels without building a full e-shop from scratch. The business model is subscription-based SaaS, offering different plans to suit existing e-shop owners or those starting fresh. Technically, the website employs modern web technologies including Bootstrap, jQuery, and popular JavaScript libraries, ensuring a responsive and user-friendly experience. Integration with analytics tools like Google Analytics and Hotjar indicates a mature digital infrastructure focused on user behavior insights. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, the absence of security headers and lack of explicit incident response or vulnerability disclosure policies suggest areas for improvement. The missing WHOIS data for the domain is a notable concern, impacting domain trustworthiness and legitimacy verification. Overall, Shopareal presents a professional and functional e-commerce solution with good privacy compliance and user experience. Strategic enhancements in security practices and domain registration transparency would further strengthen its market position and trustworthiness.

P

PANKREA s.r.o.

contpro.eu

52

CONT Proficontainers, operated by PANKREA s.r.o., is a Czech-based company specializing in manufacturing, renting, and selling modular containers and units for business use. Their offerings include residential, sanitary, storage, and technological containers, serving both individual entrepreneurs and large corporations. The website demonstrates a solid market position with references to notable clients such as Škoda and ArcelorMittal. The business model focuses on providing tailored container solutions, including self-storage services, with a clear emphasis on meeting diverse customer needs. Technically, the website employs a moderate technology stack including jQuery, NivoSlider, Google Tag Manager, and Google Analytics, hosted on the Estofan CMS platform. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements, although explicit privacy and security policies are limited. From a security perspective, the site uses HTTPS and standard Google tracking tools but lacks visible security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to EURid privacy policies, but the domain usage aligns with the business claims. Overall, the security posture is moderate with room for improvement in headers, policy transparency, and mobile optimization. The overall risk assessment indicates a legitimate, small business website with moderate technical and security maturity. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, improving mobile responsiveness, and conducting regular security audits to strengthen trust and compliance.

C

CNC-INAXES s.r.o.

cnc-inaxes.cz

51

CNC-INAXES s.r.o. is a Czech Republic based company specializing in the sale and servicing of CNC machining equipment since 2006. The company offers a range of CNC machinery including vertical and horizontal machining centers, lathes, and special machines under its own INAXES brand and represents selected manufacturers in the Czech and Slovak markets. Their target audience includes industrial manufacturers and businesses requiring CNC machining solutions. Technically, the website is built on the Estofan CMS platform, uses modern JavaScript libraries like jQuery and Nivo Slider, and integrates Google Tag Manager and analytics services. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms but could be improved by adding security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a professional and trustworthy digital presence aligned with the company's business model and market position.

R

RRT s.r.o.

autacesky.cz

51

AUTAČESKY.cz is a specialized service provider based in the Czech Republic offering Czech language localization for automotive systems. The company serves a niche market of drivers who own foreign cars and want their vehicle systems translated into Czech. With over 17,500 customers served and 17 years of experience claimed, the business operates primarily in the transportation sector, providing on-site installation services across Czech regions. The website is professionally designed, featuring customer testimonials, social media integration, and comprehensive contact options including phone, email, and forms protected by Google reCAPTCHA. Technically, the website employs modern analytics and marketing tools such as Google Tag Manager, Google Analytics, and Elfsight widgets. It uses HTTPS with good SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, some security best practices like security headers are not evident, and no explicit security or incident response policies are published. The WHOIS data for the domain is missing, which reduces trust in domain registration legitimacy but is partially offset by the presence of verifiable business information on the site. The security posture is solid with encrypted connections and spam protection on forms, but could be improved by adding security headers and formalizing security policies. Privacy compliance is basic but functional, with cookie consent and a privacy policy page. Overall, the website is trustworthy, user-friendly, and well-targeted to its audience, though domain registration transparency should be improved to enhance credibility.

O

OXIT s.r.o.

oxit.cz

57

OXIT s.r.o. is a Czech Republic-based small IT services company specializing in comprehensive IT network management, web development, intranet systems, and hardware/software sales. The company holds multiple partner certifications including Microsoft, Eset, Lenovo, and Dell, indicating a strong market position within the local IT service sector. Their website demonstrates a professional and content-rich presence with detailed client references and clear contact information. Technically, the site uses modern frameworks such as PHP with Nette, Bootstrap for responsive design, and integrates Google Analytics and Tag Manager for tracking, complemented by a cookie consent mechanism. Security posture is generally good with HTTPS and reCAPTCHA on forms, though the absence of security headers and a privacy policy page are notable gaps. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the positive business indicators. Overall, the website is well-structured, secure, and trustworthy for its business domain.

Pošumavská odpadová, s.r.o. is a regional waste management company operating primarily in the Czech Republic, serving over 48 municipalities and more than 53,000 residents. The company provides comprehensive waste services including mixed municipal waste, sorted waste, hazardous waste, bulk waste, and bio waste management. They operate multiple collection yards across several towns including Klatovy, Sušice, Kašperské Hory, and Kolinec. The website reflects a regional service provider with a focus on public and municipal waste management needs. Technically, the website uses legacy HTML with windows-1250 charset and includes common JavaScript libraries such as jQuery and Google Analytics for tracking. The site lacks modern CMS indicators and advanced frameworks, suggesting a basic but functional technical infrastructure. Performance and mobile optimization are moderate to basic, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and includes Google site verification, but lacks visible security headers and privacy or cookie policies, indicating gaps in compliance and security best practices. No WHOIS data is available, which reduces transparency and trustworthiness. The site does not appear to be blocked or protected by a WAF, and no forms collecting sensitive data are present. Overall, the website is functional and provides relevant business information but requires improvements in privacy compliance, security posture, and technical modernization to enhance trust and user experience.

J

Jihočeská centrála cestovního ruchu

zlatoustezkou.cz

40

The website 'Zlatá stezka' is a regional tourism promotion platform managed by Jihočeská centrála cestovního ruchu, focusing on the historical Golden Trail in the Czech Republic. It provides comprehensive information about the trail, including route details, attractions, maps, and multimedia content, targeting tourists and outdoor enthusiasts interested in cultural and natural heritage. The business operates as a small non-profit entity promoting regional tourism. Technically, the site is built on WordPress with common libraries such as jQuery, Google Analytics, Facebook Pixel, and OpenLayers for mapping. The site is moderately optimized for performance and mobile use, with good SEO practices implemented via Yoast SEO. Security posture is adequate with HTTPS enforced and some security plugins in use, but lacks important security headers and formal privacy and cookie policies, which are compliance gaps. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. The domain registration data is consistent and supports the legitimacy of the site. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

P

Postřelí – Objevte krásy barokní krajiny, kde lišky dávají dobrou noc

postreli.cz

56

The website www.postreli.cz serves as a regional tourism portal focused on the Postřelí area in the Czech Republic. It provides visitors with information about local attractions, events, trips, and local products, aiming to promote tourism and cultural heritage in the region. The site is built on WordPress using Elementor and Events Calendar Pro, indicating a modern and maintainable technical infrastructure. Google Analytics and Google Tag Manager are integrated for visitor tracking and analytics. Security posture is adequate with HTTPS enabled, but lacks security headers and formal privacy or cookie policies, which are recommended for compliance and trust. The absence of WHOIS data suggests domain privacy protection, which is reasonable for this type of website. Overall, the site is professional, content-rich, and accessible, but could improve in privacy compliance and security best practices.

I

IAB Canada

iabcanada.com

65

IAB Canada is a well-established non-profit trade association founded in 1997, serving as the authoritative voice for the Canadian digital marketing and advertising industry. The organization offers a comprehensive suite of services including education, certification, research, policy advocacy, and networking opportunities, positioning itself as a key industry leader. The website reflects a professional and consistent brand image, targeting industry professionals and stakeholders across Canada. Technically, the website is built on a mature WordPress and WooCommerce platform, hosted by Bluehost and utilizing Cloudflare DNS services. It employs modern web technologies such as Google Tag Manager, Google Analytics, and Axeptio for cookie consent, ensuring a good level of digital maturity and compliance. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms. However, DNSSEC is not enabled, and there is no publicly visible security policy or incident response contact. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture with room for improvement in transparency and DNS security. Overall, the website presents a low-risk profile with strong business credibility and compliance adherence. Strategic recommendations include enabling DNSSEC, publishing a formal security policy and incident response contacts, implementing a security.txt file, and enhancing HTTP security headers to further strengthen security and trust.

C

Canadian Marketing Association

thecma.ca

67

The Canadian Marketing Association (CMA) is a well-established professional association founded in 2014, serving as the leading voice and resource hub for marketing professionals across Canada. The organization offers a broad range of services including membership, professional development courses, certifications such as the Chartered Marketer designation, advocacy initiatives, and industry events. The CMA positions itself as a catalyst for marketing excellence and business success in Canada, supported by major corporate sponsors and a strong digital presence. The website content is rich with educational resources, event information, and community engagement opportunities targeted at marketing professionals and students.

The A2C (Association des Agences de Communication Créative) is a well-established Quebec-based association founded in 1988, representing over 100 creative communication agencies. The organization focuses on promoting excellence, advocacy, and providing resources and events to its members, who collectively generate a significant portion of the industry's revenue in Quebec. The website serves as an information hub for agencies and clients, offering directories, guidance on agency selection, and industry news. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various analytics and consent management tools. The site is mobile-optimized and SEO-friendly, with good content quality and consistent branding. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. WHOIS data shows privacy protection typical for such organizations, with no suspicious indicators. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

S

SOPREMA Group

soprema-international.com

55

SOPREMA Group is a globally recognized leader in waterproofing, roofing, and insulation solutions, with a history dating back to 1908. The company offers a broad range of products and services targeting construction professionals and industries focused on energy efficiency and sustainable building practices. Their market position is strong, supported by extensive references, certifications, and a wide international presence through subsidiaries. Technically, the website demonstrates a mature digital infrastructure with modern JavaScript libraries, responsive design, and integrated analytics, reflecting a good level of digital maturity. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data for the domain suggests a need for further verification of domain registration details. Strategic recommendations include enhancing security headers, improving incident response visibility, and verifying domain registration transparency.