Security Directory

D

D-energy s.r.o.

d-energy.cz

47

D-energy s.r.o. is a Czech-based energy services provider specializing in projects that guarantee future savings through the Energy Performance Contracting method. Established in 2011, the company has invested over 650 million CZK in energy-saving projects and is a member of the Czech Association of Energy Service Providers (APES). Their key services include energy services and EPC, construction and delivery works, project documentation, design-build, energy management, and consulting services. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the website runs on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Complianz GDPR for cookie management. It integrates Google Tag Manager and Google Maps API for analytics and location services. Hosting and DNS are managed via REG-WEDOS and Cloudflare, ensuring reliable infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers are not visibly set in the HTML, and no published security policy or incident response contacts are found. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business claims, showing a mature and trustworthy online presence. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance the security posture and trustworthiness.

S

Special Service International Energy, a.s.

ssienergy.cz

56

SSI Energy is a Czech-based engineering and EPC company specializing in projects within the heating and industrial energy sectors. Founded in 2020 and part of the SSI Group, the company offers comprehensive services including energy unit construction, design & build, consulting, and EPC projects. Their website reflects a professional and consistent brand image targeting industrial clients seeking energy solutions. The company demonstrates a solid market position within the Czech energy engineering sector with a medium-sized operational scale. Technically, the website is built on WordPress and integrates modern tools such as Google Maps API, Google reCAPTCHA, Google Tag Manager, and Microsoft Clarity for analytics and user experience enhancement. The site is multilingual and optimized for mobile devices, providing a good user experience and SEO presence. Hosting and domain registration are consistent with the company's Czech business focus. From a security perspective, the site uses HTTPS with a strong SSL configuration and employs reCAPTCHA to protect forms. However, it lacks explicit security headers and published security policies or incident response information, which are areas for improvement. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Overall, SSI Energy's digital presence is professional and trustworthy, with moderate technical sophistication and good privacy practices. Strategic enhancements in security headers, incident response transparency, and accessibility could further strengthen their security posture and user trust.

S

Special Service International Technology, s.r.o.

ssitechnology.cz

56

SSI Technology, operating under Special Service International Technology, s.r.o., is a Czech-based company specializing in security technologies and integrated facility management services. The company offers a broad range of services including helpdesk support, analytical services, PCO/DPPC monitoring centers, and AI-enhanced video services. With over 35 years of market presence and a team exceeding 3000 professionals, SSI Technology holds a strong position in the security and facility management sector, targeting businesses and organizations requiring comprehensive security solutions. The company is part of the SSI Group holding, which adds to its credibility and market reach. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Microsoft Clarity, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, integrates Google reCAPTCHA for form protection, and implements cookie consent mechanisms, although it lacks explicit security policies and vulnerability disclosure pages. Overall, the website is professional, well-structured, and compliant with GDPR, reflecting a trustworthy and established business entity.

S

Special Service International Cleaning, s.r.o.

ssicleaning.cz

56

SSI GROUP, operating under Special Service International Cleaning, s.r.o., is a well-established integrated facility management company with over 35 years of experience, offering services such as cleaning, pest control, and green maintenance primarily in the Czech Republic. The website reflects a professional B2B service provider with a large team and a significant client portfolio. Technically, the site is built on WordPress with modern plugins and tracking tools, providing good SEO and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though some security headers and policies could be improved. The domain is relatively new compared to the business age, likely due to recent domain registration or rebranding under the SSI Group holding. Overall, the site is trustworthy, compliant with GDPR, and suitable for its target audience.

C

Czech facility a.s.

czechfacility.cz

56

Czech facility a.s. is a Czech Republic-based company specializing in comprehensive property management services since 2008. The company offers a broad range of services including building operation, energy management, technical servicing, physical security, occupational safety, cleaning, and greenery maintenance. Positioned as a leading provider in the Czech real estate management sector, it operates under the parent company SSI Group, enhancing its market credibility. The website is professionally designed, targeting local clients seeking reliable facility management solutions. Technically, the site employs modern web technologies including Google Tag Manager and Cloudflare Insights, ensuring moderate performance and good mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data reduces domain transparency but does not detract significantly from the overall trustworthiness given the professional presentation and clear business information. Overall, the website and business demonstrate a mature digital presence with room for enhanced privacy compliance and security best practices.

S

Special Service International Facility s.r.o.

ssifacility.cz

56

SSI Facility, operated by Special Service International Facility s.r.o., is a well-established facility management company in the Czech Republic with over 35 years of experience. The company offers comprehensive services including technical building management, maintenance, energy management, and safety compliance (BOZP). It serves a large client base with over 900 managed properties and a team exceeding 3000 professionals, positioning itself as a significant player in the real estate and facility management sector. The website reflects a professional and consistent brand image aligned with its parent company SSI Group. Technically, the website is built on WordPress and integrates modern tools such as Google Maps API, Google reCAPTCHA, Microsoft Clarity, and Google Tag Manager, ensuring a good level of digital maturity and user experience. Security-wise, the site enforces HTTPS and uses CAPTCHA for form protection, but lacks explicit security headers and a published security policy, which are areas for improvement. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy, demonstrating adherence to GDPR requirements. Overall, the website is trustworthy, content-rich, and professionally maintained, with minor gaps in security documentation and domain age consistency. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and compliance.

S

Special Service International Security, s.r.o.

ssisecurity.cz

57

SSI Security is a well-established security services provider operating since 1990, offering comprehensive physical security, detective services, security assessments, and technology solutions primarily in the Czech Republic. The company is part of the SSI Group holding and serves a large client base with over 3000 professionals and 900 managed sites. The website reflects a mature digital presence built on WordPress, integrating modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The domain is recently registered but consistent with the business identity, indicating a possible domain migration or new web presence. Overall, SSI Security demonstrates strong business credibility, professional web design, and good compliance with privacy regulations.

G

Grace Themes

gracethemes.com

65

Grace Themes is a specialized WordPress theme provider offering a wide range of premium and free themes optimized for responsiveness, SEO, and WooCommerce integration. Established in 2015, the company targets designers, agencies, freelancers, and small to medium online businesses, positioning itself as a reliable and trusted theme vendor with over 90,000 active installs and millions of downloads. The website demonstrates a mature digital infrastructure leveraging WordPress CMS, WooCommerce, Yoast SEO, CleanTalk anti-spam, and performance optimization tools like WP Rocket and Perfmatters. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Security posture is strong with HTTPS, anti-spam measures, and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Overall, the site is professional, trustworthy, and user-friendly, supported by positive Trustpilot reviews and clear contact channels.

E

Ewalds

ewalds.sk

61

Ewalds.sk is a well-established Slovakian e-commerce retailer specializing in home accessories and decorations, operating since 1997. The company offers a broad range of products with over 3000 decorations in stock and supports both retail consumers and wholesale buyers. Their business model combines online sales with a physical showroom, enhancing customer trust and market presence. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience. Technically, the site leverages modern JavaScript frameworks (Vue.js), integrates Google Tag Manager, Google Analytics, Hotjar, and Facebook Pixel for marketing and analytics, and uses AWS infrastructure. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR-aligned policies. Security posture is good with HTTPS enforced and CSRF protections, though some HTTP security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a mature digital presence with strong business credibility and compliance.

A

Autoplachty Gejza Vajda s.r.o.

autoplachtyvajda.sk

44

Autoplachty Gejza Vajda s.r.o. is a Slovak company established in 1992 specializing in manufacturing autoplachty (truck tarpaulins), large-format digital printing, and rental of storage halls. The company serves customers primarily in Slovakia and Europe, offering tailored products with a focus on quality and innovation. Their website reflects a professional business with clear service offerings and contact information. Technically, the site uses modern web technologies including PHP, JavaScript, and CookieYes for cookie consent, and is built on the MODX CMS platform. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal security policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible online presence. Overall, the site demonstrates a solid digital maturity for a small manufacturing business.

R

Renovabis e.V.

renovabis.de

61

Renovabis e.V. is a well-established German non-profit organization dedicated to providing aid and support to people in Eastern Europe, focusing on social and pastoral renewal. Founded in 1993 by the German Bishops' Conference, it operates through donations, project funding, and educational initiatives. The website reflects a professional and trustworthy presence with comprehensive content, clear navigation, and consistent branding. It targets donors, partners, and communities interested in charitable work in Eastern Europe. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates third-party services such as Usercentrics for consent management, Google Tag Manager for analytics, and Algolia for search functionality. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be based in Germany, aligning with the organization's location. From a security perspective, the site enforces HTTPS and uses consent management to comply with GDPR. While explicit security headers are not detected, no vulnerabilities or exposed sensitive data were found. The organization demonstrates good privacy compliance with a clear privacy policy and cookie consent mechanism. Contact information is transparent and includes multiple channels. Overall, Renovabis presents a low-risk profile with strong business credibility and privacy practices. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture.

D

Darklace Limited

kvpzr.cz

47

Adell Casino is an online gambling platform operated by Darklace Limited, licensed in Cyprus. The website offers a variety of casino games including slots, live dealer games, jackpots, and video poker, targeting adult players primarily in Czech and German languages. The platform provides demo modes, multiple payment options, and various bonuses to attract and retain players. Technically, the site is built on modern frameworks such as Next.js and React, hosted behind Cloudflare DNS services, and shows moderate performance and good mobile optimization. However, the site lacks explicit privacy and terms of service pages, security headers, and incident response contact information, which are critical for compliance and trust. The WHOIS data shows a suspicious domain creation date in the future, which raises concerns about legitimacy. Overall, the site is functional and professional but requires improvements in security posture and compliance documentation.

Ř

Římskokatolická farnost Radešínská Svratka, Olešná na Moravě

pallotini-pastorace.cz

56

The website represents the Roman Catholic parishes of Radešínská Svratka and Olešná na Moravě, providing parishioners and visitors with comprehensive information about religious services, community events, and spiritual life. It serves as a local community hub with a focus on non-profit religious activities. The site is well-branded and consistent with the church's mission, targeting local Czech-speaking audiences. Technically, it uses a custom CMS platform (IS OMNIA) with modern frontend technologies like Bootstrap and jQuery, hosted under a reputable registrar and using Cloudflare DNS. The site is moderately performant and mobile-optimized but lacks some advanced accessibility features.

Římskokatolická farnost Fulnek is a small non-profit religious organization serving the Fulnek community in the Czech Republic. The website provides parishioners and visitors with information about religious services, announcements, events, and church tours. The site is built on WordPress and uses several plugins to enhance user experience, including sliders and portfolio galleries. The target audience is local parishioners and visitors interested in church activities. The organization has maintained the domain since 2010, reflecting a stable presence in the community. Technically, the website employs a standard WordPress infrastructure with common plugins such as Smart Slider 3 and Visual Portfolio. The site is hosted with a Czech registrar and uses HTTPS, ensuring secure communication. Performance is moderate with good mobile optimization, though accessibility and SEO could be improved. Analytics are implemented via Google Analytics, but no visible cookie consent or privacy policy is present, indicating compliance gaps. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks security headers and a formal privacy or cookie policy, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure mechanisms are evident. The domain registration details are consistent and legitimate, supporting the site's trustworthiness. Overall, the website is functional and professional for its purpose but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

368MEGA operates as an online gambling platform primarily targeting Indonesian users, offering a wide range of services including slot games, live casino, sportsbook, lottery, poker, and arcade games. The website positions itself as a trusted and comprehensive agent in the online gambling market with a focus on providing extensive game options and 24/7 customer service. The business appears to be medium-sized and founded in 2020, consistent with the domain registration data. Technically, the website employs modern tracking and marketing technologies such as Google Analytics, Facebook Pixel, TikTok Pixel, and LiveChat, and uses Cloudflare DNS services. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and professional but could improve transparency and security practices.

The website 'Kniha milosrdenství' is a small non-profit religious platform focused on Christian mercy and prayer, providing spiritual reflections, downloadable materials, and news updates primarily for the Czech Christian community. The domain is well-established since 2012 and hosted on Czech infrastructure, supporting its legitimacy and stable presence. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking but lacks modern CMS or advanced frameworks. Security posture is moderate with no visible security headers or privacy policies, and no HTTPS confirmation from the provided data, indicating room for improvement. Privacy compliance is low due to missing cookie and privacy policies and no consent mechanisms. Overall, the site is safe with no adult or questionable content, but it would benefit from enhanced security and privacy practices to improve trust and compliance.

P

Pěší pouť k Božímu milosrdenství - Pěší pouť

pout.cz

41

The website pout.cz is dedicated to organizing and providing information about the annual walking pilgrimage to Slavkovice, Czech Republic, focused on spiritual and religious activities related to Divine Mercy. The site targets a niche audience interested in religious pilgrimages and community events. The business model is non-commercial and community-driven, with offerings including event information, registration forms, and merchandise such as T-shirts. The domain is well established since 2006, supporting the site's legitimacy and history. Technically, the website uses a traditional HTML/CSS/JavaScript stack with jQuery libraries and embeds Google Forms for data collection. The site is hosted likely via the registrar Active24, a Czech hosting provider. The design and navigation are basic but functional, with moderate performance and limited mobile optimization. SEO and accessibility features are minimal but present. From a security perspective, the site uses HTTPS but lacks visible security headers and employs multiple versions of jQuery, which may introduce vulnerabilities. There are no privacy or cookie policies, and no explicit contact emails or phone numbers are provided, which impacts compliance and trust. The embedded Google Forms handle user data collection without visible privacy disclosures, representing a compliance gap. Overall, the website is safe and appropriate for general audiences, with no adult or questionable content. The domain registration data is consistent with the website's purpose and location. Strategic improvements in security headers, privacy compliance, and technical modernization would enhance the site's security posture and user trust.

S

Slavkovice, Svatyně Božího milosrdenství

slavkovice.cz

49

Slavkovice.cz is the official website of a religious pilgrimage sanctuary dedicated to Divine Mercy located in Slavkovice, Czech Republic. The site provides detailed information about church services, pilgrimage events, religious projects, and community activities, targeting pilgrims and the local Catholic community. The business operates as a non-profit religious entity with a focus on spiritual services and community engagement. Technically, the website employs modern frontend technologies including Bootstrap and jQuery, and is built on the FenomioFlow CMS platform. It is mobile responsive and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and formal privacy or terms of service pages. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, although the website content and contact information appear professional and trustworthy. Overall, the site scores well in content quality and business credibility but should improve transparency and security practices.

A

Apoštol Božího milosrdenství

apostol.cz

48

The website www.apostol.cz represents a small non-profit religious organization focused on promoting trust in Divine Mercy through a magazine and pilgrimages. The site content is primarily in Czech and targets a religious audience interested in Catholic spirituality and community events. The organization appears to have a stable presence since 2006, with partnerships to related religious entities. Technically, the website uses modern frontend technologies including Bootstrap 5 and jQuery, and is powered by the FenomioFlow CMS platform. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and a cookie consent mechanism implemented, but lacks visible security headers and a published privacy policy. No WHOIS data was found, which reduces trust signals but may be due to privacy protection. Overall, the site is safe, professional, and trustworthy for its niche audience.

M

Misijný sekretariát – pallotíni

pallotini.sk

44

Pallotíni is a Slovak non-profit mission secretariat focused on charitable projects primarily in Rwanda, Burkina Faso, and Madagascar. Their activities include supporting education, building religious and community centers, and aiding poor students to complete their studies. The organization targets donors, religious communities, and supporters interested in mission work. The website is built on WordPress with Yoast SEO and uses a moderate technical infrastructure hosted by Websupport. While the site is well-structured and content-rich, it lacks some advanced security headers and cookie consent mechanisms. The domain is well-established since 2005 with DNSSEC enabled, indicating a trustworthy presence. Overall, the site demonstrates good professionalism and trustworthiness but could improve in privacy compliance and security posture.

M

Multifamily Executive

multifamilyexecutive.com

65

Multifamily Executive is a professional media publication focused on apartment and condominium news, business strategies, and market insights for multifamily property owners, managers, and developers. It operates under the parent company Questex and serves the US real estate industry with a medium-sized digital presence. The website uses Drupal 10 CMS and integrates modern web technologies including Bootstrap, Google Tag Manager, and various advertising and analytics platforms. The content quality is good, with relevant industry news and professional presentation. However, the absence of WHOIS registration data and lack of explicit privacy and cookie policies reduce the overall trust and privacy compliance scores. Security posture is moderate but could be improved by implementing security headers and ensuring strong SSL configurations. Overall, the site is a credible industry resource but would benefit from enhanced transparency and security practices.

F

FW Africa

africadairysummit.com

44

The Africa Dairy Innovations Summit is a newly established event organized by FW Africa, positioned as the leading dairy industry event in Africa. It targets dairy industry investors, managers, professionals, and stakeholders, focusing on innovation and sustainability within the dairy sector. The business model revolves around event hosting, networking, and industry knowledge sharing, with additional revenue from sponsorship and exhibition opportunities. The website reflects a professional and consistent brand image, with clear event details and contact information, supporting its market positioning as a key industry summit in Kenya and the broader African region. Technically, the website is built on WordPress using the Divi theme, integrating Google Analytics and Matomo for visitor tracking. Hosting is via a provider associated with the domain's nameservers, likely a commercial hosting service. The site demonstrates good mobile optimization and SEO practices but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. Performance is moderate, with no blocking or WAF detected, allowing full content access. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain transfer protection. However, it lacks explicit security policies, privacy and cookie notices, and GDPR compliance indicators, which are critical for user trust and regulatory adherence. No incident response or vulnerability disclosure mechanisms are present. The WHOIS data is consistent with the business claims, showing a recent domain registration aligned with the event's founding year, and no privacy protection, indicating transparency. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing security and incident response policies.

A

Africa Food Manufacturing (AFMASS) Expos

afmass.com

41

Africa Food Manufacturing (AFMASS) Expos operates as a leading organizer of international food and beverage manufacturing and milling industry trade shows across Africa, targeting key markets such as Kenya, Nigeria, Uganda, Zambia, and Tanzania. The company positions itself as the premier platform showcasing the latest technologies in grain storage, milling, processing, packaging, ingredients, laboratory technologies, and supply chain solutions for the food, beverage, milling, and hospitality sectors. The website reflects a professional digital presence built on WordPress with the Divi theme, integrating standard analytics and advertising tools such as Google Analytics and AdSense. However, the absence of WHOIS registration details raises questions about domain registration transparency.

M

Město Štětí

fedo.cz

51

The website www.fedo.cz represents the official online presence of the Národní festival dechových orchestrů (National Festival of Brass Bands) held in Štětí, Czech Republic. The festival has a long tradition dating back to 1969 and is organized by the town of Štětí. The site provides information about the festival's history, news updates, partner organizations, and event details. It targets music enthusiasts, participants, and the general public interested in cultural events. The business model is primarily non-commercial, focusing on cultural promotion and community engagement through event organization. Technically, the website employs standard web technologies including jQuery, Bootstrap for responsive design, Google Analytics for visitor tracking, and Cookiebot for cookie consent management. The site is mobile-optimized and has a moderate performance profile. However, it lacks some advanced security headers and explicit privacy policy documentation, which could be improved to enhance compliance and security posture. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and structure suggest a legitimate cultural organization. The site does not provide direct contact emails or phone numbers, which could be a barrier for user trust and support. Overall, the website is professionally designed and serves its purpose well for event promotion and information dissemination. Strategic improvements in privacy policy transparency, security headers, and contact information would strengthen its security and compliance posture, enhancing user trust and regulatory adherence.

A

as4u.cz, s.r.o.

stetsko.cz

60

The website www.stetsko.cz serves as a regional informational portal for the Štětí area in the Czech Republic, providing cultural, natural, and event-related information to residents and tourists. It is supported by local government entities and regional partners, offering a comprehensive calendar of events, news updates, and photo galleries. The business model is informational and promotional, focusing on community engagement and tourism support. Technically, the site is built on the Public4u CMS platform, utilizing jQuery and standard web technologies. It is mobile-optimized with a moderate performance profile and basic accessibility features. The site uses HTTPS and includes cookie consent mechanisms, but lacks advanced security headers and explicit security policies. From a security perspective, the site demonstrates a reasonable posture with HTTPS enforcement and cookie consent but lacks detailed security policies, incident response contacts, and vulnerability disclosures. The absence of WHOIS data for the domain reduces trust and raises questions about domain legitimacy, although the website content and partner affiliations suggest a legitimate regional service. Overall, the site is safe, professional, and trustworthy for general audiences, with recommendations to improve security headers, domain registration transparency, and privacy documentation to enhance compliance and trustworthiness.

R

RATE s.r.o.

rate-steti.cz

74

RATE s.r.o. is a Czech energy company specializing in the operation of hot water and heating systems, primarily serving municipalities, residential buildings, and local customers in the Štětí region. Founded in 1994 and now part of the ENERGIE AG BOHEMIA group, the company offers comprehensive heating services including heat and hot water supply, maintenance of heat exchange stations, and installation services. Their market position is that of a regional energy service provider with a stable customer base and integration into a larger energy group. Technically, the website is built on WordPress and employs modern web technologies such as jQuery, Google Tag Manager, and FancyBox. The site is well-structured, mobile-optimized, and includes SEO best practices. Privacy and cookie policies are implemented with a consent mechanism, indicating good compliance with GDPR requirements. However, some security headers are missing, and no explicit incident response or vulnerability disclosure information is provided. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain registration is a notable concern, reducing the overall trust score. The website provides clear contact information and social media presence, enhancing business credibility. Overall, the risk assessment is moderate with recommendations to improve domain transparency, implement additional security headers, and publish security policies to enhance trust and compliance.

S

Spolek A.K.N.

akncr.cz

48

Spolek A.K.N. is a Czech non-profit organization focused on strengthening the capacity of community foundations through collaborative projects supported by grant programs such as the Active Citizens Fund. The website presents detailed information about a two-year project (2020-2022) involving multiple Czech community foundations aimed at enhancing community leadership and activation roles. The organization operates in a niche non-profit sector with a clear mission to support civil society and community development in the Czech Republic. Technically, the website uses a CMS platform called inPage, with common web technologies including jQuery, Bootstrap, and FontAwesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate, with HTTPS enabled and basic consent management via Google Analytics gtag, but lacks explicit privacy and cookie policies and security headers. No WHOIS data is available due to privacy protection, but the website content and external partner links indicate legitimacy. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

T

TicTacROI.cz

tictacroi.cz

46

TicTacROI.cz is a Czech Republic based small marketing agency specializing in PPC advertising, web and e-commerce development, graphic design, social media management, web analytics, and consulting services. The company presents a professional and consistent brand image with a clear focus on creative marketing solutions for businesses. The website is built on WordPress using Elementor and integrates modern SEO and privacy compliance tools such as Yoast SEO and Complianz GDPR plugin. The technical infrastructure is solid with HTTPS enforced and Google Analytics for tracking, complemented by Google reCAPTCHA for form security. However, the site lacks explicit security policies and incident response information, which could be improved to enhance trust and compliance. Overall, the website is well-structured, user-friendly, and compliant with GDPR cookie regulations, reflecting a mature digital presence for a small marketing firm.

R

RND s.r.o.

rndoc.cz

48

RND s.r.o. is a Czech-based company specializing in railway freight transport and logistics services. With over 20 years of experience, it offers tailored logistics solutions including railway freight forwarding, dispatching, and leasing of specialized railway freight wagons. The company targets businesses requiring reliable and efficient rail transport across European and Asian networks. The website reflects a professional and well-structured digital presence, leveraging WordPress with modern plugins and SEO optimizations. Security measures include HTTPS and Google reCAPTCHA on forms, though some security headers are missing and privacy policies are not explicitly presented. The absence of WHOIS data reduces domain trustworthiness, but the detailed business information and contact channels support legitimacy. Overall, the site is well-designed, content-rich, and suitable for its business audience.

M

MM Group

mm.group

73

MM Group is a global leader in the manufacturing and supply of consumer packaging products including cartonboard, folding cartons, kraft papers, uncoated fine papers, leaflets, and labels. The company targets businesses and consumers in the packaging and paper industries, positioning itself as a large enterprise with a strong market presence. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress with integration of modern marketing and analytics tools such as Google Tag Manager, Google Analytics, LinkedIn Insight, and Cookiebot for GDPR compliance. The site is mobile optimized and SEO friendly, though accessibility features are basic.

H

HS Timber Group

hs.at

56

HS Timber Group is a leading Austrian-based company specializing in industrial wood processing with a global footprint spanning 80 countries and seven production sites. The company employs over 2,700 staff and focuses on sustainable timber solutions for commercial and industrial clients. Their product portfolio includes various sawn timber products, glued laminated timber, panels, and pellets. The website reflects a mature digital presence built on TYPO3 CMS, featuring modern design, multilingual support, and privacy-conscious analytics via Matomo. The company demonstrates a strong commitment to sustainability and compliance, evidenced by multiple EUTR inspections and certifications. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-structured, supporting the company's market position as a major player in the timber manufacturing sector.

L

LIBERTY Steel Group

libertysteelgroup.com

58

LIBERTY Steel Group is a large international steel manufacturing company with a significant global footprint including operations in the UK, Europe, USA, and Australia. The company emphasizes sustainability through its GREENSTEEL strategy aiming for carbon neutrality by 2030. The website reflects a mature digital presence built on WordPress with modern analytics and tracking tools, and a clear focus on corporate responsibility and workforce development. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced DNS security and explicit security policies. Overall, the website is professional and trustworthy, supporting the company's market position as a major steel producer.

H

H-PRO GEO s.r.o.

h-progeo.cz

43

H-PRO GEO s.r.o. is a Czech Republic-based engineering company specializing in project design and geodetic services primarily for railway and transportation infrastructure projects. Established in 2017 as a subsidiary of Chládek & Tintěra, a.s., it continues a legacy dating back to 1997 through its predecessor. The company targets state and private sector clients involved in transportation construction across the Czech Republic. The website reflects a professional business presence with clear service descriptions and contact information. Technically, the website is built on WordPress, utilizing standard plugins including a GDPR cookie consent tool. It employs Google Fonts and includes some JavaScript libraries, though jQuery is commented out. The site is mobile-optimized with good navigation and SEO practices. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and implements a cookie consent banner, indicating some compliance with privacy regulations. However, no advanced security headers were detected, and no privacy policy or terms of service pages are present, which are gaps in compliance and security posture. The absence of WHOIS data for the domain reduces trust in domain legitimacy, although the website content and contact details appear consistent and professional. Overall, the website is a good representation of a small specialized engineering firm with room for improvement in security best practices, privacy documentation, and domain registration transparency.

H

H-konstrukce a.s.

h-konstrukce.cz

55

H-konstrukce a.s. is a Czech-based company specializing in steel constructions and rail welding services, serving primarily industrial and transportation sectors. Their offerings include medium to large steel structures such as platform shelters, railings, traction poles, and signal bridges, alongside specialized rail welding and inspection services. The company positions itself as a regional player with a focus on quality and certified qualifications. Technically, the website employs standard web technologies including jQuery and FontAwesome, with a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS data and security headers indicates areas for improvement in domain legitimacy and security posture. Overall, the website is professionally designed with good navigation and mobile optimization, but lacks explicit contact emails and phone numbers in the visible content.

D

Digitalka s.r.o.

digitalka.cz

44

Digitalka s.r.o. is a Czech-based creative digital agency specializing in online communication strategies, digital marketing, web development, SEO, PPC, social media marketing, and corporate identity services. The company positions itself as a client-focused agency delivering measurable performance and attractive internet presentations. Their market presence is supported by a portfolio of clients and a Google Partners certification, indicating a reputable standing in the digital marketing sector. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to their services and target audience. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Slider Revolution. It integrates multiple analytics and tracking tools including Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag, alongside a GDPR-compliant cookie consent mechanism powered by Cookiebot. The site demonstrates good SEO practices and moderate performance, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information suggest a legitimate and operational company. Overall, Digitalka.cz presents a solid digital presence with good content quality, technical implementation, and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and conducting regular security audits to strengthen their security posture and trustworthiness.

M

Město Lovosice

tclovosice.cz

38

The website www.tclovosice.cz represents the Technologické centrum Lovosice, a technology center serving the town of Lovosice in the Czech Republic. It primarily provides IT services such as record management (spisová služba), server hosting, internet, email, and web services targeted at local government and public administration entities. The site content is in Czech and includes historical updates about service maintenance and upgrades, indicating an operational presence since at least 2011. The business model is focused on public sector IT support with a small-scale local footprint. Technically, the website is built on BlazeBlogger CMS, with basic HTML and CSS. It lacks modern frameworks or advanced technical features. Performance and mobile optimization are basic, and SEO and accessibility features are minimal. No analytics or tracking scripts were detected, indicating a low level of digital marketing maturity. From a security perspective, the site uses HTTPS for some services but lacks visible security headers and formal privacy or cookie policies. No WHOIS data was retrievable, which raises concerns about domain registration transparency. The absence of contact emails or phone numbers on the main page limits direct communication channels. Overall, the security posture is moderate but could be improved by implementing standard security headers, privacy compliance, and clearer contact information. The overall risk assessment suggests the site is functional and serves its intended audience but has gaps in compliance and security best practices. Strategic recommendations include adding privacy and cookie policies, improving security headers, verifying domain registration details, and enhancing contact transparency to build trust and compliance.

P

Podřipské muzeum v Roudnici nad Labem - příspěvková organizace města Roudnice n. L.

podripskemuzeum.cz

57

Podřipské muzeum in Roudnice nad Labem is a public cultural institution operated as a contributory organization of the city. It focuses on preserving and presenting the history and culture of the Podřipsko region through permanent and temporary exhibitions, workshops, lectures, and public events. The museum targets local residents and visitors interested in regional heritage and cultural education. The website reflects a small but professionally managed institution with clear contact information and active social media presence. Technically, the website is built on the Webnode platform, leveraging modern web technologies including HTTPS, CDN hosting via Amazon Cloudfront, and Google Tag Manager for analytics. The site is mobile-optimized with good design and navigation, though some SEO and accessibility features could be enhanced. The cookie consent mechanism is implemented, but privacy and terms of service pages are missing, indicating partial compliance with GDPR requirements. From a security perspective, the site uses HTTPS and basic security headers but lacks advanced headers and a security.txt file for vulnerability disclosure. No WHOIS data is available, which limits domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the security posture is moderate with room for improvement in compliance and security best practices. The overall risk is low given the nature of the institution and the website content. Strategic recommendations include adding privacy and terms policies, improving security headers, and publishing vulnerability disclosure information to enhance trust and compliance.

R

Roudnické městské služby, p.o.

roudnickesluzby.cz

44

Roudnické městské služby, p.o. is a municipal organization serving the city of Roudnice nad Labem, Czech Republic. The organization provides essential city technical services including operation of the winter stadium, swimming pool, and collection yard. The website targets local residents and visitors seeking information about these municipal services. The business model is that of a government-funded public service entity with a medium organizational size and a clear local focus. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, FontAwesome, and Google Tag Manager for analytics. The site is mobile responsive and has a cookie consent mechanism implemented, indicating some level of privacy awareness. However, no CMS or hosting provider information is evident, and performance is moderate. Accessibility is basic but present. From a security perspective, the site uses HTTPS (assumed from external Google APIs usage), but no explicit security headers were detected. There is no visible privacy policy or terms of service, and no incident response or vulnerability disclosure information is provided. The WHOIS data is missing, which reduces trustworthiness somewhat, but the presence of official contact information and consistent branding supports legitimacy. Overall, the website is functional and professional for its purpose but would benefit from improved transparency in privacy and security policies, enhanced security headers, and verified domain registration information to strengthen trust and compliance.

R

Roudnické městské služby

bazenroudnice.cz

40

The website www.bazenroudnice.cz serves as the official online presence for the indoor swimming pool facility in Roudnice nad Labem, operated by Roudnické městské služby. It provides visitors with comprehensive information about the pool's facilities, operating hours, ticketing options, and current news updates. The target audience primarily includes local residents and visitors interested in swimming and wellness services. The business operates as a public municipal service, focusing on community wellness and recreational activities. Technically, the website is built on the WordPress CMS platform, utilizing common plugins such as WPBakery Page Builder, jQuery, Bootstrap, and various sliders for enhanced user experience. The site is mobile-optimized and presents a professional design with clear navigation. Performance is moderate, with room for improvement in SEO and accessibility features. From a security perspective, the site benefits from HTTPS encryption but lacks important security headers and publicly available security policies. There is no evidence of tracking or analytics scripts, indicating minimal user data collection. The absence of privacy and cookie policies suggests compliance gaps with GDPR and related regulations. No vulnerabilities or malicious content were detected. Overall, the website is legitimate and trustworthy, representing a municipal service with clear contact information and consistent branding. However, improvements in privacy compliance, security headers, and accessibility would enhance its security posture and regulatory adherence.

Ř

Říp, o.p.s.

kulturaroudnice.cz

47

Říp, o.p.s. operates the KulturaRoudnice.cz portal, a local cultural platform focused on promoting and managing cultural and leisure activities in Roudnice nad Labem and the surrounding Podřipsko region. The portal provides event listings, ticket pre-sales, and additional services such as venue rentals and poster placements. The organization positions itself as a key local cultural facilitator serving residents and visitors with a user-friendly, content-rich website. Technically, the site leverages modern web technologies including Bootstrap, jQuery, and Google Analytics, ensuring responsive design and moderate performance. Security measures include HTTPS enforcement, CSRF tokens, and a cookie consent mechanism, though explicit security headers and incident response policies are absent. The lack of WHOIS data limits domain trust verification but is likely due to privacy protection, which is reasonable for a small non-profit. Overall, the site demonstrates good business credibility and privacy compliance, with room for security enhancements.

K

Knihovna Ervína Špindlera

knihovnaroudnice.cz

38

Knihovna Ervína Špindlera is a public library serving the community of Roudnice nad Labem, Czech Republic. It operates as an organizational unit of the city, providing access to physical and electronic books, cultural events, and educational resources. The website reflects a well-structured and community-focused institution with clear contact information and links to an external KOHA catalog system. The library benefits from EU co-financed modernization projects enhancing accessibility and community engagement. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and Google Fonts, ensuring a responsive and user-friendly experience. However, there is room for improvement in security practices, such as implementing security headers and publishing privacy and cookie policies to enhance compliance and user trust. The absence of WHOIS data limits domain legitimacy verification but the official city affiliation and professional presentation support its credibility. Security posture is moderate with HTTPS implied but lacking explicit security headers and vulnerability disclosures. No tracking or advertising scripts were detected, indicating minimal user tracking and a privacy-conscious approach. Overall, the site is safe, professional, and serves its public service mission effectively.

S

Svazek obcí Podřipsko

svazekpodripsko.cz

44

Svazek obcí Podřipsko is a voluntary association of 23 municipalities in the Litoměřice district of the Czech Republic, focused on regional development and cooperation. Founded in 2004, it operates as a non-profit government entity headquartered in Roudnice nad Labem. The website serves as an official informational portal providing contact details, news, and links to member municipalities. The technical infrastructure is basic, relying on standard HTML and CSS without modern frameworks or CMS detected. Hosting and domain registration are managed by WEDOS, a reputable Czech provider, with the domain registered since 2010, consistent with the organization's history. Security posture is minimal with no detected HTTPS enforcement or security headers, and no privacy or cookie policies are published, indicating room for compliance improvements. No forms or tracking scripts are present, reducing data privacy risks but also limiting user engagement features. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy practices.

S

Sdružení obcí pro nakládání s odpady SONO

sdruzenisono.cz

47

Sdružení obcí pro nakládání s odpady SONO is a Czech non-profit association focused on municipal waste management, providing consultancy, support for landfill construction, and hazardous waste collection services to its 93 member municipalities. The organization has a long history dating back to 1993 and maintains a professional online presence with clear contact information and relevant content tailored to local government entities. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and jQuery, hosted by WEDOS, and optimized for mobile devices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No analytics or advertising scripts are present, reflecting a privacy-conscious approach. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

M

Místní akční skupina Podřipsko, z. s.

maspodripsko.cz

42

Místní akční skupina Podřipsko, z. s. is a Czech non-profit organization dedicated to regional and community development in the Podřipsko area. The organization manages EU and national funding programs, supports local businesses and municipalities, and promotes sustainable development initiatives. Their website is built on WordPress and integrates various plugins for content management, photo galleries, and download management. The site is well-structured, mobile-optimized, and provides comprehensive information about projects, funding opportunities, and community events. Security posture is adequate with HTTPS enabled and some security best practices in place, though improvements in security headers and cookie consent mechanisms are recommended. WHOIS data confirms the domain's legitimacy and consistency with the organization's history. Overall, the website presents a professional and trustworthy digital presence for a regional non-profit entity.

Ř

Říp, o.p.s.

vyletnarip.cz

42

Výlet na Říp is a regional tourism and cultural information website focused on the Podřipsko area in the Czech Republic. It provides visitors with detailed guides on local attractions, cycling routes, cultural events, and historical sites. The site targets tourists, cyclists, and families seeking leisure and educational activities in the region. The business operates as a small-scale informational platform supported by the regional organization Říp, o.p.s., with a clear focus on promoting local tourism and culture. Technically, the website employs modern web technologies including Google Fonts, Google Analytics, and Google Tag Manager, hosted by Wedos. The site is mobile-optimized with good SEO practices and a clear navigation structure. However, it lacks some advanced security headers and explicit privacy or terms of service pages, which are areas for improvement. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles, though no formal privacy policy was found. No critical vulnerabilities or suspicious activities were detected. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website presents a trustworthy and professional platform for regional tourism promotion, with moderate technical maturity and a solid security baseline. Strategic enhancements in privacy documentation and security headers would further strengthen its compliance and trustworthiness.

M

Město Roudnice nad Labem

roudnicetridi.cz

45

The website 'Roudnice třídí - vše o odpadech' is a municipal government portal operated by Město Roudnice nad Labem, focused on providing comprehensive information about waste sorting, container registration, and waste management services to local residents and businesses. It serves as an authoritative source for environmental and waste-related guidance within the municipality. The site features clear navigation, relevant content, and partnerships with recognized environmental organizations, enhancing its credibility. Technically, the site employs modern frontend technologies including Bootstrap, AOS, Swiper, and jQuery, ensuring a responsive and user-friendly experience across devices. The presence of a detailed cookie consent mechanism demonstrates attention to privacy compliance. However, some security best practices such as HTTP security headers are not evident and could be improved. From a security perspective, the site uses HTTPS and implements cookie consent with granular controls, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or suspicious patterns were detected in the content or scripts. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for municipal websites. Overall, the website presents a trustworthy and professional municipal service portal with good content quality and privacy compliance. Strategic improvements in security headers and explicit policy documentation would enhance its security posture and trustworthiness further.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of road marking materials and solutions globally. The website reflects a mature business with a comprehensive product portfolio targeting municipalities, contractors, and businesses involved in traffic safety and infrastructure. The company emphasizes quality, sustainability, and innovation with over 100 years of industry experience. Technically, the website is built on modern web standards using a CMS platform (Swift CMS), with responsive design and good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration transparency, which should be investigated further to ensure trustworthiness.

G

Geveko Markings Poland Sp. z o.o.

geveko-markings.pl

61

Geveko Markings Poland Sp. z o.o. is a medium-sized company specializing in road marking materials and solutions, operating primarily in Poland and Eastern Europe. The company recently integrated Farby Maestria Polska Sp. z o.o., enhancing its market presence and product portfolio. Their offerings include solvent-based paints, two-component materials, prefabricated road marking elements, thermoplastic materials, and road repair products. The website reflects a professional B2B supplier with a strong focus on technical documentation and customer support. Technically, the website uses modern web technologies including JavaScript, CSS, and Google Tag Manager for analytics and marketing. It is mobile-optimized and uses a CMS platform likely Swift CMS. Performance is moderate with good SEO and accessibility basics. However, security headers are not visibly implemented, and no dedicated security policy or incident response contacts are published. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The cookie consent mechanism is comprehensive and GDPR compliant. The absence of WHOIS data for the domain is a concern but does not currently undermine the legitimacy of the business, which is supported by consistent branding, certifications, and clear contact information. Overall, the website and business present a trustworthy and professional image with room for improvement in security header implementation and transparency around security policies and incident response.

Geveko Markings is a well-established company specializing in the development, manufacturing, and distribution of road marking materials and solutions globally. With over 100 years of industry experience, the company offers a comprehensive product portfolio including preformed materials, hot-applied materials, paints, beads, aggregates, and equipment. Their website reflects a strong market position with detailed product lines, solutions for various traffic and safety needs, and a global presence through multiple regional domains. Technically, the website is built on a modern CMS platform (Swift CMS) with responsive design, good SEO, and accessibility features. The use of Google Tag Manager indicates moderate user tracking with privacy compliance mechanisms in place. Security posture is strong with HTTPS enforced and multiple security headers present, although public security policies and incident response information are not disclosed. The absence of WHOIS data suggests privacy protection, which is justified for a large enterprise. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious activity or content blocking.