Security Directory

A

Avalon logo high res

avalonwaterways.co.za

65

Avalon Waterways South Africa operates as a specialized river cruise provider offering luxury Suite Ships® with panoramic suites for travelers interested in Europe, Asia, and other destinations. The company is part of Group Voyagers, Inc, indicating a well-established parent organization. The website is professionally designed with a focus on user experience, mobile optimization, and clear navigation, targeting travel enthusiasts seeking premium river cruise experiences. Technically, the site employs modern frameworks such as Angular, integrates Google Tag Manager for analytics, and uses Osano for cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response information are not publicly disclosed. WHOIS data is unavailable due to privacy protection, which is justified for this business type. Overall, the website presents a trustworthy and professional front with moderate to high compliance and security standards.

G

Group Voyagers, Inc

avalonwaterways.co.nz

64

Avalon Waterways is a specialized river cruise operator focusing on premium suite ships offering panoramic views primarily in Europe and Asia. The company is positioned as a medium-sized player in the transportation and hospitality sectors, operating under the parent company Group Voyagers, Inc. Their website reflects a professional and consistent brand image with a clear focus on travel services. Technically, the site employs modern web technologies including Angular, Google Tag Manager, and Osano for consent management, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not published. The absence of WHOIS data for the domain is a concern but is somewhat mitigated by the professional presentation and known parent company association. Overall, the website is trustworthy and well-constructed, serving its target audience effectively.

G

Group Voyagers, Inc

avalonwaterways.in

65

Avalon Waterways is a specialized river cruise operator offering luxury Suite Ships® with panoramic suites, targeting travelers interested in European, Asian, and other river cruise destinations. The website reflects a medium-sized travel business with a consistent brand presence and a parent company named Group Voyagers, Inc. The technical infrastructure leverages modern web technologies including Angular, Google Tag Manager, and Osano for consent management, indicating a mature digital presence. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a positive user experience and business credibility.

G

Group Voyagers, Inc

avalonwaterways.ca

64

Avalon Waterways is a Canadian-based luxury river cruise operator specializing in suite ships with panoramic views, primarily serving the European and Asian travel markets. The company is part of Group Voyagers, Inc, a recognized entity in the travel industry. Their website demonstrates a mature digital presence with modern technologies such as Google Tag Manager, Osano for consent management, and Azure CDN hosting. Privacy and cookie policies are prominently implemented, reflecting compliance with GDPR and other privacy regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

C

Centrum Jana Pawła II “Nie lękajcie się”

janpawel2.pl

39

The website janpawel2.pl represents the Centrum Jana Pawła II “Nie lękajcie się”, a cultural and religious institution dedicated to the legacy of Saint John Paul II. It provides information about the center, sanctuary, and museum, targeting a general audience interested in religious and cultural heritage in Poland. The site is built on WordPress with modern plugins such as Revolution Slider and uses HTTPS for secure communication. The technical infrastructure is moderate in performance with good mobile optimization but lacks some advanced security headers and DNSSEC. Privacy compliance is addressed with a cookie consent banner and a dedicated privacy policy page, though terms of service and explicit contact information are missing. Overall, the site is professional and trustworthy but could improve security and transparency aspects.

S

Spirituální konzultace a Energetické léčení - Lubosh Novak

spiritualnikonzultace.cz

45

The website 'Spirituální konzultace a Energetické léčení - Lubosh Novak' offers specialized spiritual consultation and energy healing services primarily targeting individuals seeking deep inner transformation. The business operates in a niche wellness and spiritual sector within the Czech Republic, providing a range of services including individual consultations, group sessions, family constellation work, and energetic cleansing of spaces. The site presents a professional image with clear service descriptions and accessible contact options, including email, phone, and a secure contact form with CAPTCHA protection. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, WPBakery Page Builder, and Complianz GDPR for compliance. It employs Google Analytics for visitor tracking and uses HTTPS to secure communications. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices and basic accessibility features. However, some security headers are missing, and no explicit security policy or vulnerability disclosure mechanisms are present. From a security perspective, the site demonstrates a reasonable posture with HTTPS enforcement and cookie consent mechanisms. The contact form includes CAPTCHA to mitigate spam. The absence of WHOIS data for the domain is a notable concern, limiting the ability to fully verify domain legitimacy and ownership. No critical vulnerabilities or malicious content were detected in the analysis. Overall, the website is a credible and professional platform for spiritual and energy healing services, though improvements in domain transparency and security header implementation are recommended to enhance trust and security posture.

C

City-Air-Mobility s.r.o.

dron-port.cz

10

The website www.dron-port.cz represents City-Air-Mobility s.r.o., a small Czech company specializing in manufacturing and retailing professional drone landing platforms designed for safe takeoff and landing in challenging terrains. The company targets drone pilots including professionals in film, surveying, and rescue operations. The business model combines manufacturing with direct e-commerce sales through a WooCommerce-powered online shop. The website content is well-structured, professionally presented in Czech, and includes detailed product descriptions, contact information, and legal documents such as privacy policy and terms of service.

G

Grilování Olomouc

grilovaniolomouc.cz

10

Grilování Olomouc is a small hospitality business specializing in turnkey grilling events, corporate catering, and grill equipment rental primarily serving the Olomouc region in the Czech Republic. Founded in 2018, the company offers marinated meats and comprehensive event services, targeting both individual and corporate clients. The website reflects a professional local service with positive customer testimonials and clear contact information. Technically, the site is built on WordPress with common plugins such as Yoast SEO and MonsterInsights for analytics. While the site uses HTTPS and includes some privacy opt-out mechanisms, it lacks explicit privacy and cookie policies, which is a compliance gap. The WordPress version is outdated, posing potential security risks, and no advanced security headers are detected. Overall, the site is accessible without WAF or blocking mechanisms and contains no adult or questionable content, making it safe for general audiences.

F

FK Šternberk

fksternberk.cz

54

FK Šternberk is a local football club based in the Czech Republic, providing football training and match information for various age groups including youth and adult teams. The website serves as an information hub for club activities, match schedules, results, and team details. It targets football players, fans, and the local community, emphasizing youth development and community engagement. The business model is that of a non-profit sports club with a focus on football education and events. Technically, the website is built on WordPress with a modern plugin ecosystem including WPBakery Page Builder, WP Club Manager, and booking plugins. It uses Google Analytics for tracking with an opt-out mechanism. The site is mobile optimized and has good SEO practices, but performance is moderate. No hosting provider details were found. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and formal privacy and cookie policies, which are compliance gaps. The absence of WHOIS data reduces domain trust assessment, but the website content and social media presence support legitimacy. Overall, the site is safe for general audiences with no adult or explicit content. Strategically, the club should improve privacy compliance, implement security headers, and maintain regular updates to plugins and themes. Adding a security.txt file and formal incident response contacts would enhance security posture and trust.

M

MAS Střední Haná

masstrednihana.cz

10

MAS Střední Haná is a local action group operating in the Czech Republic's Střední Haná region, focusing on community-led local development and managing EU regional development programs. The organization acts as a partnership between public and private sectors to facilitate regional growth and project implementation. The website reflects a well-structured, content-rich platform targeting local municipalities and stakeholders, providing program information, news, and contact details. Technically, the site is built on WordPress with several plugins for content management, GDPR compliance, and analytics. While the site is mobile-optimized and user-friendly, it uses outdated WordPress and jQuery versions, which pose security risks. Security posture is moderate with HTTPS enforced and cookie consent mechanisms in place, but lacks advanced security headers and up-to-date software. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Recommendations include updating the CMS and libraries, enhancing security headers, and maintaining compliance documentation.

M

MX Style s.r.o.

mxstyle.cz

10

MX Style s.r.o. is a Czech small business specializing in the manufacturing and sale of highly durable motorcycle decals for enduro, motocross, supermoto, and quad bikes. The company offers both custom graphic design services and a selection of ready-made designs, targeting motorcycle enthusiasts primarily in the Czech Republic. The website is professionally designed, mobile-optimized, and uses WordPress with WooCommerce for e-commerce functionality. It integrates Google Analytics and other marketing tools for user tracking. Security posture is moderate with HTTPS enforced but lacks advanced security headers and explicit privacy and cookie policies. The WHOIS data is not publicly available, typical for CZ domains, but the website content and contact details indicate a legitimate business. Overall, the site provides a good user experience and clear business information but should improve privacy compliance and security best practices.

B

Bohuněk Vaňková Reality

bohunekvankova-reality.cz

56

Bohuněk Vaňková Reality is a small, professional real estate brokerage firm specializing in sales and rentals within the Vysočina region of the Czech Republic. The company emphasizes personalized service, modern marketing techniques including drone photography and 3D floor plans, and a strong client referral base. Their website reflects a well-structured, content-rich platform with clear contact information and client testimonials, positioning them as trusted local experts. Technically, the website is built on WordPress with modern plugins for SEO and GDPR compliance, including Yoast SEO and Complianz for cookie consent management. The site uses Bootstrap for responsive design and jQuery for interactivity, delivering a good user experience across devices. Performance is moderate with room for optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place; however, the absence of explicit security headers and incident response information suggests areas for improvement. The lack of WHOIS data reduces domain trustworthiness, though the website content and business details appear legitimate and professional. Overall, the site presents a credible and professional business front with good privacy compliance and user experience. Strategic improvements in security headers, domain transparency, and incident response readiness would enhance trust and resilience.

B

Belinus Art

belinusart.cz

10

Belinus Art is a small retail and service business based in the Czech Republic specializing in flooring, carpets, doors, terraces, and stairs, primarily serving the Olomouc region. The company emphasizes over 20 years of experience and offers expert consultation, installation, and interior design services. Their website is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, reflecting a moderate to good level of digital maturity. The site is well-structured, mobile-optimized, and includes clear contact information and social media presence, enhancing business credibility. From a security perspective, the website enforces HTTPS and uses Google reCAPTCHA for form protection. It includes a cookie consent mechanism compliant with GDPR. However, some security headers are missing or not explicitly detected, suggesting room for improvement in security hardening. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data limits domain trust verification, but the website content and social media presence support legitimacy. Overall, the website presents a professional and trustworthy digital front for Belinus Art, with good content quality and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

K

Kácím Stromy - Štěpán Martinek

kacimstromy.cz

9

Kácím Stromy - Štěpán Martinek is a small regional business specializing in risk tree felling, wood harvesting, and wood product manufacturing in the Olomouc region of Czechia. The website presents a professional and well-structured digital presence built on WordPress, utilizing common plugins such as Yoast SEO and WPBakery Page Builder. The site is mobile-optimized and includes social media integration and Google Analytics tracking. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, which are important for GDPR compliance. Contact information is limited to a phone number, with no email or physical address provided. Overall, the website serves its business purpose effectively but would benefit from enhanced compliance and security features.

C

Cordesora s.r.o.

cordesora.cz

54

Cordesora s.r.o. operates a specialized internal medicine outpatient clinic in Olomouc, Czech Republic, focusing on angiological and cardiological care. Led by MUDr. Markéta Kaletová, the clinic offers a range of diagnostic and therapeutic services including ultrasound examinations, echocardiography, EKG, and nutritional counseling. The website is professionally designed, mobile-optimized, and provides clear contact information and service descriptions, targeting patients in the local region. The business maintains contracts with major Czech health insurance companies and also offers direct payment options for clients without insurance coverage. Technically, the website is built on WordPress using common plugins such as WPBakery Page Builder and Complianz GDPR for cookie consent management. It uses modern web technologies including Bootstrap and jQuery, and enforces HTTPS for secure communications. While the site lacks some advanced security headers, it demonstrates a good baseline security posture and GDPR compliance through its cookie policy and consent mechanisms. Security-wise, no critical vulnerabilities or malware indicators were found. However, the absence of WHOIS registration data limits the ability to fully verify domain legitimacy and ownership, which is a notable risk factor. The site does not provide explicit security policies, incident response contacts, or vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, Cordesora presents as a credible and professional healthcare provider with a well-maintained digital presence. Strategic improvements in security headers, domain registration transparency, and published security policies would strengthen its security posture and trustworthiness.

D

Damgaard

damgaard.cz

10

Damgaard Consulting s.r.o. is a Czech-based small consulting firm specializing in energy efficiency and industrial process optimization. Their website presents a professional image with detailed descriptions of their services, including energy audits, technological consulting, and energy concepts for new and existing facilities. The company targets businesses seeking to improve energy efficiency and reduce costs through practical and theoretical expertise. Technically, the website is built on WordPress with modern plugins such as WPBakery Page Builder and Yoast SEO, and it uses Google Analytics with IP anonymization to track user interactions. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses a cookie consent mechanism compliant with GDPR, but lacks explicit security headers and a security.txt file. The WHOIS data is unavailable, which reduces transparency and trustworthiness, but the website content and contact information appear legitimate and professional. Overall, the site scores well in content quality, technical implementation, privacy compliance, and business credibility, with room for improvement in security best practices and domain registration transparency.

J

JURIX advokátní kancelář s.r.o.

jurix.legal

47

JURIX advokátní kancelář s.r.o. is a Czech legal services provider specializing in supporting small and medium-sized enterprises and organizations with a broad range of legal services including contract preparation and review, debt collection, administrative law, employment law, commercial law, criminal law, immigration law, and tax law. The firm positions itself as a reliable partner for resolving legal issues with a focus on practical and economically sound solutions. The website is professionally designed, well-structured, and optimized for Czech-speaking audiences, with clear navigation and comprehensive service descriptions. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Yoast SEO, ensuring a modern and manageable infrastructure. The site includes GDPR-compliant cookie consent mechanisms and privacy policies, reflecting a good level of digital maturity. Performance and mobile optimization are adequate, though some improvements in accessibility and security headers could enhance the overall technical posture. From a security perspective, the site uses HTTPS but lacks visible advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. The absence of a security.txt file and incident response contacts suggests room for improvement in security transparency and readiness. WHOIS data is unavailable due to TLD restrictions, but the website content and business information are consistent and professional, supporting legitimacy. Overall, the website presents a trustworthy and professional legal service provider with a solid digital presence. Strategic enhancements in security practices and incident response transparency would further strengthen its risk profile and client trust.

P

Půjčovna nářadí Pohořelice

naradi-pujcovna.cz

56

Půjčovna nářadí Pohořelice is a local Czech business specializing in the rental of professional quality tools and construction equipment. The company targets DIY enthusiasts, builders, and renovators primarily in Pohořelice and surrounding areas, offering both pickup and delivery services. Their website is professionally designed using WordPress and WooCommerce, providing a clear catalog of products and categories. The business maintains an active social media presence, notably on Facebook, and provides transparent contact information including phone, email, and physical address. Technically, the website leverages modern CMS and e-commerce frameworks with SEO optimization and GDPR-compliant cookie consent mechanisms. Google Analytics is used for visitor tracking, and the site is served over HTTPS ensuring secure communication. However, some security best practices such as implementing security headers are missing, and no WHOIS data is available, which slightly impacts trustworthiness. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with cookie policies and consent banners. The absence of incident response or vulnerability disclosure information is noted but not uncommon for small businesses. Overall, the website and business appear legitimate and professional, serving a niche local market with a focused business model. Strategic improvements in security headers and transparency around domain registration could enhance trust and security posture further.

Š

Šťastné finance

stastnefinance.cz

41

Šťastné finance is a Czech Republic based small financial advisory company founded in 2018, offering personalized financial services including investments, insurance, mortgages, and loans. The company positions itself as a client-focused intermediary providing access to both public and exclusive investment opportunities. The website is built on WordPress with modern plugins and frameworks, delivering a professional and user-friendly experience with good mobile optimization and SEO. Security posture is solid with HTTPS and secure forms, but lacks explicit security headers and formal privacy and cookie policies, indicating room for compliance improvement. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website is trustworthy and well-structured but should enhance privacy compliance and security best practices to strengthen user trust and regulatory adherence.

LUNETA reality s.r.o. operates as a regional real estate agency specializing in the Olomouc region, offering property sales, rentals, and mortgage mediation services through its sister company. The website is professionally designed using WordPress with common plugins and integrates social media and analytics tools. Privacy compliance is well addressed with GDPR cookie consent and a privacy policy. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and vulnerability disclosure mechanisms. Overall, the site presents a trustworthy business front with room for improvement in security and domain transparency.

W

WP Hosting ® - IT & WP HOST s.r.o.

wp-hosting.cz

55

WP Hosting ®, operated by IT & WP HOST s.r.o., is a Czech-based hosting provider specializing in fast WordPress hosting solutions. The website presents a professional and modern design targeting WordPress users seeking reliable hosting services. The company appears to focus on the Czech market with localized content and services tailored for WordPress websites. The technical infrastructure leverages common web technologies including WordPress CMS, Google Fonts, FontAwesome, and analytics tools such as Google Analytics and Tag Manager. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is basic with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy and cookie policies are not detected, indicating potential compliance gaps. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness but does not negate the professional presentation of the site. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security transparency.

I

IDS – Inženýrské a dopravní stavby Olomouc a.s.

ids-olomouc.cz

57

IDS – Inženýrské a dopravní stavby Olomouc a.s. is a well-established Czech construction company specializing in engineering and transportation infrastructure projects such as bridges, railways, roads, and water management. With over 25 years of experience and a workforce exceeding 200 employees, the company holds ISO 9001, ISO 14001, and ISO 45001 certifications, underscoring its commitment to quality, environmental management, and occupational health and safety. The company primarily serves governmental and regional clients across the Czech Republic, positioning itself as a trusted regional leader in its sector. Technically, the website is built on WordPress using modern themes and plugins, including GeneratePress, Contact Form 7, and CleanTalk Anti-Spam. It integrates Google Tag Manager and Hotjar for analytics and user behavior tracking, complemented by a comprehensive cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and employs anti-spam protections and cookie consent banners. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data for the domain is a notable concern, impacting domain trustworthiness and transparency. Overall, IDS Olomouc presents a professional and trustworthy online presence aligned with its business stature. Strategic recommendations include enhancing security headers, verifying domain registration transparency, and publishing a vulnerability disclosure policy to further strengthen security posture and stakeholder trust.

S

Správa nemovitostí Olomouc, a.s.

sno.cz

54

Správa nemovitostí Olomouc, a.s. is a property management company based in Olomouc, Czech Republic, specializing in managing private houses, repairs, maintenance, non-residential premises, and hotel-type accommodations. The company targets property owners and tenants within the Olomouc region, offering rental services and long-term housing solutions. The website reflects a professional local business with consistent branding and clear contact information. Technically, the site is built on WordPress using WPBakery Page Builder and Yoast SEO, with modern frontend libraries such as Owl Carousel and Isotope enhancing user experience. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is reasonable for this business type. Overall, the website is trustworthy, safe, and professionally maintained, though improvements in privacy compliance and security headers are recommended.

D

Delta Služby s.r.o.

deltasluzby.cz

61

Delta Služby s.r.o. is a professional B2B facility services provider based in Olomouc, Czech Republic, specializing in cleaning, security, facility management, laundry services, and employment solutions for persons with disabilities. The company serves a broad range of corporate clients, including prominent state institutions and medium-sized enterprises, boasting over 30 years of experience and more than 200 satisfied clients. Their market position is strong within the Moravian region, supported by ISO 9001 certification and a reputation for reliability and quality. Technically, the website demonstrates a modern and mature digital infrastructure, utilizing React-based technologies, PWA features, and Google Fonts. It is hosted on a reputable Czech hosting provider with fast performance, excellent mobile optimization, and good accessibility. SEO best practices are well implemented, including comprehensive metadata, Open Graph tags, and structured JSON-LD data. From a security perspective, the site enforces HTTPS, includes important security headers, and employs secure form inputs. However, it lacks a publicly available security policy and incident response contact details, which are recommended for enhanced trust and compliance. Privacy compliance is strong, with clear privacy and cookie policies and a consent mechanism aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-structured, with no signs of blocking or malicious content. Strategic recommendations include publishing a dedicated security policy, incident response information, and a vulnerability disclosure framework to further strengthen security posture and stakeholder confidence.