Security Directory

S

statutární město Karviná

karvina.cz

59

The website www.karvina.cz serves as the official online portal for the statutory city of Karviná, Czech Republic. It provides comprehensive information about the city administration, municipal police, cultural events, tourism, and online services such as reservations and citizen portals. The site targets residents, visitors, and local businesses, positioning itself as a key municipal government resource. The business model is that of a government information portal, offering public services and community engagement tools. Technically, the site is built on the Marwel CMS platform and leverages modern web technologies including jQuery, Bootstrap, and Font Awesome. It integrates Google Analytics and Facebook SDK for tracking and social engagement. The site is mobile-optimized with responsive design and includes accessibility features, although these could be enhanced. Performance is moderate, with a well-structured navigation system and SEO-friendly metadata. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. The absence of WHOIS data for the domain is a notable gap, limiting full verification of domain legitimacy. No vulnerabilities or exposed sensitive data were detected in the content analysis. Overall, the website demonstrates a solid digital presence for a municipal government entity with good content quality and user experience. Strategic improvements in security headers, WHOIS transparency, and incident response disclosures would strengthen its security posture and trustworthiness.

E

Euroregion Praděd

europraded.cz

46

Euroregion Praděd is a non-profit regional cooperation organization focused on fostering cross-border collaboration between Czech and Polish regions. The website serves as an official portal providing information on regional development projects, cultural events, and cooperation initiatives. It targets local governments, residents, and cultural organizations within the Euroregion Praděd area. The organization positions itself as a key facilitator of regional integration and cultural exchange. Technically, the website is built on WordPress using the Divi theme, integrating modern analytics tools such as Google Analytics and Microsoft Clarity. The site is accessible, mobile-optimized, and employs HTTPS with appropriate security headers, reflecting a moderate level of digital maturity. However, the absence of WHOIS data and some security policy documentation indicates areas for improvement in transparency and security governance. From a security perspective, the site demonstrates good practices including HTTPS enforcement and security headers, but lacks a published security policy and vulnerability disclosure mechanism. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR contact information. Overall, the website is professional and trustworthy, though the lack of WHOIS data and some security documentation slightly reduce the trust score. Strategic recommendations include verifying domain registration details, publishing a security policy, and enhancing accessibility and security disclosures to strengthen trust and compliance.

V

Vysoká škola mezinárodních a veřejných vztahů Praha

vsmvv.cz

53

Vysoká škola mezinárodních a veřejných vztahů Praha (VŠMVV) is a private higher education institution specializing in international and public relations studies. Established in 2010, it operates under the parent entity University College Prague (UCP) alongside sister institutions. The website reflects a well-structured, multilingual platform targeting prospective and current students with comprehensive program information and institutional news. Technically, the site is built on WordPress with modern libraries and plugins, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is well addressed with a dedicated GDPR page and cookie management. Overall, the site demonstrates a professional and trustworthy online presence suitable for its educational mission.

AMSBus.cz is an established Czech online platform specializing in the sale and reservation of bus tickets. Operated by ČSAD SVT Praha, s.r.o., the website targets general public users seeking convenient e-ticketing solutions for bus travel within the Czech Republic and surrounding regions. The business model focuses on providing a user-friendly interface for searching, purchasing, and managing bus tickets, supported by partnerships with transportation offices and portals. The domain age since 2001 supports a mature market presence. Technically, the website is built on a custom ASP.NET platform utilizing legacy JavaScript libraries such as jQuery 1.4.1, with integrations for Google Analytics and Gemius Audience for user tracking and marketing. The site shows moderate performance and basic mobile optimization, with room for modernization and improved accessibility. External links to trusted partners and payment providers enhance the ecosystem. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in the HTML. However, the use of outdated JavaScript libraries introduces potential vulnerabilities. The absence of explicit security headers and cookie consent mechanisms indicates partial compliance with modern security and privacy standards. No incident response or security policy information is published, limiting transparency. Overall, AMSBus.cz presents a functional and moderately secure platform with a solid business foundation. Strategic improvements in updating technology, enhancing privacy compliance, and publishing security policies would strengthen trust and reduce risk exposure.

P

PROEBIZ s.r.o.

ebizforum.com

64

PROEBIZ s.r.o. operates the eBF festival, a leading event focused on the digitalization of corporate and public procurement. The company has established a strong market position in Central Europe by organizing annual conferences, workshops, and educational programs that attract procurement professionals and industry experts. Their business model centers on event management, education, and knowledge sharing in procurement digitization. The website reflects a mature digital presence with comprehensive content, program archives, and active social media engagement. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and marketing tools, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the domain registration and company information are consistent and trustworthy, supporting the legitimacy of the business. The site is safe for general audiences and free from suspicious or adult content.

E

Elektrárna – Pivo z Plzně

pivozelektrarny.cz

60

Elektrárna – Pivo z Plzně is a small, newly founded craft brewery operating under the umbrella of Plzeňský Prazdroj and parent company Asahi CE & Europe Services s.r.o. The business specializes in producing experimental and specialty beers, including custom corporate gifts and brewery tours. The website reflects a professional and consistent brand image targeting adult consumers, with clear age verification mechanisms to comply with alcohol regulations. The company maintains active social media channels and provides multiple contact points for customer engagement. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential plugins for cookie consent, multilingual support, and contact forms. It employs Google Analytics and Facebook Pixel for analytics and marketing, with a well-implemented cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, delivering a good user experience. From a security perspective, the site uses HTTPS and includes Google reCAPTCHA to prevent spam. However, explicit security headers are not detected, and no formal security policy or incident response information is published. No vulnerabilities or suspicious content were found. Overall, the security posture is good but could be improved by adding explicit security headers and incident response details. The domain registration data is consistent with the business claims, showing a recent registration date matching the company's founding year. No privacy protection is used in WHOIS, which is appropriate for this business type. The website content is safe for adults only, reflecting the nature of alcohol sales with proper age gating. The overall risk is low, with recommendations focusing on enhancing security headers and transparency around security policies.

Finmarket.cz operates as the largest financial product comparison platform in the Czech Republic, offering consumers a wide range of financial services including mortgages, insurance, investments, and loans. The platform is a joint project between Peníze.cz, a leading Czech financial web portal, and Partners Financial Services, a reputable financial advisory company. The website provides users with quick, tailored comparisons and online contracting options, positioning itself as a trusted intermediary in the Czech financial market. Technically, the site leverages modern web technologies such as Blazor Server and integrates Google Analytics and Tag Manager for tracking and marketing purposes. The site is well-optimized for mobile and accessibility, with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks visible security headers and incident response disclosures, which are areas for improvement. The absence of WHOIS data for the domain is a notable concern, impacting domain trustworthiness despite the professional web presence. Overall, Finmarket.cz presents a solid business and technical profile with moderate security posture and good privacy compliance.

M

ManpowerGroup s.r.o.

manpowergroup.cz

73

ManpowerGroup s.r.o. is a leading personnel and employment agency operating in the Czech Republic, providing comprehensive HR and IT recruitment services. The company leverages 75 years of global experience to connect talented individuals with innovative companies, offering services ranging from temporary staffing to permanent placement and HR consulting. Their market position is strong, supported by a professional website with clear branding and extensive service descriptions targeting employers and job seekers. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable, slightly reducing domain trust verification.

M

Moravskoslezský automobilový klastr, z.s.

autoklastr.cz

47

Moravskoslezský automobilový klastr, z.s. is a well-established automotive cluster based in Ostrava, Czech Republic, founded in 2007. It supports over 90 members in the automotive industry by fostering collaboration in research, development, education, and business relations. The cluster positions itself as a key regional player facilitating innovation and sustainable growth in the automotive sector. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and active social media engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Superfly Menu, and integrates Google Analytics and Google Tag Manager for analytics. It uses HTTPS with good SSL configuration and includes reCAPTCHA for form security. The site is moderately performant and mobile-optimized, though accessibility could be improved. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the site employs HTTPS and reCAPTCHA, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a comprehensive privacy policy and GDPR consent on forms, but lacks a cookie consent banner. Incident response and security policies are not publicly documented. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security headers and privacy compliance. The domain WHOIS data is consistent with the business claims, showing a long-standing registration since 2007, enhancing legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to further strengthen trust and compliance.

A

ARBOmedia s.r.o.

arbomedia.cz

55

ARBOmedia s.r.o. is a leading interactive media agency based in the Czech Republic, specializing in display, video, and mobile advertising. As part of the TISCALI MEDIA group, it holds a significant market share in the Czech internet advertising space, representing over 50% of the market and reaching millions of users monthly. The company offers tailored advertising solutions and manages a portfolio of over 55 web projects, targeting diverse audiences including business clients, gamers, and general consumers. The website reflects a professional and consistent brand image with clear business and contact information.

T

TISCALI MEDIA, a.s.

prpohotovost.cz

52

PR Pohotovost is a professional PR article writing service operated by TISCALI MEDIA, a.s., a recognized media company in the Czech Republic. The website offers a range of PR content services including article writing, proofreading, thematic articles, investigative pieces, video presentations, and product testing. The company targets businesses seeking effective and engaging PR content to enhance their marketing efforts. The site is part of the larger Dignity, s.r.o. group, indicating a stable corporate backing. Technically, the website employs modern web technologies such as Bootstrap, Google Analytics, Google Tag Manager, and Google Maps API. It is well-optimized for mobile devices and includes SEO best practices like meta tags and Open Graph data. The site uses HTTPS with a valid SSL certificate, ensuring secure data transmission. However, some security headers are missing, and there is no cookie consent mechanism, which could be improved for better privacy compliance. From a security perspective, the site demonstrates good practices with secure forms including CSRF tokens and no visible vulnerabilities. The absence of WHOIS data due to privacy protection limits transparency but does not detract significantly from the site's legitimacy given the professional content and corporate affiliation. No incident response or security policy information is published, which is a potential area for enhancement. Overall, PR Pohotovost presents a trustworthy and professional online presence with solid business credibility and technical implementation. Strategic improvements in privacy compliance and security transparency would further strengthen its security posture and user trust.

S

STORMWARE s.r.o.

pohodove-erp.sk

53

STORMWARE s.r.o. is a Slovak technology company specializing in ERP software solutions, notably the POHODA E1 system. With over 20 years of experience and a Microsoft partnership, the company offers a comprehensive ERP platform with numerous extensions tailored for small to medium-sized businesses. Their website reflects a professional and consistent brand image, targeting business users seeking integrated accounting, personnel, and warehouse management tools. Technically, the site is built on ASP.NET with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers and policies are not fully visible. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

L

Laxus z.ú.

laxus.cz

46

Laxus z.ú. is a Czech non-profit organization specializing in addiction-related services including counseling, therapy, harm reduction, and prevention programs across five regions. The website demonstrates a mature digital presence with a WordPress CMS using the Divi theme, integrated social media feeds, and Google Analytics for user tracking. While the site is well-structured and content-rich, it lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is adequate with HTTPS but could be improved by implementing additional security headers and publishing a security.txt file. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for non-profits. Overall, the website is professional, trustworthy, and serves its target audience effectively.

E

Endevel s.r.o.

escapemania.cz

45

Escapemania.cz is a well-established online platform founded in 2015, operated by Endevel s.r.o., that serves as the largest catalogue and ticketing service for escape rooms across Czechia and Slovakia. It offers users comprehensive listings, direct ticket purchases, universal vouchers, last-minute deals, and community features such as reviews and player diaries. The platform targets escape room enthusiasts ranging from beginners to experienced players, providing a user-friendly and multilingual experience. Technically, the website leverages modern web technologies including Django, Google Analytics, Smartlook, and Google Maps API, ensuring a responsive and moderately performant user experience. Security-wise, the site uses HTTPS and CSRF protections but lacks some advanced security headers and does not publish explicit security or incident response policies. Privacy compliance is addressed with cookie consent mechanisms and a basic privacy policy, though GDPR compliance could be improved. Overall, the website demonstrates a solid business credibility and technical foundation with room for enhanced security and privacy transparency.

I

iSophi

isophi.cz

38

iSophi.cz is a Czech educational technology website specializing in pedagogical diagnostics and developmental tools for preschool and early school-age children. The company offers diagnostic systems for kindergarten teachers, developmental tools for children aged 3 to 7, educational materials, and support programs for parents. The website positions itself as a specialized provider in the education sector within the Czech Republic, targeting educators and parents. The business appears to be small-sized and was founded around 2018, consistent with domain registration data. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern CMS infrastructure. It integrates Google Analytics and uses cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit security policies. No contact emails or phone numbers are visible on the homepage, which may impact user trust and compliance. Overall, the site is professionally designed with good navigation and content relevance but could improve privacy and security disclosures.

S

Studio82 - Petr Stefan

studio82.cz

63

Studio82 is a small Czech-based web design and graphic services studio led by Petr Stefan. The company specializes in custom web presentations, corporate websites, SEO, business cards, posters, and 3D graphics. The website is professionally designed using WordPress with the Divi theme, reflecting a modern and clean digital presence. The business targets clients seeking tailored web and graphic design solutions, positioning itself as a local expert in the technology sector. Technically, the site uses standard modern web technologies including Google Fonts and Google Analytics, with GDPR-compliant cookie consent mechanisms in place. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit vulnerability disclosure mechanisms. The absence of WHOIS data limits domain trust verification, posing a moderate risk. Overall, the site is professional, accessible, and compliant with privacy regulations, suitable for its business scope.

P

PODA

poda.cz

60

PODA is a Czech Republic-based internet service provider specializing in high-speed internet connections up to 2 Gb/s and TV services with over 160 channels. The company targets residential and business customers, offering both optical fiber and wireless internet solutions, alongside IPTV and VoIP calling services. The website reflects a medium-sized, established ISP with a professional online presence and consistent branding. Technically, the site is built on WordPress and leverages modern web technologies including Vue.js, Google Tag Manager, and various analytics and tracking tools. Security posture is strong with HTTPS, security headers, and CAPTCHA integration, though public security policies and incident response contacts are not found. Privacy compliance is indicated by the presence of privacy and cookie policies with consent mechanisms, though GDPR-specific details are basic. Overall, the website is well-structured, mobile-optimized, and trustworthy, with no signs of malicious activity or content blocking.

A

Adsmurai

adsmurai.com

65

Adsmurai is a technology company specializing in marketing automation platforms designed to streamline and optimize advertising campaigns. Positioned as an all-in-one tech marketing partner, it targets digital marketers, agencies, and brands seeking efficient campaign management solutions. The company leverages modern marketing technologies and platforms such as HubSpot to deliver its services. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies, indicating a mature digital presence. However, the absence of WHOIS registration data raises some concerns about domain legitimacy, though the overall site content and infrastructure appear trustworthy. Security posture is solid with HTTPS enforcement and security headers, but lacks a publicly available security policy or incident response information.

F

Forum Nová Karolina

e-karolina.cz

44

Forum Nová Karolina operates an e-commerce platform focused on selling gift cards and providing online shopping services for the Forum Nová Karolina shopping center in the Czech Republic. The website is built on the PrestaShop CMS platform and integrates multiple modules for enhanced user experience, including customer login, newsletter subscription, and cookie consent management. The business targets general consumers interested in shopping center services and gift cards, positioning itself as a regional retail player with a medium-sized footprint. The website content is professionally presented with consistent branding and clear navigation.

C

CREDITAS B.V.

creditasgroup.cz

68

CREDITAS Group is a Czech investment group specializing in long-term investments across financial services, real estate, energy, and healthcare sectors. The company positions itself as a dynamically growing entity with a diversified portfolio including banking, funds, rental housing, development, and energy distribution and production. The website presents a professional and consistent brand image targeting investors, partners, and clients in conservative investment sectors. Technically, the website is built on the Solidpixels CMS platform, utilizing modern web technologies including Google Analytics, Google Tag Manager, and OneTrust for cookie consent. The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features are basic, and security headers are not explicitly detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks published security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, although the website content and social media presence support its credibility. Overall, the website is professional and trustworthy but would benefit from enhanced transparency in privacy and security policies, explicit contact information, and verification of domain registration details to strengthen trust and compliance.

A

Adeon CZ

revit3dblog.cz

46

Revit 3D blog is a specialized Czech language website dedicated to Autodesk Revit and BIM applications, targeting architects, engineers, and construction project designers. The site offers blog articles, downloadable resources, and training courses, positioning itself as a niche content and education provider in the BIM technology sector. The business operates under the Adeon CZ brand, which is visible in author credits and social media presence. Technically, the website is built on WordPress with modern plugins for SEO, progressive web app capabilities, and user management. It employs standard security measures such as HTTPS and reCAPTCHA on forms, though some security headers are not explicitly detected. The site integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight, indicating moderate user tracking. Privacy compliance is basic with a cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service. The domain WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for this business type. Overall, the website is professional, secure, and trustworthy with room for improvement in privacy transparency and security headers.

A

Adeon CZ

inventor3dblog.cz

43

Inventor 3D blog is a specialized Czech-language website focused on providing comprehensive content related to Autodesk CAD and CAM software, including Inventor and Fusion 360. The site offers tutorials, news, tips, and training services, targeting engineering professionals and CAD/CAM users. It maintains a consistent brand presence with social media integration and an e-commerce partner for related products. Technically, the site is built on WordPress with a modern plugin stack supporting SEO, user management, and content delivery. Security posture is adequate with HTTPS enforced but could be improved by adding more security headers and formal privacy policies. The absence of WHOIS data limits domain trust assessment, but the website content and social presence support its legitimacy. Overall, the site is professional, content-rich, and serves a niche market effectively.

P

Právní prostor | Informační web nejen pro právníky

pravniprostor.cz

69

Právní prostor is a Czech legal information website established in 2011, providing news, judicial updates, legislative changes, and opinions primarily targeted at legal professionals. The site positions itself as a partner in the legal world, offering quick and clear legal information. Technically, the website is built using modern web technologies including Next.js and React, and integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. The hosting appears to be managed by REG-ZONER, consistent with the domain registration data. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit privacy or security policies, which could be improved to enhance trust and compliance. Overall, the website is professional and safe, with moderate tracking and marketing practices. The domain registration data supports the legitimacy and stability of the site.

S

STORMWARE s.r.o.

pohodaplus.sk

56

The website www.pohodaplus.sk serves as a partner platform for the POHODA accounting and economic system, operated by STORMWARE s.r.o., a Slovak software company. It offers extended solutions and integrations to enhance the core POHODA system, targeting business users in Slovakia. The site provides clear contact information and links to the main company site, reinforcing its legitimacy and business focus. Technically, the site is built on ASP.NET Web Forms with modern front-end technologies including Google Fonts and JavaScript libraries. It implements a comprehensive cookie consent mechanism aligned with GDPR requirements and uses Google Analytics for user tracking with opt-out capabilities. Security posture is moderate with room for improvement in HTTP security headers and published security policies. Overall, the site is professional, well-branded, and trustworthy with no signs of malicious content or blocking mechanisms.

S

STORMWARE s.r.o.

fakturacia-zadarmo.sk

53

STORMWARE s.r.o. operates the website fakturacia-zadarmo.sk, offering free invoicing and accounting software solutions including POHODA Start and the mPOHODA mobile app. The company targets small businesses and freelancers in Slovakia seeking accessible and flexible invoicing tools. The website is professionally designed with clear navigation and provides comprehensive information about its products and services. Technically, the site is built on ASP.NET with integration of common analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and a formal security policy could enhance protection. Overall, the domain registration data aligns well with the company identity, supporting legitimacy and trustworthiness.

FOSSA is a technology company specializing in software supply chain management, focusing on open source license compliance, security, and quality standards across third-party code. The company offers a SaaS platform that helps development teams and enterprises manage open source usage, security vulnerabilities, and compliance risks effectively. Their market position is that of an established player with a comprehensive suite of solutions including SCA, SBOM management, and supplier risk management. The website reflects a professional and consistent brand image with clear business messaging targeting software development and compliance teams. Technically, the website is built on a modern React/Next.js framework hosted on AWS infrastructure, leveraging multiple analytics and marketing tools such as Heap, Google Analytics, and Koala Analytics. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate with asynchronous loading of scripts and a clean design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC and explicit security headers, and does not provide a public security policy or vulnerability disclosure page. Tracking scripts are present without a visible cookie consent mechanism, which may pose privacy compliance risks. The domain registration is consistent and long-standing, enhancing trustworthiness. Overall, FOSSA's website is professional and trustworthy with good business credibility and technical implementation. Security posture is adequate but could be improved by implementing DNSSEC, security headers, and explicit security policies. Privacy compliance would benefit from a cookie consent mechanism. The risk level is moderate with no critical vulnerabilities detected.

F

FEROPLAST spol. s r.o.

feroplast.cz

47

FEROPLAST spol. s r.o. is a Czech manufacturing company specializing in the production of wire-based products such as corporate and promotional stands, retail shelves, and other advertising elements. Established in 1999, the company holds a significant market position in the Czech Republic, serving large retail chains and multinational companies. In 2024, FEROPLAST became part of the ANACOT industrial group, signaling growth and stability. The website reflects a professional business presence with clear product offerings and contact information. Technically, the site uses modern JavaScript libraries like jQuery, Google Analytics, and Google Tag Manager, with a cookie consent mechanism compliant with GDPR. However, the CMS appears custom or unknown, and some security best practices like HTTP security headers are missing. The security posture is moderate, with no visible critical vulnerabilities but room for improvement in headers and incident response transparency. Overall, the website is well-structured, mobile-optimized, and trustworthy, supporting the company's business credibility.

L

LISA TECH, a.s.

lisatech.cz

47

LISA TECH, a.s. is a Czech-based medium-sized manufacturing company specializing in the development, production, delivery, and installation of ecological waste processing lines that transform sorted municipal waste into boards for construction and other industries. The company positions itself as a globally oriented player in the ecological technology sector, targeting businesses involved in waste management and construction. The website is professionally designed using WordPress with Elementor and related plugins, featuring multilingual support and SEO optimization. The technical infrastructure is modern and includes GDPR-compliant cookie consent mechanisms and Google Analytics for user tracking. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though security headers are not detected and could be improved. No explicit security or incident response policies are published. Overall, the website reflects a credible and professional business presence with room for enhanced security transparency and accessibility improvements.

T

TRIANGOLO spol. s.r.o.

triangolo.cz

46

TRIANGOLO spol. s.r.o. is a well-established Czech industrial forging company founded in 1999, specializing in custom forging and small to medium series production of forged parts. It operates as part of the ANACOT CAPITAL group, indicating a strong corporate backing and diversified industrial presence. The company targets industrial clients requiring high-quality forged steel components, supported by certifications such as ISO 9001 and a solid reputation in the manufacturing sector. The website reflects a professional and consistent brand image with clear service offerings and multilingual support.

E

ELFE, s.r.o.

elfe.cz

46

ELFE, s.r.o. is a Czech industrial manufacturing company specializing in the production of welded constructions and industrial machines. Founded in 1993 and based in Krnov, Czech Republic, the company has established a solid market position with international business contacts and is part of the ANACOT CAPITAL group. Their key services include manufacturing for sectors such as energy, subsea, offshore, metallurgy, and machinery parts. The website reflects a professional and consistent brand image with good content quality and clear navigation.

V-NASS, a.s. is a Czech-based precision machining company specializing in manufacturing complex and precise components for sectors including underwater oil and gas extraction, nuclear energy, biomedicine, and secondary metallurgy tools. Established in 2000 and part of the ANACOT CAPITAL group, it offers machining, remanufacturing, assembly, and specialized treatments such as heat treatment and coatings. The company targets industrial clients requiring high-quality, precise engineering solutions. The website reflects a medium-sized enterprise with a professional digital presence built on WordPress and Elementor, featuring good content quality and SEO optimization but lacking formal privacy and cookie policies. Security posture is solid with HTTPS and reCAPTCHA protection, though security policies and incident response information are absent.

T

TRESTLES, a.s.

trestles.cz

45

TRESTLES, a.s. is a well-established Czech manufacturing company specializing in large-scale metal production, focusing on shelving systems, handling equipment, transport trolleys, construction stands, and metal furniture. Positioned as the largest shelving system manufacturer in Central Europe, it operates under the parent company Anacot Capital a.s. The company targets both B2B and B2C customers in industrial, construction, and DIY sectors, offering a broad product portfolio and an e-commerce platform. The website reflects a professional and consistent brand image with comprehensive product information and active news updates. Technically, the website is built on WordPress using Elementor and several Jet plugins, optimized for SEO with Yoast and compliant with GDPR via Complianz. Hosting is provided by a Czech hosting provider, and the site uses HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. Analytics are implemented via Google Analytics and Leady.com tracking, with cookie consent mechanisms in place. Security posture is solid with HTTPS enforcement and cookie consent, but lacks explicit security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected. The domain is long-standing (since 1998) and consistent with the business claims, enhancing trustworthiness. Social media presence and parent company affiliation further support credibility. Overall, the website is professional, secure, and compliant with privacy regulations, serving as a reliable digital presence for a major manufacturing company in Central Europe.

S

Společnost pro zahradní a krajinářskou tvorbu

szkt.cz

52

Společnost pro zahradní a krajinářskou tvorbu is a Czech organization focused on garden and landscape creation, likely operating as a non-profit society. The website is professionally designed using WordPress and incorporates modern web technologies such as Google Analytics and Tag Manager for tracking. The domain is well-established since 1999, indicating a stable presence in its niche. However, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure policies. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security measures.

S

Svaz zakládání a údržby zeleně (SZÚZ)

szuz.cz

52

Svaz zakládání a údržby zeleně (SZÚZ) is a Czech non-profit association dedicated to gardening, landscaping, and maintenance of green spaces. Established in 2001, it serves professionals and companies in the landscaping sector by organizing educational programs, competitions, and providing networking opportunities. The website reflects a well-established organization with a clear focus on promoting green infrastructure and professional development within its industry. The site is primarily in Czech and targets local professionals and enthusiasts. Technically, the website uses common web technologies including jQuery, Google Analytics, Facebook SDK, and CookieScript for cookie consent management. It is hosted by WEDOS, a known Czech hosting provider, and uses HTTPS with a good SSL configuration. However, the site lacks some modern security headers and explicit security policies, which could be improved. Privacy compliance is addressed with a GDPR policy and cookie consent banner, indicating awareness of regulatory requirements. Overall, the website is professional, trustworthy, and provides relevant content for its audience, though there is room for technical and security enhancements.

The website marketingove-trendy.cz represents the Projekt PREDATOR, an educational marketing internship program operated by Leemon Interactive, s.r.o., targeting students of marketing and design secondary vocational schools in the Czech Republic. The program is supported by regional government grants and aims to provide practical marketing experience through real projects. The website content is well-structured and informative, showcasing multiple years of the program with embedded multimedia and galleries. Technically, the site uses legacy JavaScript libraries such as jQuery and Cufon for font rendering, along with Google Analytics for visitor tracking. The site lacks modern CMS usage and shows moderate performance and basic mobile optimization. Security posture is average with no visible security headers or advanced protections, and privacy compliance is weak due to missing privacy and cookie policies. No contact emails or phone numbers are explicitly provided, which may impact user trust and compliance. Overall, the site is functional and professional but would benefit from updates in security, privacy, and technical modernization.

O

Ockham IPS

ockham-ips.nl

49

Ockham IPS is a specialized consultancy firm providing studies, evaluations, and consultancy services primarily to public sector clients. Their expertise spans a wide range of policy areas including labour market, education systems, qualifications, and EU programmes. The company positions itself as a trusted partner for well-founded decision-making in public policy cycles. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, enhanced with modern libraries such as jQuery and Bootstrap for responsive design. Google Analytics and Tag Manager are used for analytics, with privacy-conscious configurations like IP anonymization. The site performs moderately well with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website demonstrates a solid digital presence with good content quality and privacy compliance. Strategic improvements in security transparency and technical hardening could further enhance trust and resilience.

H

Henkel

ceresit.hu

66

Ceresit Hungary, operated under Henkel Magyarország Kft., is a leading manufacturer and supplier of professional construction chemical products, specializing in tiling, flooring, waterproofing, and thermal insulation solutions. The website reflects a mature digital presence with strong branding consistency and a clear focus on professional and consumer audiences in Hungary. The technical infrastructure leverages modern web technologies including Adobe Experience Manager, RAQN Commerce APIs, and robust consent management via OneTrust, ensuring compliance with GDPR and providing a seamless user experience. Security posture is strong with HTTPS enforcement, comprehensive security headers, and secure authentication flows, although explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness, supporting Henkel's market position in the manufacturing sector.

L

Leemon Concept, s. r. o.

leemon.cz

44

Leemon Concept, s. r. o. is a Czech-based activation and marketing agency specializing in IDEA concept marketing, proactive marketing, online strategies, design, digital and interactive projects, 3D design, and activation events. The company serves a business audience seeking creative marketing solutions and has a strong market presence supported by numerous awards and over 100 clients. Their business model focuses on providing comprehensive marketing services including analytical marketing, digital marketing, event organization, design, production, and consulting. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress and uses common JavaScript libraries such as jQuery, bxSlider, and Fancybox. It integrates Google Analytics for tracking and employs HTTPS with a valid SSL certificate, ensuring secure communication. The site is mobile-optimized and performs moderately well, though some PHP warnings visible in the HTML source indicate backend issues that should be addressed. SEO and accessibility are reasonably implemented. From a security perspective, the site lacks explicit security headers and does not provide visible privacy or security policies, which are areas for improvement. The cookie consent banner is present and functional, indicating some level of GDPR compliance. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is not uncommon for small agencies. Overall, the security posture is moderate with recommendations to fix backend warnings, implement security headers, and publish privacy policies. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include improving backend code hygiene, enhancing security headers, formalizing privacy and security policies, and maintaining transparent contact information to strengthen trust and compliance.

F

Forum Nová Karolina - Fashion. Gastro. Zábava

forumnovakarolina.cz

48

Forum Nová Karolina is a large retail and entertainment center located in the Czech Republic, established in 2011. The website presents a comprehensive overview of the center's offerings including over 220 shops, 24 restaurants, cinema, fitness, and various services. The business targets general consumers and families seeking shopping, dining, and entertainment experiences. The site is professionally designed with consistent branding and good content quality, supporting a positive user experience and clear navigation. Technically, the website is built on WordPress with modern plugins and frameworks, hosted by REG-WEBGLOBE, and integrates multiple marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR consent management. Contact information is clearly provided, enhancing business credibility. No critical security or content safety issues were detected.

F

FIRESTA-Fišer, rekonstrukce, stavby a.s.

firesta.cz

44

FIRESTA-Fišer is a well-established construction and engineering company based in Brno, Czech Republic, with over 30 years of operational history. The company specializes in infrastructure projects including bridges, railways, roads, water management, steel structures, and industrial buildings. It employs over 600 qualified workers and has received multiple industry awards, indicating a strong market position in the regional construction sector. The website reflects a professional business with clear service offerings and contact information, targeting business and public sector clients. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and uses responsive design, though some SEO and accessibility features could be enhanced. The absence of CMS identification and hosting details limits deeper infrastructure insights. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and a security.txt file for vulnerability disclosure. Privacy compliance is basic, with no dedicated privacy or terms of service pages, though a cookie consent mechanism is present. The WHOIS data is unavailable, which reduces trustworthiness but may be due to privacy protection. Overall, the website presents a credible and professional business presence with moderate technical maturity and security posture. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance trust and compliance.

B

BeePartner a.s.

beepartner.cz

57

BeePartner a.s. is a Czech-based consulting company specializing in strategy development, project management, and securing funding for clients at various governmental and regional levels. The company has a solid market position with over 10 years of experience and a focus on partnership and regional development. Their website is professionally designed using WordPress and the Divi theme, offering good user experience and mobile optimization. The technical infrastructure includes modern web technologies and Google Analytics for user insights. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the website reflects a trustworthy and compliant business with a clear focus on its target audience and services.

E

ELFE, s.r.o.

anacot.cz

45

ANACOT CAPITAL is a Czech investment group specializing in managing and growing a portfolio of industrial and manufacturing companies. Founded around 2014, it operates as a holding entity providing financial stability, strategic partnerships, and operational support to its subsidiaries. The website reflects a mature digital presence built on WordPress with modern SEO and GDPR compliance tools. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website presents a professional and trustworthy image suitable for its target audience of investors and industrial partners.

J

Juta Agency

jutaagency.cz

52

Juta Agency is a Czech-based company specializing in the rental of mobile sanitary equipment including toilets, urinals, VIP sanitary trailers, mobile washbasins, fencing, and other related infrastructure primarily for construction sites, cultural events, sports events, weddings, and garden parties. The company targets businesses and event organizers within the Czech Republic, focusing on regions such as Moravia and Silesia. Founded in 2011, it operates as a small-sized enterprise with a clear regional market presence. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, Google Fonts, Google Analytics, and Smartsupp Live Chat. The site is mobile optimized, uses HTTPS with good SSL configuration, and includes cookie consent mechanisms, indicating a reasonable level of digital maturity and compliance with privacy regulations. Hosting is provided by a Czech hosting provider, aligning with the company's regional focus. From a security perspective, the website enforces HTTPS and uses cookie consent banners but lacks explicit security headers such as CSP or HSTS in the provided data. No security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. The site does not expose sensitive data and uses asynchronous script loading to improve performance and security. Overall, the security posture is moderate but could be improved by implementing additional security headers and formal policies. The overall risk assessment is low with no signs of malicious activity or suspicious content. The company demonstrates good business credibility with clear contact information, social media presence, and downloadable legal and product documents. Strategic recommendations include enhancing security headers, publishing security policies, and improving privacy compliance transparency to strengthen trust and security culture.

C

CYLINDERS HOLDING a.s

zamek-vitkovice.cz

43

Zámek Vítkovice operates as a modern event venue located in the center of Ostrava, Czech Republic, offering rental spaces for weddings, conferences, concerts, and other events. The business is owned by CYLINDERS HOLDING a.s and targets local customers seeking unique and artistic event spaces. The website reflects a professional and consistent brand image with clear contact details and multilingual support (Czech and English). Technically, the site uses Bootstrap for responsive design, integrates Google Analytics for visitor tracking, and Google Maps for location display, indicating a moderate level of digital maturity. Security-wise, the site implements a cookie consent mechanism but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small hospitality business. Overall, the site is functional and user-friendly but would benefit from enhanced security and compliance documentation.

T

Trojhalí Karolina

trojhali.cz

53

Trojhalí Karolina is a multifunctional venue located in Ostrava, Czech Republic, offering a unique space composed of two heritage-protected buildings. The site serves a broad audience including sports enthusiasts, cultural event organizers, and the general public. It provides facilities for sports, cultural, social, and commercial events, positioning itself as a key local venue with historical significance. The business model revolves around venue rental and event hosting, supported by partnerships with local organizations and a clear focus on community engagement. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Slick Carousel, with integration of Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and presents a professional design with clear navigation. However, some accessibility features are basic, and no CMS is explicitly identified, suggesting a custom or less common platform. From a security perspective, the site uses HTTPS and includes consent mechanisms for data privacy, but lacks visible advanced security headers and explicit security policies. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security transparency and maturity. Overall, the website is trustworthy and professionally maintained, with a good balance of content quality and technical implementation. Strategic enhancements in security policies, incident response readiness, and accessibility could further strengthen its posture and compliance.

G

GALEOS a. s.

galeos.eu

51

GALEOS a. s. operates as a distributor of Progress Software technologies in the Czech Republic and Slovakia, providing software distribution, support, and professional services to application partners and direct customers. The company positions itself as a key technology intermediary for enterprise application development and integration, leveraging Progress Software's products such as OpenEdge and DataRPM. The website is professionally designed, multilingual, and includes modern web technologies and analytics tools, indicating a mature digital presence. However, explicit contact information and privacy policy details are limited in the accessible content. Security posture is adequate with HTTPS and cookie consent implemented, but could be improved with additional security headers and clearer privacy compliance documentation. Overall, the domain appears legitimate and consistent with the business claims, though WHOIS data is privacy-protected as per EURid policies.

W

Webglobe, s.r.o.

systems90.cz

61

Systems90.cz is a Czech Republic-based cloud service provider operated by Webglobe, s.r.o., offering a white label cloud platform and a range of cloud-related services including SaaS, BaaS, DRaaS, webhosting, virtual servers, and various cloud deployment models. The company targets businesses seeking customizable cloud infrastructure solutions without the need for direct investment in hardware or software. The website reflects a medium-sized technology business with a consistent brand presence and a professional online presentation. Technically, the website employs standard web technologies such as jQuery, Google Analytics, and Google Tag Manager, with hosting provided by hosting90.net/hosting90.cz. The site is mobile-optimized and features good SEO practices, though it uses an outdated jQuery version and lacks visible security headers, which could be improved. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, it lacks published privacy, cookie, and security policies, and no incident response or vulnerability disclosure information is provided. The absence of security headers and use of an older JavaScript library represent moderate security risks. No WAF or blocking mechanisms are detected, and no suspicious WHOIS patterns are found, supporting the domain's legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, updated security practices, and clearer contact and policy disclosures to improve user trust and regulatory adherence.

P

Predikce trhu práce - KOMPAS

predikcetrhuprace.cz

62

The website 'Predikce trhu práce - KOMPAS' is an official government-supported platform providing detailed labor market data, forecasts, and analyses for the Czech Republic. It serves regional authorities, job seekers, and policy makers by offering comprehensive insights into employment trends, professions, sectors, and education. The platform is positioned as a key national and regional labor market prediction system under the Ministry of Labour and Social Affairs of the Czech Republic, supported by EU funding. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and Hotjar for analytics and user experience monitoring. The site is mobile-optimized, well-structured, and provides clear navigation and content relevant to its audience. Security-wise, the site enforces HTTPS and implements a robust cookie consent mechanism with granular user controls, reflecting good privacy compliance and GDPR adherence. However, it lacks visible security headers and incident response contact information, which are areas for improvement. The absence of WHOIS data limits domain registration trust verification, but the official branding, contact email, and content quality strongly indicate legitimacy. Overall, the site presents a professional, secure, and privacy-conscious digital presence aligned with its government mandate.

A

Amondo

amondo.com

63

Amondo is a technology company offering a SaaS platform that enables brands, rights holders, publishers, agencies, and broadcasters to harness and utilize community-generated content through digital storytelling experiences called 'Imprints'. The platform integrates with multiple content sources and social media, providing tools for content access, curation, activation, and distribution. The company targets medium-sized enterprises and notable clients include Warner Records, Kia, and Team GB. The website is professionally designed, mobile-optimized, and features comprehensive privacy and cookie policies with consent mechanisms, reflecting a mature digital presence. Technically, the website is built on Webflow CMS and employs modern web technologies including Google Analytics, Google Tag Manager, Intercom, and Clearbit for analytics and marketing. Performance is moderate with good mobile optimization and SEO practices. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers are not detected, suggesting room for improvement. No exposed sensitive data or vulnerabilities were found in the analysis. The WHOIS data for the domain www.amondo.com is missing or unavailable, which is inconsistent with the active and professional website presence. This raises some concerns about domain registration transparency but does not directly impact the operational legitimacy of the business. No direct contact emails or phone numbers are publicly listed, which may affect user trust and support accessibility. Overall, Amondo presents a trustworthy and professional business with a strong digital platform and marketing presence. Strategic recommendations include improving security headers, enhancing accessibility, and providing clearer contact information to bolster trust and compliance.