Security Directory

Nanxia is a French software development agency specializing in creating customized software solutions and digital platforms for various sectors including event management, construction project tracking, energy optimization, and artisan web services. The website showcases multiple partner projects and platforms, indicating a diversified portfolio and a focus on B2B clients. The company positions itself as a specialized agency delivering tailored software products to professional audiences. Technically, the website employs modern frontend technologies such as Bootstrap 4.3.1 and jQuery 3.3.1, with Google Analytics integrated for visitor tracking. The site is mobile responsive and well-structured, though it lacks advanced accessibility features and explicit privacy or cookie policies. The absence of security headers and WHOIS data reduces the overall security posture and trustworthiness. From a security perspective, the site uses HTTPS (implied by URL), but no explicit security headers were detected. There are no visible forms collecting sensitive data, reducing immediate risk, but the lack of privacy and cookie consent mechanisms is a compliance gap. The WHOIS query returned no registration data, which is unusual and warrants further investigation to confirm domain legitimacy. Overall, Nanxia's website is professional and business-focused with good content quality and technical implementation. However, improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and security posture.

O

OpenSolution.org

opensolution.org

42

OpenSolution.org is a small technology company specializing in providing free and commercial PHP-based content management and shopping cart systems, targeting webmasters and small to medium businesses. The company has a long-standing presence since 2004 and supports a user base of over 32,000 websites. Their business model includes software distribution, professional extensions, and partnerships with web design companies. Technically, the website uses a PHP backend with jQuery and Google Analytics for tracking. The site is moderately optimized for mobile and SEO, with a clean and professional design. Security posture is moderate; while HTTPS usage is assumed, no advanced security headers or explicit security policies are present. Privacy compliance is basic, with cookie notices but no consent mechanism and a basic privacy policy. Overall, the website is trustworthy and professional but could improve in security and privacy compliance to enhance user trust and regulatory adherence.

S

SelectSoftware Reviews

selectsoftwarereviews.com

60

SelectSoftware Reviews is a specialized platform dedicated to assisting HR and recruiting teams in identifying and purchasing the best HR and recruiting software through expert research and detailed reviews. The company, legally known as STRAZZULLA, LLC, operates primarily in the technology sector with a focus on B2B software solutions. Founded in 2018 and based in Cambridge, Massachusetts, the business maintains a professional online presence with consistent branding and active social media channels. Their website is designed to provide clear, relevant content tailored to HR professionals and recruiters seeking software solutions.

A

ALKODRINK-CB, s.r.o.

alkodrink.cz

45

AlkoDrink is a small Czech Republic-based beverage wholesaler and retailer specializing in alcoholic and non-alcoholic drinks, including draft beer, rum, whisky, and other spirits. The company also provides technical services related to beverage dispensing and produces dispensing gases under the DrinkGas brand. The website targets local Czech customers, including gastro businesses and private event organizers. The business maintains a moderate market position with a focus on quality product selection and service. Technically, the website uses a modern JavaScript stack with libraries such as jQuery, Slick Carousel, and Google Analytics for tracking. The site is mobile-optimized and includes a cookie consent mechanism, indicating basic privacy compliance. Security posture is adequate with HTTPS and reCAPTCHA on forms, but lacks advanced security headers and formal security policies. WHOIS data is missing, which reduces domain trustworthiness, but the website content and contact information appear legitimate. Overall, the site is functional, professional, and serves its business purpose well.

VENI VIDI VICI is a charitable project based in the Czech Republic focused on supporting people with serious long-term illnesses, specifically ALS (amyotrophic lateral sclerosis) in its current phase. The project is a collaboration of several microbreweries and a security agency (ALI 21, s.r.o.) as the general partner. It raises funds through the sale of special beer editions and public donations, targeting beer enthusiasts and charity supporters. The project is relatively new, with the domain registered in late 2024, aligning with the project's launch timeline. Technically, the website uses jQuery and Google Analytics, hosted on WEDOS servers, and shows moderate performance and good mobile optimization. However, it lacks advanced security headers and published privacy or cookie policies, which are compliance gaps. The site is well-branded and professionally designed with clear navigation and relevant content. Security-wise, the site uses HTTPS and Google Analytics but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Overall, the site demonstrates moderate security maturity but requires improvements in privacy compliance and security best practices. The overall risk is moderate, with recommendations to implement privacy and cookie policies, add security headers, and provide incident response information to enhance trust and compliance.

S

Svatby v zahradě

svatbyvzahrade.cz

44

Svatby v Zahradě is a small event venue business located in Plzeň, Czech Republic, specializing in outdoor weddings, engagements, photo shoots, and various celebrations in a meditation garden setting. The website is professionally designed using WordPress and Elementor, featuring multimedia content such as Vimeo videos and Google Maps integration. The technical infrastructure is modern and includes security measures like HTTPS and Google reCAPTCHA on the contact form. However, the site lacks visible privacy and cookie policies, which are important for GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site presents a trustworthy and user-friendly experience suitable for its target audience.

P

PROSTĚ NA KOLECH - pojízdný bar

prostenakolech.cz

39

Prostě na kolech is a small hospitality business based in the Czech Republic offering a unique mobile bar rental service. They have transformed a horse trailer into a portable bar suitable for events such as weddings, celebrations, and corporate parties. Their service includes bar rental, optional bar staff, decorations, and delivery within a specified radius. The website is professionally designed with clear navigation and good content quality, targeting event organizers and individuals seeking a stylish bar solution for their events. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and various JavaScript libraries for UI effects and analytics. The site is mobile optimized and includes Google Analytics for visitor tracking. However, it lacks privacy and cookie policies and does not implement a cookie consent mechanism, which is a compliance gap. No forms are present, reducing data collection risks. From a security perspective, the site uses HTTPS but lacks visible security headers and vulnerability disclosures. The absence of WHOIS data for the domain is a significant concern, impacting trust and legitimacy assessments. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website presents a professional and functional online presence for a niche hospitality service but requires improvements in privacy compliance, security headers, and domain transparency to enhance trust and regulatory adherence.

O

Ola Kala

olakala.cz

43

Ola Kala is a Prague-based culinary school specializing in cooking and baking courses that cover traditional Czech and international cuisines. Established since 2007, it offers hands-on educational experiences led by gastronomy experts in a welcoming studio environment. The business targets cooking enthusiasts and hobby chefs seeking to improve their culinary skills through diverse course offerings, catering, and event services. Technically, the website employs a custom CMS with a moderate tech stack including jQuery, Google Analytics, and reCAPTCHA, ensuring basic security and user tracking. Security posture is solid with HTTPS and CAPTCHA protections, though improvements in security headers and updated libraries are recommended. Privacy compliance is partially addressed with cookie consent but lacks a dedicated privacy policy page. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

C

CZECH DECO TEAM, spolek

czechdecoteam.cz

56

CZECH DECO TEAM is a well-established non-profit organization founded in 2009, serving as a collaborative platform for architects, designers, construction firms, and interior suppliers primarily in the Czech Republic. The website offers extensive inspiration, professional contacts, and services related to interior design, reconstruction, and building projects. It holds a strong market position with a large network of professionals and a comprehensive portfolio of realized projects. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security measures include HTTPS, reCAPTCHA v3 on forms, and a robust cookie consent mechanism compliant with GDPR. However, some security headers could be improved. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

K

KODAP

kodap.eu

42

KODAP is a professional services firm specializing in tax advisory, accounting, payroll, legal services, and audits primarily serving enterprises and entrepreneurs in the Czech Republic and international markets. The company holds a strong market position, evidenced by its award as Tax Advisory Firm of the Year 2024 and memberships in multiple professional chambers and the ETL Global network. Their business model focuses on comprehensive, tailored services leveraging modern technologies to enhance client experience and operational efficiency. Technically, the website is built on WordPress with modern JavaScript libraries and SEO plugins, ensuring good performance and mobile optimization. The presence of multilingual support and cookie consent mechanisms indicates a mature digital infrastructure. Analytics and marketing tools are used moderately with privacy considerations. From a security perspective, the site enforces HTTPS and uses reCAPTCHA and cookie consent scripts, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or suspicious patterns were detected, and WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional, trustworthy, and well-structured, though improvements in privacy policy publication and security documentation are recommended to enhance compliance and user trust.

G

Ghost Note Agency

ghostnoteagency.com

57

Ghost Note Agency is a small, Black-owned creative agency specializing in branding, design, and strategy with a focus on cross-cultural and diverse storytelling. The company operates primarily in the United States with offices in New York and Los Angeles. Their website reflects a professional and modern design, built on WordPress with integration of popular libraries such as Font Awesome and Google Analytics. While the technical infrastructure is adequate with HTTPS enabled and cookie consent implemented, there is a lack of comprehensive privacy and security policies, and no visible contact information, which may impact user trust and compliance. The absence of WHOIS data for the domain raises questions about domain registration legitimacy, warranting further investigation.

N

NOVOdesign.cz – Hedvika Novotná

novodesign.cz

55

NOVOdesign.cz, led by Hedvika Novotná, is a small Czech interior design business specializing in turnkey interior design and realization services for both residential and commercial clients. The company also offers interior design courses and targets investors interested in short-term rental properties. The website is professionally designed, featuring modern technologies such as A-Frame for 3D visualization, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes. Privacy and cookie policies are implemented with GDPR compliance, enhancing user trust. Security posture is solid with HTTPS enforced, though security headers are absent and could be improved. Overall, the website reflects a mature and credible business with a clear market niche.

G

GLDN Studio

gldn.studio

57

GLDN Studio is a small creative studio operating an e-commerce platform, likely focused on digital or artistic collections, as indicated by references to a 'solana' category. The website is built on the Webflow platform and integrates modern payment solutions such as Stripe and PayPal, supporting a professional online shopping experience. The site includes tracking and marketing tools like Google Analytics and Pinterest Tag, indicating a moderate level of digital marketing maturity. Technically, the website uses a modern tech stack with Webflow CMS, jQuery, and Google Fonts, hosted on Webflow's CDN infrastructure. The site is mobile optimized and shows good design and navigation clarity. However, there is room for improvement in accessibility and SEO optimization. Security posture is decent with HTTPS and reCAPTCHA usage, but lacks visible security headers and explicit privacy or cookie policies. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data in the HTML content. The domain WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were detected. However, the absence of contact information and privacy compliance documentation reduces trust and compliance scores. Overall, GLDN Studio presents as a legitimate small e-commerce creative business with a solid technical foundation but needs to enhance privacy compliance and contact transparency to improve trust and security posture.

A

A.I.S. s.r.o.

ais.sk

54

A.I.S. s.r.o. is a Slovakian IT service provider established in 1999, specializing in computer network management, server administration, computer servicing, electronic security, and web development. The company targets businesses and organizations in need of comprehensive IT infrastructure and web solutions. Their website reflects a broad portfolio of services including hardware supply, VPN, firewall protection, and SGI hardware representation. Technically, the website uses standard HTML, CSS, and JavaScript with Google Analytics for tracking and a simple image gallery script. The site is accessible and moderately optimized but lacks advanced mobile responsiveness and accessibility features. Security posture is moderate; HTTPS is implied but no security headers or incident response contacts are published. Privacy compliance is partial, with a cookie consent banner present but no privacy policy or terms of service. Overall, the website is professional but could improve in compliance and security transparency.

Půjčovna lodí Samba s.r.o. operates a specialized water sports equipment rental service focusing on canoe, raft, and kayak rentals across several Czech rivers including Sázava, Otava, Lužnice, Morava, and Ohře. The company targets water sports enthusiasts, families, schools, and corporate groups, offering additional services such as baggage transport and theft insurance. The website is well-structured, professionally designed, and provides clear contact information and service descriptions, positioning the company as a trusted regional provider in the water sports rental market. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and retargeting scripts from Seznam, with responsive design and embedded widgets for real-time river conditions. While the site uses HTTPS and cookie consent mechanisms, it lacks explicit security headers and a formal security policy page, which could be improved to enhance security posture. Security-wise, the site shows good practices such as encrypted connections and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, though the website content and contact details appear authentic and professional. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and transparency around vulnerability disclosure would further strengthen trust and security posture.

D

Dekmetal

prevetravanefasady.sk

53

Dekmetal is a Slovak company specializing in custom ventilated metal facades tailored to customer requirements. They provide comprehensive services including material selection, project preparation, realization, and final delivery. The company emphasizes design consultancy, technical support, and certification provision, positioning itself as a reliable and aesthetic facade solutions provider in the Slovak market. The website is built on WordPress with Elementor and Yoast SEO, indicating a modern digital infrastructure. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks explicit privacy and cookie policies, which are compliance gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

V

Visit Rokycansko

visitrokycansko.cz

46

Visit Rokycansko is a regional tourism website dedicated to promoting the Rokycansko area in the Czech Republic. It offers visitors information on trips, cultural sites, events, and interactive guides, targeting tourists interested in nature, history, and local culture. The website is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. It uses HTTPS and integrates Google Analytics and Facebook Pixel for visitor tracking. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. No direct contact information or security incident channels are provided, limiting transparency and trust. Overall, the site is professionally designed and content-rich but would benefit from improved privacy compliance and clearer business contact details.

G

Gorila.sk online kníhkupectvo - knihy, filmy, hudba, hry a Bazár kníh za super ceny

gorila.sk

54

Gorila.sk is an established Slovak online retail bookstore offering a wide range of products including books, films, music, games, and a book bazaar. The website targets general consumers in Slovakia with a focus on competitive pricing, secure shopping, and fast delivery. The site demonstrates a moderate level of digital maturity with the use of modern tracking and analytics tools such as Google Analytics, Cookiebot for consent management, and Algopine for event tracking. The technical infrastructure includes HTTPS with a valid SSL certificate and integration of third-party services for enhanced user experience and marketing. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit security policies. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service pages in the provided content. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security documentation.

D

Destinační společnost Píseckem, s.r.o.

piseckem.cz

45

Destinační společnost Píseckem, s.r.o. operates a comprehensive regional tourism portal for the South Bohemian region, focusing on promoting cultural, natural, and family-friendly attractions. The website serves as a key information hub for tourists, offering details on events, museums, nature, and activities, supported by local municipalities and regional grants. The business model centers on destination marketing and tourism promotion with strong local government partnerships. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, Select2, and Fancybox, with integrated analytics via Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Cookie consent mechanisms are implemented, reflecting attention to privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks visible security headers, which could be improved. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern for domain transparency and trustworthiness, though the website content and local government backing mitigate this risk. Overall, the website is a well-structured, professional tourism portal with good content quality and technical implementation. Strategic improvements in domain registration transparency, security headers, and explicit privacy policy publication would enhance trust and compliance.

S

Slides, Inc.

slides.com

69

Slides.com is a mature and established online platform specializing in creating, presenting, and sharing modern presentations. With a domain age dating back to 1994 and over 2 million users, it holds a strong market position in the technology sector, offering a freemium SaaS model with advanced AI-powered features and team collaboration tools. The platform targets professionals, teams, developers, and educators seeking efficient and innovative presentation solutions. Technically, the website leverages modern web standards, Google Fonts, and Google Analytics, hosted on AWS infrastructure, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and locked domain status, though DNSSEC is not enabled and no explicit security certifications or incident response contacts are published. Privacy compliance is well addressed with comprehensive policies and GDPR indicators. Overall, Slides.com demonstrates high professionalism, trustworthiness, and technical maturity, making it a reliable service for its users.

D

DIXI, výroba plastových obalů a.s.

dixi.cz

47

DIXI, výroba plastových obalů a.s. is a Czech manufacturing company specializing in the production of plastic packaging including bottles, canisters, and containers. With over 30 years of market presence, the company offers both stock products and custom manufacturing solutions, supported by in-house tooling and design capabilities. The website reflects a medium-sized enterprise with a strong focus on quality and customer customization, supported by ISO 9001 and HACCP certifications. Technically, the website uses a modern CMS (Animato), integrates Google Analytics and Tag Manager for tracking, and employs common JavaScript libraries such as jQuery and Photoswipe. The site is mobile-optimized and provides clear navigation and professional content. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response information. WHOIS data is unavailable, which impacts trustworthiness and requires further verification. Overall, the website is professional, content-rich, and compliant with privacy regulations, serving industrial and commercial clients in the manufacturing sector.

L

Linia s.r.o.

linia.cz

56

Linia s.r.o. operates a professional e-commerce website specializing in women's and men's underwear, lingerie, and related apparel. The company emphasizes quality and comfort with a long-standing Czech tradition since 1993. The website targets general adult consumers primarily in the Czech Republic and Slovakia, offering both online sales and physical retail stores. Key services include product sales, customer support, gift vouchers, and detailed size guides. The brand maintains a consistent and professional online presence with good content quality and clear navigation.

F

FilmGame

film-game.cz

60

FilmGame is a Czech-based e-commerce retailer specializing in physical media such as Blu-ray, DVD, 4K UHD films, and gaming products including consoles and games. The website targets Czech-speaking consumers interested in movies and gaming, offering a broad catalog with loyalty programs and promotional campaigns. The platform demonstrates a mature digital presence with structured data, SEO optimization, and integration of marketing and analytics tools such as Google Analytics and Facebook Pixel, managed via Google Tag Manager. Despite the absence of WHOIS data, the site shows strong trust indicators including verified customer reviews and domain verification by Google and Facebook. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, FilmGame presents a professional and trustworthy online retail experience with moderate technical performance and good privacy compliance.

P

POP Tábor-JC, s.r.o.

asoto.cz

58

Asoto.cz is a Czech Republic based e-commerce retailer specializing in branded workwear and footwear, serving professionals and demanding customers. The company has a long-standing market presence since 1997 and offers a wide range of products including work shoes, clothing, and outdoor gear. The website is professionally designed with good content quality and clear navigation, supporting multiple country versions and languages. Technically, the site uses modern JavaScript libraries, Google Analytics, and live chat services, running on the eWinShop CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers could be improved. The absence of WHOIS data reduces transparency but the site shows strong trust signals such as verified reviews and clear contact information. Overall, the site is a credible and professional retail platform with moderate to good technical maturity and compliance.

A

ABCtech s.r.o.

abctech.cz

57

ABCtech s.r.o. is a well-established Czech company specializing in computing technology and electronics, operating since 2011. The company offers a broad range of products including batteries, chargers, installation materials, photovoltaic solutions, IoT devices, security cameras, and power converters. Their market position is solid within the regional technology and energy sectors, serving both business and individual customers through a professional e-commerce platform complemented by a physical store. The website reflects a mature digital presence with multilingual support and comprehensive product information. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Tag Manager, Google Analytics, Microsoft Clarity, and Facebook Pixel for analytics and marketing. The platform appears to be custom-built with ASP pages and includes cookie consent mechanisms compliant with GDPR. Performance and mobile optimization are good, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security policy documentation and advanced HTTP security headers. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the business claims, enhancing trustworthiness. Overall, the website presents a professional, trustworthy, and user-friendly experience with good compliance to privacy regulations. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen the security posture and user trust.

M

Město Police nad Metují – organizační složka Pellyho domy – Centrum kultury, vzdělávání a sportu

policko.cz

56

The website www.policko.cz serves as a comprehensive tourism and cultural information portal for the Police nad Metují region in the Czech Republic. It is operated by a local government-affiliated cultural institution, providing visitors and residents with event calendars, accommodation options, gastronomy guides, and historical and recreational information. The site is well-structured and targets tourists and local community members interested in cultural and leisure activities. Technically, the site employs modern web technologies including UIkit framework and Google Analytics, ensuring a responsive and user-friendly experience. However, some areas such as cookie consent and security headers could be improved to enhance compliance and security. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of WHOIS data for the domain raises some concerns about domain registration transparency. Overall, the site is professional, trustworthy, and serves its informational purpose effectively.

O

Obecní dům, a.s.

obecnidum.cz

44

Obecní dům, a.s. operates a prominent cultural venue located in the center of Prague, specializing in hosting concerts, exhibitions, and renting halls for various events. The website reflects a well-established presence with a focus on classical music and cultural programming, targeting both local and international visitors. The business model centers on event hosting and venue rental, positioning itself as a key player in Prague's hospitality and cultural sector. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes SEO optimizations and mobile responsiveness. Security posture is solid with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, though some security policy documentation and incident response details are absent. The absence of WHOIS registrant data due to privacy protection slightly impacts transparency but does not detract from the overall legitimacy and professionalism of the site. Strategic recommendations include enhancing contact transparency, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

A

AOMU.cz

aomu.cz

66

AOMU.cz is a Czech Republic-based small e-commerce business specializing in wellness products, specifically essential oil inhalation sticks. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Google Tag Manager, Hotjar, and various Shopify apps for enhanced user experience and marketing. The business targets Czech-speaking customers, focusing on natural health and vitality enhancement products. The domain was registered in 2022, consistent with a new market entrant in the wellness sector. Technically, the website demonstrates a solid digital infrastructure with HTTPS enforced and multiple third-party integrations for analytics, marketing, and customer engagement. The site is mobile-optimized and shows good SEO practices, although accessibility features are basic. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and a published privacy policy or terms of service, which are important for compliance and trust. From a security perspective, the site does not show signs of WAF or content blocking, and no vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of explicit privacy and security policies, as well as contact information for incident response, represents areas for improvement. The WHOIS data aligns well with the website's business claims, showing a consistent and legitimate registration. Overall, AOMU.cz presents as a legitimate, small-scale e-commerce business with a good technical foundation but with room to enhance privacy compliance and security transparency to build greater customer trust and regulatory adherence.

L

Lentiamo

vasecocky.cz

68

Lentiamo.cz is a professional e-commerce retailer specializing in contact lenses, eyewear, and related accessories, targeting primarily the Czech market and other European countries. The website offers a broad product range including daily, monthly, toric, and multifocal lenses, supported by a well-structured navigation and multi-language support. The presence of trust signals such as Heureka Golden Badge and integration with Google and Facebook login services enhances customer confidence. Technically, the site employs modern analytics and tracking tools like Google Tag Manager and Microsoft Clarity, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement and secure form handling, though explicit security policies and incident response information are not prominently available. The absence of WHOIS data for the domain is a concern, potentially indicating privacy protection or registration issues, which slightly impacts the trust score. Overall, Lentiamo.cz presents a reliable and user-friendly platform for optical products with room for improvement in transparency of security and compliance documentation.

The website www.estaregistrierung.org is a German-language service focused on assisting travelers from Visa Waiver Program countries with their ESTA (Electronic System for Travel Authorization) applications for entry into the United States. It provides detailed information about the ESTA process, requirements, costs, and FAQs, along with an online application form and status checking service. The site targets German-speaking travelers seeking a streamlined and supported ESTA application experience. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, and integrates third-party services such as Tawk.to for live chat support and Google Analytics for visitor tracking. The site is mobile-optimized and structured for good SEO and user navigation. Security-wise, while HTTPS is implied, the site lacks visible security headers and explicit cookie consent mechanisms, which are areas for improvement. The WHOIS data for the domain is not publicly available, indicating privacy protection, which is common but reduces transparency. Overall, the site presents a professional and trustworthy front for its niche service but could enhance its security posture and privacy compliance to increase user trust and regulatory alignment.

The website kalendarvh.cz is a specialized archival project by the Václav Havel Library, providing detailed day-by-day programs of Václav Havel's presidency from 1989 to 2003. It serves historians, students, journalists, and the general public interested in Czech modern history. The project is non-commercial and educational, with a niche market position focused on cultural heritage preservation. Technically, the site uses a simple stack including jQuery 2.2.4, Google Fonts, and Google Analytics, hosted on a Czech hosting provider. The site is accessible, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacks security headers and explicit privacy or cookie policies. No contact or incident response information is provided, limiting transparency and user trust. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening.

K

Knihovna Václava Havla

havelchannel.cz

55

Havel Channel is a Czech Republic based non-profit media platform operated by the Václav Havel Library, providing political interviews, cultural discussions, and podcasts focused on Václav Havel's legacy and related societal topics. The website is professionally designed with good content quality and consistent branding aligned with its parent organization and strategic partners. Technically, the site uses modern web technologies including Google Fonts, SVG icons, and Google Analytics for tracking, hosted under a Czech registrar and name server. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the site is trustworthy and serves a niche audience interested in Czech political and cultural discourse.

W

Wikov Industry a.s.

wikov.com

67

Wikov Industry a.s. is a well-established Czech engineering group specializing in the development and manufacturing of mechanical gearboxes, gears, and precision parts. The company holds a strong market position as a world-leading specialist in mechanical drive solutions and recently expanded its portfolio by acquiring Litostroj, a leading manufacturer of hydroelectric turbines. The website reflects a professional industrial brand with clear presentation of subsidiaries and divisions, targeting industrial and energy sectors globally. Technically, the website employs modern web technologies including Google Tag Manager, YouTube API, and Google Maps API, and is built on the Edee.one CMS platform with responsive design and good SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although explicit security headers and incident response policies are not publicly documented. Overall, the site is trustworthy, compliant with GDPR, and provides comprehensive contact information and certifications such as ISO 9001:2015.

Česká křesťanská akademie is a Czech registered non-profit association dedicated to promoting Christian cultural and moral values through educational and cultural activities. The organization operates local groups and expert sections, organizes events, and publishes the Universum magazine. The website reflects a well-structured, content-rich platform targeting Christian communities and socially responsible individuals in the Czech Republic. Technically, the site is built on WordPress with modern plugins and uses HTTPS with Google Analytics for visitor tracking. Security posture is generally good with secure forms and no exposed sensitive data, but lacks some security headers and formal security policies. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the clear contact information and professional presentation. Overall, the website is safe, professional, and serves its non-profit educational mission effectively.

M

Mailnatives s.r.o.

mn.cz

41

Mailnatives s.r.o. operates a professional email marketing platform offering multiple SaaS tools such as Mailocator, Mailiana, Mailsmitter, Mailcolm, and Maileon. The company targets email marketers, agencies, freelancers, and webmasters primarily in the Czech Republic but also internationally through localized domains. Their business model focuses on providing integrated email marketing tools, consulting, audits, and training services. The website is well-structured, professionally designed, and provides clear navigation and comprehensive product information. Technically, the site uses a moderate tech stack including jQuery, Google Fonts, Google Analytics, and proprietary tracking scripts, hosted on Active24 infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and secure forms, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy and cookie consent mechanism present but without detailed GDPR statements. WHOIS data confirms domain legitimacy with consistent registration details dating back to 2004. Overall, the website is trustworthy, professional, and business credible with minor areas for security and privacy enhancement.

P

Papír Plojhar

papirplojhar.cz

56

Papír Plojhar is a Czech family-owned business with a long-standing tradition dating back to 1888, specializing in paper goods, gift wrapping, and stationery products. The company operates a professional e-commerce platform targeting consumers interested in quality and sustainable paper products, creative supplies, and office essentials. Their market position is that of a medium-sized retailer with a strong local presence and a focus on customer satisfaction and product quality. Technically, the website is built on the Shoptet e-commerce platform, utilizing common web technologies such as jQuery, Google Tag Manager, and analytics tools. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but could improve by adding additional security headers and updating legacy libraries. The absence of WHOIS data is a notable concern, reducing domain trustworthiness, though the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, and security posture, with room for improvement in domain registration transparency and security header implementation.

404M.COM is a Czech language blog established in 2007, focusing on domains, investing, and internet business topics. It provides regularly updated content targeting investors, domain enthusiasts, and internet entrepreneurs. The website operates on WordPress CMS hosted by WEDOS Internet, a.s., a reputable Czech hosting provider. The technical infrastructure includes common web technologies such as PHP, JavaScript, and Google Analytics for tracking. The site demonstrates good SEO practices and mobile optimization but lacks formal privacy and cookie policies, which impacts compliance. Security posture is moderate with SSL enabled but missing DNSSEC and security headers. No WAF or blocking mechanisms are detected, and content is safe for general audiences.

W

WEBY GROUP, s.r.o.

webyhosting.sk

66

WEBY GROUP, s.r.o. operates the website Webyhosting.sk, providing domain registration and web hosting services primarily targeting Slovak customers. The company has been in business since 2001, offering a range of hosting plans, SSL certificates, web development, and backup services. Their market position is that of a well-established local hosting provider with a medium-sized client base and a focus on reliability and customer support. Technically, the website uses a modern tech stack including jQuery, Fancybox, and Google Analytics, running on a proprietary CMS (Unisite) and self-managed cloud infrastructure with branded HP servers. The site is mobile-optimized and SEO-friendly with good content quality and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. Overall, the website is professional, trustworthy, and compliant with GDPR, with no signs of blocking or WAF interference.

E

Ekofond SPP, n.o.

greenfluenceri.sk

56

The website greenfluenceri.sk represents a Slovak non-profit organization Ekofond SPP, n.o., promoting an environmental competition focused on energy solutions. The site highlights competition winners and encourages public participation through voting. The business operates in the energy sector with a niche focus on environmental awareness and community engagement. The domain is newly registered in 2024, consistent with the competition's timeline, and uses DNSSEC and HTTPS, indicating a secure and legitimate presence. Technically, the website uses an older jQuery version alongside Google Analytics and Digital Circle tracking scripts. The CMS appears to be a custom or niche Claro Admin system. The site is moderately optimized for mobile and performance but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. Navigation and design are professional and consistent with the brand. Security posture is adequate with HTTPS and DNSSEC but could be improved by adding security headers and updating JavaScript libraries. Privacy compliance is partial due to the absence of cookie consent banners despite having a linked privacy policy. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is trustworthy but would benefit from enhanced security and privacy practices. Strategic recommendations include implementing security headers, adding cookie consent, updating libraries, publishing security policies, and improving privacy compliance to strengthen trust and regulatory adherence.

P

Principles for Responsible Investment (PRI)

unpri.org

68

The Principles for Responsible Investment (PRI) is a UN-supported global network of investors dedicated to promoting sustainable investment by integrating environmental, social, and governance (ESG) factors into investment decisions. The organization provides a comprehensive suite of resources, tools, and collaborative platforms to support asset owners, managers, and financial institutions in responsible investment practices. The website reflects a mature digital presence with extensive content, clear navigation, and a professional design consistent with its global leadership position in responsible investment. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Hotjar for analytics, and Usercentrics for consent management, hosted on Amazon Cloudfront CDN. The site is mobile optimized and accessible, with good SEO practices and performance. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers could be improved. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. The absence of detailed WHOIS data limits domain trust analysis, but the website's affiliation with the United Nations and its professional content strongly support legitimacy. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the PRI website demonstrates a strong business and technical foundation with good security and privacy practices, suitable for its role as a leading responsible investment network. Strategic improvements in security headers and WHOIS transparency could further enhance trust and compliance.

M

Money magazine

moneymag.com.au

63

Money magazine is a well-established Australian personal finance media company offering a wide range of financial news, advice, reviews, and multimedia content including podcasts and videos. It targets Australian consumers interested in personal finance, investing, property, superannuation, and insurance. The website demonstrates a strong market position as Australia's longest-running and most-read personal finance magazine with a consistent brand and professional content. Technically, the site uses modern web technologies such as Bootstrap, Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though accessibility features could be improved. Security posture is strong with HTTPS enforced and secure forms, but explicit security headers and privacy policies are not clearly visible in the provided content. The WHOIS data is privacy protected, which is typical for media companies, but limits domain registration transparency. Overall, the site is trustworthy and professional with extensive content and strong social media presence.

I

InterWay, a. s.

interway.sk

66

InterWay, a. s. is a well-established Slovak IT company with over 26 years of experience providing comprehensive IT infrastructure support, cloud services, cybersecurity consulting, and web application development. The company targets both private and public sector clients, including government ministries, banks, and healthcare institutions, positioning itself as a leading IT solutions provider in Slovakia. Their business model combines service delivery with proprietary products under the WebJET and IwayCloud brands. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Google Tag Manager, with a proprietary CMS platform (WebJET). The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms. Performance is moderate, with room for improvement in accessibility and security headers. Analytics usage is moderate and privacy-conscious. From a security perspective, the site uses HTTPS with good SSL configuration and employs CSRF tokens in forms. However, it lacks explicit security policies and incident response contact information, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data aligns well with the company's claims, supporting legitimacy. Overall, InterWay's website demonstrates a strong business presence and technical maturity with good privacy compliance. Strategic improvements in security policy transparency and accessibility would further enhance their security posture and user trust.

T

TRANSPETROL, a.s.

transpetrol.sk

57

TRANSPETROL, a.s. is the sole operator of the oil pipeline system in Slovakia, providing critical transit and domestic transportation and storage of crude oil. The company holds a strategic position in the Slovak energy sector, serving primarily the national economy and business partners. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support via Weglot. Security posture is solid with HTTPS, cookie consent, and public fraud warnings, though formal security and incident response policies are not published. Overall, the site demonstrates good compliance with GDPR and transparency in data protection.

Z

Západoslovenská distribučná, a. s.

zsdis.sk

70

Západoslovenská distribučná, a. s. operates as a major electricity distribution company in western Slovakia, serving both households and businesses. The website provides comprehensive information about their services including new connections, changes, disconnections, and e-mobility solutions. The company positions itself as a reliable utility provider with a focus on customer service and regulatory compliance. Technically, the website employs modern JavaScript libraries such as jQuery and Swiper.js, and integrates Cookiebot for cookie consent management, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, with no critical vulnerabilities detected in the visible content. Privacy compliance is well addressed through detailed cookie policies and consent mechanisms, although explicit security and incident response policies are not publicly available. Overall, the site demonstrates a professional and trustworthy online presence consistent with a large utility provider.

M

MinterEllison

minterellison.com

72

MinterEllison is a leading multinational law and professional services firm based in Australia, recognized as the largest law firm in the country by number of lawyers. The company offers a broad range of legal and consulting services including AI advisory, debt restructuring, infrastructure consulting, and sustainability reporting. Their website reflects a mature digital presence with comprehensive content tailored to business clients seeking expert legal and consulting solutions. Technically, the site leverages modern technologies such as Sitecore CMS, Google Tag Manager, Facebook Pixel, Hotjar, and LinkedIn Insight Tag, indicating a well-integrated marketing and analytics infrastructure. The security posture is strong with HTTPS enforced and no visible exposed sensitive data, though improvements can be made by adding security headers and explicit cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

D

Diakonie Deutschland

sozial-o-mat.de

65

Diakonie Deutschland is a prominent evangelical non-profit organization in Germany focused on social welfare, advocacy, and support services. The website provides election decision aids such as the Sozial-O-Mat to help voters compare social-political positions of parties and the organization. The site targets German voters interested in social policy and welfare issues. Technically, the website is built on TYPO3 CMS, uses modern JavaScript frameworks, and integrates consent management via Usercentrics alongside analytics tools like Google Analytics and Matomo. The site is hosted with Cloudflare DNS and employs HTTPS with strong SSL configuration. Security posture is solid with no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by consistent branding, partner affiliations, and professional content. Overall, the website is well-designed, accessible, and trustworthy, serving its non-profit mission effectively.

Naučnou stezkou.cz is a niche informational website dedicated to educational trails in the Czech Republic. It provides articles, categorized listings by region, and photo galleries related to various trails. The site targets general audiences interested in nature, hiking, and educational tourism within the Czech Republic. The business model is primarily content-driven, focusing on providing valuable information rather than commercial services. The website uses WordPress CMS with plugins such as NextGEN Gallery and Font Awesome icons, and it employs Google Analytics for visitor tracking. The technical infrastructure is moderate with basic mobile optimization and SEO practices in place. Security posture is adequate with HTTPS enabled but lacks important security headers and shows backend PHP warnings, which could expose sensitive information. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, although the website content appears legitimate and consistent. Overall, the site scores moderately on AI evaluation, with recommendations to improve backend error handling, implement privacy policies, and enhance security headers to strengthen trust and compliance.

P

Progresio

naucnechodniky.eu

60

The website naucnechodniky.eu is an educational platform dedicated to providing comprehensive information about educational hiking trails in Slovakia. It serves primarily schools, educators, and the general public interested in nature, culture, and outdoor activities. The platform offers a searchable database of trails, educational materials, and interactive maps, positioning itself as a niche resource within the Slovak educational and tourism sectors. The site is developed and maintained by Progresio and affiliated with the Department of Physical Geography and Geoinformatics at Comenius University in Bratislava, lending academic credibility. Technically, the website is built on WordPress CMS with a modern yet somewhat dated technology stack including Bootstrap 3.3.7, jQuery, and FontAwesome. It integrates Google Analytics, Google reCAPTCHA, and Smartlook for analytics and security purposes. The site is hosted by WEDOS Internet, a reputable Slovak hosting provider. Performance and mobile optimization are good, though some technical debt is noted in the use of multiple versions of libraries and older Bootstrap version. From a security perspective, the site enforces HTTPS, uses cookie consent compliant with GDPR, and integrates anti-spam measures. However, explicit security headers are not clearly detected, and some outdated libraries could pose minor risks. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear cookie policies and consent mechanisms. Overall, the website presents a low-risk profile with a solid educational mission, good technical implementation, and adequate security posture. Strategic improvements in updating libraries, consolidating scripts, and enhancing security headers would further strengthen the platform's resilience and user trust.

S

SocialAppsHQ

socialappshq.com

52

SocialAppsHQ is an all-in-one marketing platform that provides comprehensive resources and guides across a wide range of digital marketing channels including social media platforms, SEO, email marketing, and website design. The platform targets marketers, small businesses, and digital marketing professionals seeking to enhance their marketing strategies and execution. The website is well-structured, professionally designed, and offers a broad spectrum of marketing solutions and agency directories, positioning itself as a valuable resource hub in the marketing technology sector. Technically, the site is built on WordPress with Elementor and WooCommerce, leveraging modern web technologies and SEO best practices. Performance and mobile optimization are good, though accessibility could be improved. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. Privacy compliance is basic with privacy and terms pages present but no cookie consent mechanism. Contact information is available via email and contact form, but no phone or physical address is provided. WHOIS data is unavailable, which limits domain legitimacy verification and slightly reduces trust. Overall, the site is professional and trustworthy but could benefit from enhanced security and privacy transparency.

P

Polska Organizacja Turystyczna

puola.travel

60

The website www.puola.travel/fi serves as the official Finnish-language tourism portal for Poland, managed by the Polska Organizacja Turystyczna (Polish Tourism Organization). It provides comprehensive travel information, cultural insights, news updates, and contact options aimed at Finnish-speaking tourists interested in visiting Poland. The site is positioned as a government-backed platform promoting Poland's tourism sector in Nordic countries, offering services such as travel tips, event news, and newsletter subscriptions. Technically, the site is built on Joomla CMS and integrates modern analytics and marketing tools including Google Tag Manager, Google Analytics, Matomo, and Google reCAPTCHA for form security. The website demonstrates good mobile optimization, basic accessibility features, and solid SEO practices. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, ensuring GDPR compliance with explicit user consent mechanisms. The WHOIS data is unavailable due to malformed responses, which slightly reduces domain trustworthiness, but the official nature of the content and government references mitigate this concern. Overall, the site maintains a good security posture with room for improvement in security headers and transparency. The overall risk assessment is moderate with a recommendation to enhance security headers, publish security policies, and improve WHOIS transparency if possible. The site is safe for general audiences, free from adult or questionable content, and professionally maintained.