Security Directory

C

Charita Česká Kamenice

charita-ceska-kamenice.cz

54

Charita Česká Kamenice is a well-established non-profit organization founded in 2009, operating under the umbrella of Charita Česká republika. The organization provides a broad range of social and humanitarian services including hospice care, social rehabilitation, sheltered housing, and support for vulnerable groups such as seniors, disabled individuals, families, children, youth, and the homeless. Their market position is regional with strong partnerships with government bodies and charitable foundations, enhancing their credibility and funding sources. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website employs standard web technologies including JavaScript, CSS, and HTML5, with fonts loaded from Google Fonts and Adobe Typekit. The site appears to be custom-built or uses a proprietary CMS, likely provided by VIZUS.CZ, the web development company credited in the footer. Performance is moderate with good mobile optimization and basic accessibility features. SEO is basic but sufficient for their audience. The site uses HTTPS with a good SSL configuration, and a cookie consent mechanism is implemented to comply with privacy regulations. From a security perspective, the website shows good practices such as HTTPS enforcement and cookie consent management. However, there is no explicit security policy or incident response contact information available, which could be improved. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the organization's claims, showing a domain age appropriate for the business history and no privacy protection masking the registrant. Overall, the website is safe, trustworthy, and compliant with GDPR requirements. It effectively serves its purpose as an informational and engagement platform for a non-profit social service organization. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen their digital maturity and trustworthiness.

H

Hospic Žďár nad Sázavou

hospiczdislavy.cz

61

Hospic Žďár nad Sázavou operates as a small non-profit healthcare organization specializing in hospice and palliative care services within the Czech Republic. The website serves as an informational and engagement platform for patients, families, volunteers, and donors, providing details about their services and ways to support the hospice. The organization appears to have a localized market presence with a focus on compassionate end-of-life care. Technically, the website is built on the Wix platform, leveraging Wix's content management and hosting infrastructure. The site uses standard Wix scripts and assets, ensuring moderate performance and good mobile optimization. However, the technical implementation lacks advanced security headers and comprehensive privacy documentation, which are areas for improvement. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating some attention to user privacy and security. Nonetheless, the absence of security headers, vulnerability disclosure policies, and WHOIS transparency limits the overall security posture. There are no indications of exposed sensitive data or vulnerabilities in the visible content. Overall, the website is functional and professionally presented but would benefit from enhanced privacy compliance, security best practices, and transparent business information to strengthen trust and compliance with regulatory standards.

Č

ČeskoZdravě.cz

ceskozdrave.cz

42

ČeskoZdravě.cz is a well-established Czech online magazine focused on healthy lifestyle, natural treatment, prevention, and nutrition. Founded in 2015, it offers a broad range of articles and a disease database targeting a general audience interested in health and wellness. The website is built on WordPress using the Jannah theme, hosted by Wedos, a Czech hosting provider, reflecting a mature digital infrastructure. The site demonstrates good SEO practices, mobile optimization, and a consistent brand presence. Security posture is solid with HTTPS and security headers, though there is room for improvement in privacy compliance, particularly regarding cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating stable and accessible content.

R

Renovabis e.V.

renovabis.de

61

Renovabis e.V. is a well-established German non-profit organization dedicated to providing aid and support to people in Eastern Europe, focusing on social and pastoral renewal. Founded in 1993 by the German Bishops' Conference, it operates through donations, project funding, and educational initiatives. The website reflects a professional and trustworthy presence with comprehensive content, clear navigation, and consistent branding. It targets donors, partners, and communities interested in charitable work in Eastern Europe. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates third-party services such as Usercentrics for consent management, Google Tag Manager for analytics, and Algolia for search functionality. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be based in Germany, aligning with the organization's location. From a security perspective, the site enforces HTTPS and uses consent management to comply with GDPR. While explicit security headers are not detected, no vulnerabilities or exposed sensitive data were found. The organization demonstrates good privacy compliance with a clear privacy policy and cookie consent mechanism. Contact information is transparent and includes multiple channels. Overall, Renovabis presents a low-risk profile with strong business credibility and privacy practices. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture.

The website 'Kniha milosrdenství' is a small non-profit religious platform focused on Christian mercy and prayer, providing spiritual reflections, downloadable materials, and news updates primarily for the Czech Christian community. The domain is well-established since 2012 and hosted on Czech infrastructure, supporting its legitimacy and stable presence. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking but lacks modern CMS or advanced frameworks. Security posture is moderate with no visible security headers or privacy policies, and no HTTPS confirmation from the provided data, indicating room for improvement. Privacy compliance is low due to missing cookie and privacy policies and no consent mechanisms. Overall, the site is safe with no adult or questionable content, but it would benefit from enhanced security and privacy practices to improve trust and compliance.

P

Podřipské muzeum v Roudnici nad Labem - příspěvková organizace města Roudnice n. L.

podripskemuzeum.cz

57

Podřipské muzeum in Roudnice nad Labem is a public cultural institution operated as a contributory organization of the city. It focuses on preserving and presenting the history and culture of the Podřipsko region through permanent and temporary exhibitions, workshops, lectures, and public events. The museum targets local residents and visitors interested in regional heritage and cultural education. The website reflects a small but professionally managed institution with clear contact information and active social media presence. Technically, the website is built on the Webnode platform, leveraging modern web technologies including HTTPS, CDN hosting via Amazon Cloudfront, and Google Tag Manager for analytics. The site is mobile-optimized with good design and navigation, though some SEO and accessibility features could be enhanced. The cookie consent mechanism is implemented, but privacy and terms of service pages are missing, indicating partial compliance with GDPR requirements. From a security perspective, the site uses HTTPS and basic security headers but lacks advanced headers and a security.txt file for vulnerability disclosure. No WHOIS data is available, which limits domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the security posture is moderate with room for improvement in compliance and security best practices. The overall risk is low given the nature of the institution and the website content. Strategic recommendations include adding privacy and terms policies, improving security headers, and publishing vulnerability disclosure information to enhance trust and compliance.

Ř

Říp, o.p.s.

vyletnarip.cz

42

Výlet na Říp is a regional tourism and cultural information website focused on the Podřipsko area in the Czech Republic. It provides visitors with detailed guides on local attractions, cycling routes, cultural events, and historical sites. The site targets tourists, cyclists, and families seeking leisure and educational activities in the region. The business operates as a small-scale informational platform supported by the regional organization Říp, o.p.s., with a clear focus on promoting local tourism and culture. Technically, the website employs modern web technologies including Google Fonts, Google Analytics, and Google Tag Manager, hosted by Wedos. The site is mobile-optimized with good SEO practices and a clear navigation structure. However, it lacks some advanced security headers and explicit privacy or terms of service pages, which are areas for improvement. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles, though no formal privacy policy was found. No critical vulnerabilities or suspicious activities were detected. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website presents a trustworthy and professional platform for regional tourism promotion, with moderate technical maturity and a solid security baseline. Strategic enhancements in privacy documentation and security headers would further strengthen its compliance and trustworthiness.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of road marking materials and solutions globally. The website reflects a mature business with a comprehensive product portfolio targeting municipalities, contractors, and businesses involved in traffic safety and infrastructure. The company emphasizes quality, sustainability, and innovation with over 100 years of industry experience. Technically, the website is built on modern web standards using a CMS platform (Swift CMS), with responsive design and good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration transparency, which should be investigated further to ensure trustworthiness.

G

Geveko Markings Poland Sp. z o.o.

geveko-markings.pl

61

Geveko Markings Poland Sp. z o.o. is a medium-sized company specializing in road marking materials and solutions, operating primarily in Poland and Eastern Europe. The company recently integrated Farby Maestria Polska Sp. z o.o., enhancing its market presence and product portfolio. Their offerings include solvent-based paints, two-component materials, prefabricated road marking elements, thermoplastic materials, and road repair products. The website reflects a professional B2B supplier with a strong focus on technical documentation and customer support. Technically, the website uses modern web technologies including JavaScript, CSS, and Google Tag Manager for analytics and marketing. It is mobile-optimized and uses a CMS platform likely Swift CMS. Performance is moderate with good SEO and accessibility basics. However, security headers are not visibly implemented, and no dedicated security policy or incident response contacts are published. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The cookie consent mechanism is comprehensive and GDPR compliant. The absence of WHOIS data for the domain is a concern but does not currently undermine the legitimacy of the business, which is supported by consistent branding, certifications, and clear contact information. Overall, the website and business present a trustworthy and professional image with room for improvement in security header implementation and transparency around security policies and incident response.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of road marking materials and solutions globally. With over 100 years of industry experience, the company offers a comprehensive product portfolio including preformed materials, hot-applied materials, paints, beads, aggregates, and equipment. Their website reflects a strong market position with detailed product lines, solutions for various traffic and safety needs, and a global presence through multiple regional domains. Technically, the website is built on a modern CMS platform (Swift CMS) with responsive design, good SEO, and accessibility features. The use of Google Tag Manager indicates moderate user tracking with privacy compliance mechanisms in place. Security posture is strong with HTTPS enforced and multiple security headers present, although public security policies and incident response information are not disclosed. The absence of WHOIS data suggests privacy protection, which is justified for a large enterprise. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious activity or content blocking.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of horizontal road and surface markings tailored to various segments. The company offers a broad portfolio of solutions including regulatory traffic markings, parking and traffic area markings, decorative surfacing, accessibility and safety markings, road and surface repair, and event/sports-related markings. With a global presence and nearly a century of industry experience, Geveko Markings positions itself as a trusted supplier in the transportation sector. The website reflects a professional and comprehensive digital presence, supporting multiple regions and languages, and providing clear contact and corporate information. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with a well-structured navigation system. The use of a proprietary CMS (Swift) and various JavaScript libraries enhances user experience. Security posture is good with HTTPS enforced and privacy compliance evident through detailed privacy and cookie policies with consent mechanisms. However, the absence of visible security headers and lack of explicit incident response or security policy pages suggest areas for improvement. The WHOIS data for the domain www.geveko-markings.co.uk is unavailable due to a Nominet UK naming rules error, which is unusual and raises questions about domain registration legitimacy. Despite this, the website content and business information appear consistent and professional. This discrepancy warrants further investigation to confirm domain ownership and legitimacy. Overall, Geveko Markings demonstrates a strong business and digital presence with good security and privacy practices. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and resolving WHOIS data issues to strengthen trust and compliance.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of road marking materials and solutions globally. With over 100 years of experience, the company offers a comprehensive range of products including preformed materials, hot-applied materials, paints, plural components, beads, aggregates, and equipment. Their market position is strong, supported by a consistent brand presence and a wide regional footprint with dedicated country-specific domains. The target audience primarily consists of businesses and organizations involved in road infrastructure and traffic management. Technically, the website is built with modern web technologies, including responsive design and accessibility features, and integrates Google Tag Manager for analytics with privacy-conscious consent defaults. Security posture is good with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved and explicit security policies are absent. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the overall business credibility remains high due to the professional website, certifications, and social media presence. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to improve trust.

Geveko Markings Germany GmbH is a well-established company specializing in the development, production, and distribution of horizontal road marking materials tailored to various sizes, materials, colors, and forms to meet segment-specific requirements. With over 100 years of experience and ISO 9001 certification, the company holds a strong market position in the transportation sector, serving primarily B2B customers focused on traffic safety and infrastructure. The website reflects a mature digital presence with comprehensive content, clear navigation, and multi-channel contact options. Technically, the site uses modern web technologies including Bootstrap, Google Analytics, Hotjar, and Facebook Pixel, hosted by Kortermann Hosting in Germany. Security posture is good with HTTPS enforced and privacy compliance evident through cookie consent mechanisms and a detailed privacy policy. No critical vulnerabilities or suspicious patterns were detected, indicating a trustworthy and professional online presence.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of road marking materials globally. With over 100 years of experience, the company offers a comprehensive range of products including preformed materials, hot-applied materials, paints, beads, aggregates, and equipment. Their market position is strong, supported by ISO9001 certification and a broad international presence with multiple regional domains. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content tailored to business and municipal clients. Technically, the site uses modern web technologies and Google Tag Manager for analytics, with a good security posture including HTTPS enforcement. However, explicit security headers and incident response information are not prominently published, and the WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but would benefit from enhanced security disclosures and WHOIS transparency.

A

add enterprise

addenterprise.com

54

add enterprise is a Saudi Arabia-based event planning and management company specializing in creating immersive and memorable experiences. Established in 2014, the company serves a broad audience including public and private entities across 18 countries and 4 continents. Their services encompass creative planning, production, design, operations, digital innovation, and integrated event management. The website demonstrates a professional digital presence with a modern tech stack based on Next.js and React, offering good mobile optimization and user experience. Security posture is moderate with HTTPS enabled and domain protection statuses, but lacks DNSSEC and explicit security policies. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanisms. Overall, the site is trustworthy and well-positioned in its market segment.

P

PAKKA s.r.o.

pakka.cz

44

PAKKA s.r.o. operates as a specialized retail business focused on swimming pools and related accessories in Pardubice, Czech Republic. The company is an authorized partner of Albixon a.s., a leading European manufacturer of pools and enclosures, positioning itself as a trusted provider with over 15 years of experience in the industry. Their offerings include custom pool enclosures, pool chemicals, robotic and manual pool cleaners, and comprehensive pool maintenance products. The website reflects a professional retail presence targeting both consumers and businesses interested in pool products in the region. Technically, the website is built using modern web standards including HTML5, CSS3, JavaScript, and Bootstrap framework, with additional libraries such as Swiper.js for carousels and SVGInject for image handling. The site is hosted on a Czech hosting provider, with good mobile optimization and moderate performance. SEO and accessibility are adequately addressed, though some improvements could be made. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy header to upgrade insecure requests. However, other important security headers are missing, and there is no visible privacy or cookie policy, which indicates compliance gaps with GDPR and related regulations. No forms or analytics scripts are present, minimizing data collection risks but also limiting user engagement and tracking capabilities. Overall, the website is trustworthy and professionally presented but would benefit from enhanced privacy compliance and security hardening. The domain registration data is consistent and transparent, supporting the legitimacy of the business. Strategic improvements in privacy policy implementation, security headers, and user data protection would strengthen the company's digital maturity and customer trust.

G

GTM West

gtmwest.com

9

GTM West is a travel industry event platform focused on connecting travel advisors and suppliers primarily in the western region. The website provides detailed sections about the event's mission, agenda, advisory board, and participant qualifications, targeting travel professionals. Technically, the site is built on Squarespace, leveraging modern web technologies and third-party analytics tools such as Google Tag Manager and LinkedIn Insight. The site is well-designed, mobile-optimized, and uses HTTPS with HSTS for secure communications. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Additionally, the lack of privacy, cookie, and terms of service policies indicates gaps in compliance and user trust. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

R

Rittal GmbH & Co. KG

rittal.com

63

Rittal GmbH & Co. KG operates a professional website focused on industrial manufacturing solutions including enclosures, power distribution, climate control, IT infrastructure, software, and automation services. The company targets industrial and manufacturing sectors globally, as evidenced by multiple language versions of the site. The website demonstrates a moderate level of digital maturity with modern frontend technologies such as Vue.js and good SEO practices. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and privacy compliance. Security posture is moderate with no explicit security headers detected, and no visible incident response or vulnerability disclosure information. Overall, the website is professional and trustworthy in content but would benefit from enhanced security and privacy disclosures to improve compliance and user trust.

A

ANVI TRADE

anvitrade.cz

63

ANVI TRADE is a Czech-based company specializing in the supply of adhesives, sealants, and flooring systems, serving both household and professional construction sectors. The company positions itself as a strong partner with a comprehensive product offering and has a notable market presence supported by over 30 years of operation and an AAA certification. Their business model includes direct sales through an e-shop and professional services such as training academies. Technically, the website employs modern web technologies including Google Analytics and Cookiebot for privacy compliance, with responsive design and structured data enhancing SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence for a medium-sized manufacturing and retail business.

Stradasalt is a Norwegian brand under GC Rieber Minerals specializing in environmentally friendly road salt and dust-binding solutions. The company targets road maintenance and municipal clients with a focus on sustainable and chloride-free products. The website reflects a professional B2B supplier with a clear market niche and consistent branding. Technically, the site uses modern web technologies including Matomo analytics and Cookiebot for consent management, ensuring compliance with GDPR and privacy best practices. Security posture is solid with HTTPS, CSRF protection cookies, and domain transfer restrictions, though DNSSEC is not enabled and some security headers are missing. No direct contact emails or phone numbers are provided, relying on a contact form instead. Overall, the site is well-structured, mobile-optimized, and trustworthy, with room for improvement in explicit business contact details and security policy disclosures.

M

Město Pelhřimov

mupe.cz

44

The website mestopelhrimov.cz serves as the official online portal for the city of Pelhřimov in the Czech Republic. It provides comprehensive information about city administration, cultural institutions, sports facilities, educational establishments, and public services. The site targets residents, tourists, and local stakeholders seeking municipal information and services. The business model is that of a government entity providing public information and services, positioning itself as the authoritative source for city-related content. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, Google Analytics, Google Tag Manager, and Google reCAPTCHA for security. It uses the VismoWeb5 CMS platform and integrates translation services and a chatbot for enhanced user experience. The site is mobile optimized, accessible, and SEO friendly, though performance is moderate. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate bot traffic. It implements a GDPR-compliant cookie consent mechanism with granular user controls. However, it lacks visible security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is trustworthy and professional, suitable for its government function. The absence of WHOIS data limits domain registration trust analysis but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and providing clear contact information for incident response to further strengthen trust and compliance.

The website harry.cz is currently a parked domain page primarily used to advertise the domain for sale. It lacks any substantive business content, contact information, or user engagement features. The technical infrastructure is minimal, relying on basic HTML, CSS, and JavaScript with external scripts for advertising and tracking. There is no evidence of a content management system or active business operations. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy compliance mechanisms. The domain is registered since 2008 but is currently inactive, reducing its credibility as a business site. Overall, the site presents low risk but also low trustworthiness and professionalism.

M

Město Lipnice nad Sázavou

lipnicens.cz

43

The website lipnicens.cz serves as the official online presence for the town of Lipnice nad Sázavou, Czech Republic. It provides municipal information, news updates, event calendars, and contact details for local government offices. The site targets residents and visitors seeking official information about the town and its services. The business model is that of a government information portal, with a focus on transparency and community engagement. The domain has been active since 2005, reflecting a stable and established municipal web presence. Technically, the website is built on the vismo CMS platform and uses standard web technologies including HTML5, CSS, and JavaScript. It incorporates Google Translate for multilingual support. The site is moderately optimized for mobile devices and accessibility, with a clear navigation structure. Hosting and domain registration are consistent with Czech regional providers, ensuring local relevance and reliability. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks advanced security headers and explicit security or incident response policies. Forms use GET methods which could be improved for security. Privacy and cookie policies exist but lack active consent mechanisms. No vulnerability disclosure or data protection officer information is present, indicating room for compliance enhancements. Overall, the website is trustworthy, safe, and professionally maintained, suitable for general audiences. Strategic recommendations include improving security headers, implementing cookie consent, and publishing detailed security policies to enhance compliance and user trust.

M

Městský úřad Světlá nad Sázavou

svetlans.cz

48

The website svetlans.cz serves as the official online presence of the municipal government of Světlá nad Sázavou, Czech Republic. It provides residents and visitors with comprehensive information about local administration, public services, events, and official documents. The site is well-structured with clear navigation and includes essential contact information, event calendars, and online reservation systems for municipal services. The target audience is primarily local citizens and stakeholders interested in municipal affairs. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for language accessibility. The site is hosted by Wedos, a reputable Czech hosting provider, and employs HTTPS for secure communications. Mobile optimization and accessibility are adequately addressed, though some improvements in SEO and security headers could enhance the overall digital maturity. From a security perspective, the site demonstrates good practices including HTTPS enforcement and use of CAPTCHA to prevent spam. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic, with a privacy policy and cookie information present but no active consent mechanism. The domain WHOIS data is consistent with the municipal nature of the site, showing a long registration history and no privacy protection, which aligns with transparency expectations for government entities. Overall, svetlans.cz is a trustworthy and professionally maintained municipal website with a solid foundation in content quality and business credibility. Enhancements in security policies, privacy mechanisms, and technical SEO could further strengthen its posture and user trust.

M

Město Kamenice nad Lipou

kamenicenl.cz

46

Město Kamenice nad Lipou operates an official municipal website serving residents and visitors with information about local government, culture, events, and public services. The site is well-branded with official city emblems and provides comprehensive contact details and event calendars. The target audience is primarily local citizens and tourists interested in the town's offerings. The business model is public service oriented, focusing on transparency and community engagement. Technically, the website uses a traditional HTML/CSS/JavaScript stack powered by the Vismo CMS platform. It integrates Google services such as reCAPTCHA for form security and Google Translate for language accessibility. The site is hosted under a Czech registrar and uses HTTPS, ensuring secure communications. Mobile optimization and basic accessibility features are present, though there is room for improvement in SEO and accessibility compliance. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms from abuse. However, it lacks explicit security headers and a dedicated security policy or incident response page. Privacy compliance is basic, with privacy and cookie policies present but no active cookie consent mechanism. No vulnerabilities or exposed sensitive data were detected. Overall, the website is a trustworthy and professional municipal portal with a solid business credibility score. Recommendations include enhancing security headers, implementing cookie consent, and adding explicit terms of service and security policies to improve compliance and user trust.

M

Město Žirovnice

zirovnice.cz

46

The website represents the official online presence of Město Žirovnice, a municipal government entity in the Czech Republic. It provides comprehensive information about local administration, cultural events, tourism, and public services, targeting residents and visitors alike. The site is well-structured with clear navigation and includes social media integration to enhance community engagement. The business model is focused on public service and information dissemination, positioning it as a trusted local government resource. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It incorporates Google reCAPTCHA for form security and Google Translate for multilingual support. The site is mobile-optimized and accessible, with moderate performance. However, there is room for improvement in implementing advanced security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, indicating a baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests opportunities to enhance transparency and compliance. Overall, the site maintains a good security standard suitable for its public service role. The overall risk assessment is low, with the site demonstrating legitimacy, trustworthiness, and compliance with basic privacy regulations. Strategic recommendations include implementing security headers, adding clear security and incident response policies, enabling cookie consent banners, and maintaining regular security audits to strengthen the security posture and user trust.

M

Město Habry

habry.cz

44

The website www.habry.cz serves as the official municipal portal for the town of Habry in the Czech Republic. It provides residents and visitors with essential information including municipal news, official documents, event calendars, and contact details. The site targets local citizens and stakeholders interested in town governance and community activities. The business model is that of a government service portal, focusing on transparency and public communication. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for multilingual support. The site is mobile-optimized and accessible, with a moderate performance profile. However, some modern security headers appear to be missing, and no advanced analytics or tracking services are detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, indicating a baseline security posture. There is no evidence of exposed sensitive data or vulnerabilities in the visible content. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in compliance and transparency. Overall, the website is a trustworthy and professional municipal portal with good content quality and user experience. The lack of WHOIS data reduces domain trust slightly but does not detract significantly from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing detailed security and privacy policies, and maintaining regular audits of third-party scripts to strengthen the security posture.

M

Město Pelhřimov

mestopelhrimov.cz

44

The website mestopelhrimov.cz serves as the official digital presence for the city of Pelhřimov in the Czech Republic. It provides comprehensive information about municipal offices, cultural institutions, event calendars, tourist information, and various public services. The site targets residents, tourists, and local businesses, positioning itself as a key government portal for the region. The business model is typical for a municipal government, focusing on information dissemination and public service facilitation. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations such as Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for security and analytics. The CMS appears to be a custom solution (VismoWeb5) developed by WEBHOUSE, s.r.o. The site is mobile optimized, accessible, and includes a GDPR-compliant cookie consent mechanism. Performance is moderate, with room for improvement in security headers and technical optimizations. From a security perspective, the site uses HTTPS and integrates reCAPTCHA to mitigate automated abuse. However, no explicit HTTP security headers were detected, and no security.txt or incident response policies are published. The WHOIS data is unavailable, likely due to privacy protection, which is common for municipal domains. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is good but could be enhanced with additional headers and transparency. The overall risk assessment is low, with the site appearing legitimate and professionally maintained. Strategic recommendations include implementing security headers, publishing security and incident response policies, improving WHOIS transparency if possible, and continuing regular audits of third-party scripts. These steps will enhance trust, compliance, and security resilience.

M

Metropolitan University Prague

imup.cz

60

The website iMUP.cz is an academic and cultural portal affiliated with Metropolitan University Prague, providing news, events, and scholarly content primarily targeting students, researchers, and the academic community. The site reflects a medium-sized educational institution with a consistent brand presence and active engagement in academic discourse and cultural events. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and social media integrations, delivering a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit incident response information suggests room for improvement. Privacy compliance is basic, with privacy information available in Czech but lacking comprehensive multilingual policies. Overall, the domain appears legitimate and trustworthy, supported by its university affiliation and professional content.

C

Coworkies Ltd.

coworkies.com

66

Coworkies Ltd. operates a specialized online platform serving the coworking industry by providing a job board, directory, and networking services tailored to freelancers, startups, and coworking space operators. The company has positioned itself as a niche leader in coworking-related employment and community engagement, offering additional services such as recruitment, training, and salary surveys. The website is professionally designed with consistent branding and a clear focus on its target audience. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations such as Google Tag Manager and Cloudflare Insights for analytics and performance monitoring. The site is hosted behind Cloudflare, ensuring good performance and security. Mobile optimization and SEO practices are well implemented, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS domain registration data is a notable concern, impacting trustworthiness despite the professional web presence. Overall, Coworkies presents a credible and functional platform with moderate risk due to domain registration opacity. Strategic improvements in security transparency and domain legitimacy verification are recommended to enhance trust and compliance.

D

DigitalPA

concorsidiprogettazione.it

41

DigitalPA operates a specialized SaaS platform named Gara Spot, focused on managing online design competitions and telematic procurement procedures primarily for public administrations and companies in Italy. The platform supports the entire competition lifecycle with compliance to relevant regulations, emphasizing security, anonymity, and procedural correctness. The company positions itself as a leader in the Italian e-procurement and design competition market, offering both software and expert consultancy services. Technically, the website employs modern web technologies including Bootstrap, jQuery, and privacy-conscious analytics via Matomo, complemented by a LiveChat support widget. The site is mobile-optimized and well-structured, providing a professional user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is partially addressed with a privacy policy present but lacking a cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

D

DigitalPA

affidamentiegare.it

68

Affidamenti e Gare is a specialized e-procurement platform developed by DigitalPA, targeting Italian public administrations to streamline procurement processes below EU thresholds. The platform offers comprehensive services including CIG requests, automated ANAC form management, and compliance with transparency obligations. Positioned as a leading solution in Italy, it benefits from DigitalPA's over 20 years of experience and ISO certifications, reinforcing its credibility and reliability. Technically, the website is built on WordPress with a modern theme and integrates advanced tools like Google reCAPTCHA Enterprise and Matomo analytics, reflecting a mature digital infrastructure. Security practices are solid, with HTTPS enforced and certifications in place, though some HTTP security headers could be improved. Privacy compliance is an area for enhancement, as explicit privacy and cookie policies are not evident. Overall, the website presents a professional, trustworthy, and user-friendly interface tailored to its niche audience.

DigitalPA operates the website www.centraliunichedicommittenza.it, offering a comprehensive, AGID-certified e-procurement software suite tailored for Centrali Uniche di Committenza (CUC) and qualified contracting authorities in Italy. The platform supports supplier registers, electronic tenders, and centralized procurement management, targeting public sector entities seeking compliance and efficiency in procurement processes. The website positions DigitalPA as a leading provider in the Italian public procurement software market, emphasizing regulatory adherence and integration with national systems such as ANAC and DURC. Technically, the site is built on WordPress with the Avada theme, leveraging modern web technologies and privacy-respecting analytics (Matomo). Security posture is strong with HTTPS, security headers, and reCAPTCHA Enterprise, though explicit security policies and incident response contacts are not published. Overall, the site is professional, well-structured, and trustworthy, with a clear focus on government clients and compliance.

O

Obec Želiv

obeczeliv.cz

44

Obec Želiv operates an official municipal website serving the residents and visitors of the Želiv municipality in the Czech Republic. The website provides comprehensive local government information, including news, official documents, event calendars, and contact details. It targets local citizens and stakeholders seeking municipal services and updates. The business model is public service oriented, focusing on transparency and community engagement. The website is well-positioned as the authoritative source for municipal information in the region.

M

Memory Computers s.r.o.

vysocinawest.cz

54

Vysočina West is a regional tourism promotion website focused on the Vysočina West area in the Czech Republic. It provides comprehensive information about tourist attractions, activities, accommodation, gastronomy, and cultural events, targeting tourists and visitors interested in exploring this region. The website is supported by local municipalities and government programs, indicating a strong regional partnership and official backing. The business model centers on destination marketing and tourism promotion, with a small company size and recent domain registration in 2021. Technically, the website uses a modern JavaScript stack including jQuery, Swiper, Google Tag Manager, and Google Translate for multilingual support. The hosting is provided by Wedos, a Czech hosting provider consistent with the domain registrar. The site demonstrates good mobile optimization and basic accessibility, with moderate performance. SEO optimization is basic but present. From a security perspective, the site uses HTTPS and integrates Google services securely. However, it lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Incident response and vulnerability disclosure mechanisms are absent. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively serves its purpose as a regional tourism portal but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

A

Agentura Inforpres, s.r.o.

infotherma.cz

60

Infotherma.cz is the official website for INFOTHERMA, a well-established international exhibition focused on heating, energy savings, and renewable energy sources. The event is organized by Agentura Inforpres, s.r.o., a Czech company with a long history dating back to 2000. The website serves as a comprehensive portal for visitors and exhibitors, providing registration, event information, media resources, and partner details. The site is professionally designed with clear navigation and a focus on the energy sector, targeting industry professionals and stakeholders interested in energy efficiency and sustainable technologies. Technically, the website uses modern web technologies including Google Tag Manager and Google Analytics for tracking, served via a reputable Czech hosting provider REG-ZONER. The site is mobile-optimized and loads quickly, with a cookie consent mechanism compliant with GDPR requirements. The CMS platform is ISSA CMS, a specialized content management system. While security headers are not explicitly detected, HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were found. From a security perspective, the site demonstrates good practices such as cookie consent and HTTPS usage but lacks publicly available security policies or incident response contacts. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and security maturity. The WHOIS data confirms the domain's legitimacy and long-term registration consistent with the business's history. Overall, Infotherma.cz is a credible, professional website supporting a niche energy exhibition business. It maintains good privacy compliance and technical standards but could enhance its security posture by publishing formal security policies and improving security headers. The site is safe for general audiences with no adult or questionable content.

S

Sdružení oboru vodovodů a kanalizací ČR, z.s.

vystava-vod-ka.cz

56

The website vystava-vod-ka.cz represents the international water industry exhibition 'VODOVODY-KANALIZACE' (VOD-KA), a significant event in Central Europe focused on water supply and sewerage technologies. The event is organized by Sdružení oboru vodovodů a kanalizací ČR, z.s., with operational support from Exponex, s.r.o. The site provides detailed information about the exhibition, including past event summaries, exhibitor catalogs, and contact details. The business model centers on event organization and industry networking, targeting professionals and companies in the water sector. The website content is professionally presented in Czech, with good navigation and mobile optimization.

C

czech-raildays.cz

czech-raildays.cz

48

czech-raildays.cz is a Czech language online magazine dedicated to providing comprehensive information about railway transport in the Czech Republic, including news, history, technology, and societal topics. The site targets railway enthusiasts and the general public interested in transportation and related fields. It operates primarily as a content publishing platform monetized through advertising, notably Google Adsense. The website demonstrates a moderate level of digital maturity with a clean design, good navigation, and mobile optimization. It uses modern web technologies including Google Fonts and Matomo analytics for user tracking and performance measurement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. However, no explicit security or incident response policies are published. The domain WHOIS data shows a recent or future creation date, which is unusual but likely a data anomaly. Overall, the website is professional, trustworthy, and serves a niche media market effectively.

V

Veletrhy Brno, a.s.

amper.cz

66

Veletrhy Brno, a.s. operates the AMPER trade fair, a leading international event in the fields of electrotechnics, electronics, and energy in the Czech Republic and Slovakia. The website showcases a professional and comprehensive platform for exhibitors and visitors, featuring detailed event information, multimedia galleries, and active social media engagement. The technical infrastructure employs modern web technologies and tracking tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data slightly reduces trust but does not detract from the overall legitimacy and professionalism of the site.

D

DTL - Danske Vognmænd

dtl.eu

64

DTL - Danske Vognmænd is a Danish transport association providing news, political advocacy, member benefits, consulting, and training services to transport companies and truck owners in Denmark. The website is professionally designed with clear navigation and is targeted at transport professionals and companies. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, FontAwesome icons, and tracking tools like Google Analytics and Facebook Pixel. Cookie consent is managed via CookieHub, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found in the provided content. Security posture is moderate with HTTPS enabled and no visible security headers, suggesting room for improvement in security best practices. Overall, the website is trustworthy and serves its business purpose effectively, but could enhance compliance and security transparency.

Geveko Markings Denmark A/S is a well-established company specializing in the development, production, and distribution of road marking materials and traffic safety solutions. With over 100 years of experience, the company serves a broad range of sectors including public traffic, parking, decorative surfaces, and accessibility. Their market position is strong within Denmark and internationally, supported by a consistent brand presence and comprehensive product offerings. The website reflects a professional and mature digital presence with clear navigation and relevant content tailored to business customers and public sector clients. Technically, the website is built on a modern CMS platform (Swift CMS) and employs contemporary web technologies such as Bootstrap, Swiffy Slider, and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, indicating a good level of digital maturity. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, includes important security headers, and manages cookie consent appropriately. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website and business demonstrate a solid security posture and compliance with privacy regulations such as GDPR. The absence of WHOIS data limits domain trust analysis, but the professional presentation and certifications like ISO9001 support legitimacy. Strategic recommendations include publishing a security policy, incident response information, and a vulnerability disclosure policy to further strengthen security and trust.

C

CS-BETON s.r.o.

csbeton.cz

63

CS-BETON s.r.o. is a Czech-based medium-sized manufacturing company specializing in the production of concrete paving stones and other concrete elements for garden and transport infrastructure. Established since 1992, the company targets construction firms, municipalities, and homeowners with a diversified product portfolio and technical support services. The website reflects a professional and consistent brand presence with clear navigation and relevant content. Technically, the site uses modern web technologies including Google Tag Manager and Google Maps API, with good mobile optimization and SEO practices. Security posture is moderate, with cookie consent mechanisms in place but lacking explicit security headers and incident response information. WHOIS data is unavailable, which limits domain trust verification, but the website content and contact details support legitimacy. Overall, the site is safe, business-focused, and well-structured, scoring 75 out of 100 in AI evaluation.

D

Das Bundesministerium für Verkehr

bmv.de

65

The Bundesministerium für Verkehr (BMV) website serves as the official portal for the German Federal Ministry of Transport, providing comprehensive information on transportation and mobility topics. The site targets the general public and stakeholders in the transport sector, offering policy updates, infrastructure information, and mobility initiatives. The website is positioned as a key government authority in Germany's transportation domain, reflecting an enterprise-level operation with consistent branding and good content quality. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with some use of local storage and XMLHttpRequest for dynamic content loading. While the site is accessible over HTTPS and includes structured metadata and Open Graph tags, it lacks explicit privacy and cookie policies, and no advanced frameworks or CMS were detected. Mobile optimization and accessibility are basic but functional. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data, but lacks visible security headers and formal security policies. Tracking via etracker scripts indicates moderate user tracking without clear consent mechanisms, suggesting room for improvement in privacy compliance. WHOIS data aligns with a legitimate government entity, reinforcing trustworthiness. Overall, the site presents a professional and trustworthy front for the ministry but should enhance privacy disclosures, cookie consent, and security headers to improve compliance and user trust. Strategic recommendations include implementing comprehensive privacy and cookie policies, deploying security headers, and enhancing mobile and accessibility features.

Mouser.cz is a small Czech IT service provider specializing in custom development and management of enterprise information systems, web applications, and network infrastructure. The company offers services including domain registration, web hosting management, LAN network construction, and computer repairs. The website clearly states it is not affiliated with the global Mouser Electronics company, reducing brand confusion. The technical infrastructure is based on PHP, MySQL, HTML5, and JavaScript, hosted likely with WEDOS, a Czech hosting provider. The website is basic in design and content, with minimal SEO and accessibility features. Security posture is weak, with no detected HTTPS or security headers, and no published privacy or cookie policies, indicating compliance gaps. Contact information is clearly provided, but no forms or social media presence is evident. Overall, the site is functional but lacks modern security and privacy best practices.

A

Acord, z.s.

acord-spolek.cz

57

Acord, z.s. is a small Czech non-profit organization focused on cultural activities including theater and music, primarily serving the local community of Slatiňany. The organization engages both children and adults in theatrical performances, family events, and charitable concerts, emphasizing community involvement and cultural enrichment. Their business model relies on sponsorships and donations, with transparent public donation accounts and a clear contact presence on their website. Technically, the website is built on the Webnode CMS platform and utilizes Amazon Cloudfront CDN for content delivery. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. The presence of Google Tag Manager indicates moderate user tracking and analytics capabilities. However, the site lacks advanced security headers and comprehensive privacy documentation. From a security perspective, the website enforces HTTPS and implements a cookie consent banner, which are positive indicators. However, the absence of security headers and privacy policies represents compliance gaps, particularly under GDPR. The missing WHOIS data reduces domain trustworthiness, though the website content and contact details suggest a legitimate small non-profit entity. Overall, the security posture is moderate but could be improved with better policy transparency and technical safeguards. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and security posture. The website is safe for general audiences and does not contain any adult or questionable content.

A

AdvertServe

advertserve.com

64

AdvertServe is a mature, cloud-hosted ad management platform targeting B2B and niche publishers with direct sales teams. The company offers a comprehensive suite of ad serving, targeting, tracking, and real-time reporting services, including video streaming and VAST/VPAID support. With a claimed 25+ years of experience and a customer base exceeding 30,000 sites globally, AdvertServe positions itself as a reliable and feature-rich solution in the ad tech industry. The platform emphasizes uptime reliability, AI-powered monitoring, and free technical support to differentiate itself in a competitive market. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, Bootstrap, and integrates Google Fonts and Font Awesome for styling. It uses Google Tag Manager and Pingdom for analytics and performance monitoring. The site is mobile-optimized with good SEO practices and a clear navigation structure, providing an excellent user experience. However, some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses secure asynchronous ad tags. The contact form includes validation and anti-spam measures. Despite these strengths, the absence of WHOIS data for the domain is a notable concern, as it conflicts with the company's claimed long operational history. Additionally, the site lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for trust and compliance. Overall, AdvertServe presents as a professional and trustworthy business with a strong technical foundation and good privacy compliance. The main risk lies in the domain registration opacity, which should be investigated further to ensure legitimacy. Strategic improvements in security transparency and WHOIS data clarity would enhance trust and reduce potential risks.

E

Event Engine CMS Ltd

eventengine.tv

66

Event Engine CMS Ltd is a specialized web development company focused on delivering custom web applications and software solutions for the events industry. Founded in 2016 and based in Great Britain, the company offers a range of products including a CMS platform (Rondayvoo CMS), live streaming and networking solutions (Rondayvoo Live), and AI-powered content assistants (Rondayvoo AI). Their market position is that of a niche provider trusted by notable event brands and professional conference organizers. The website reflects a professional and consistent brand image with excellent content quality and clear service offerings. Technically, the website is built on WordPress using modern frameworks such as the Bricks theme builder and The SEO Framework plugin. It employs standard web technologies including JavaScript, jQuery, and integrates Google Analytics and Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, though performance is moderate. Hosting appears to be via NameCheap, consistent with the registrar information. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, the contact form's Google reCAPTCHA implementation is broken due to an invalid site key, which poses a risk of spam. Additionally, security headers are not detected, and there is no visible incident response or vulnerability disclosure information. Privacy and cookie policies are present and appear GDPR compliant. Overall, the website demonstrates a solid business credibility and technical maturity with minor security and compliance gaps. Strategic improvements in security controls and transparency would enhance trust and reduce risk.

W

WITRA Service GmbH

witra-wittenberg.de

62

WITRA Service GmbH is a regional property service provider based in Lutherstadt Wittenberg, Germany, specializing in house maintenance, cleaning, green area care, and emergency services. As a wholly owned subsidiary of WIWOG mbH, it leverages strong local partnerships to deliver comprehensive property-related services primarily to residential property owners and housing companies. The website is professionally designed, mobile-optimized, and provides clear contact channels including phone, email, and a contact form. The technical infrastructure is based on the CIDEMOS CMS platform, with modern web technologies and a cookie consent mechanism ensuring GDPR compliance. Security posture is adequate with HTTPS and CSRF protections, though additional security headers could enhance protection. Overall, the site reflects a trustworthy and credible business presence with no signs of malicious activity or content blocking.

G

Gesellschaft für Wohneigentum mbH Wittenberg

wigewe.de

62

Gesellschaft für Wohneigentum mbH Wittenberg (WIGEWE) is a municipally owned medium-sized real estate service provider founded in 1993, specializing in property management, rental, sales, and accounting services primarily in Lutherstadt Wittenberg and surrounding regions. The company manages a significant portfolio including residential, commercial, and special properties, and offers additional services such as measurement and remote reading of consumption data. The website reflects a professional and trustworthy presence with clear contact channels and comprehensive service descriptions. Technically, the site is built on the CIDEMOS CMS platform, employs modern web standards, and integrates third-party services like Google Maps and YouTube. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and consent dialogs. Overall, the site demonstrates good digital maturity and business credibility.

S

Studio Kai Bergmann

kai-bergmann.com

62

Studio Kai Bergmann is a small photography business based in Leipzig, Germany, specializing in editorial, corporate, and portrait photography services primarily targeting companies, brands, and agencies in central Germany. The website serves as a professional portfolio showcasing their work and provides clear contact options including email and phone. The business appears well-positioned regionally with a focused service offering and a consistent brand presentation. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as JavaScript and CSS. It is mobile-optimized and includes basic SEO and accessibility features. Performance is moderate, typical for a Squarespace hosted site. The technical infrastructure is stable but could benefit from enhanced security configurations such as DNSSEC and additional HTTP security headers. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and several recommended security headers, which could improve its resilience against certain attacks. Privacy compliance is addressed with a cookie consent banner and a privacy policy in German, indicating GDPR awareness. No incident response or vulnerability disclosure information is present. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security hardening and adding terms of service or security policies would enhance trust and protection.