Security Directory

M

Munck

munck.dk

56

Munck is a well-established Danish nationwide construction and infrastructure group specializing in road construction, district heating, sewer networks, electrical and fiber networks, unique construction projects, and harbor facilities. The company targets business and public sector clients within Denmark, leveraging over 25 years of domain presence and experience. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress with Elementor, incorporating modern web technologies and cookie consent management via Cookiebot. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could be made. Security posture is solid with HTTPS and consent management but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, Munck presents a credible and trustworthy digital presence aligned with its business operations.

B

BVH Bitumen Vertrieb und Handel GmbH

bvh-bitumen.de

41

BVH Bitumen Vertrieb und Handel GmbH is a specialized German company founded in 2001 that focuses on the distribution and trading of bitumen products for road construction and industrial applications. Their website reflects a niche business model targeting B2B customers in the energy and construction sectors, offering products such as oxidized and modified bitumen. The company positions itself as an experienced supplier adhering to industry standards. Technically, the website is built on the namRED CMS, an older open-source framework, with basic JavaScript and CSS usage. The site lacks modern mobile optimization and advanced SEO features, indicating a moderate level of digital maturity. Security posture is minimal with no detected HTTPS enforcement or security headers, and no visible incident response or security policies. Privacy compliance is limited, with a basic privacy policy but no cookie consent mechanism. Overall, the site is functional but could benefit from modernization and enhanced security and privacy practices.

S

SR-Gruppen – sinusrumleriller – kalkstabilisering – cementstabilisering – specialfræsning

sr-gruppen.dk

43

SR-Gruppen is a specialized Danish company focused on road construction and maintenance, offering niche services such as sinusrumleriller, cement and lime stabilization, BSM, Remix, and soil treatment. Their website presents a professional image with clear service offerings and a focus on industry-specific solutions. The company targets businesses and professionals in the transportation and infrastructure sectors. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a modern CMS with SEO considerations. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no dedicated privacy policy page found. WHOIS data is unavailable, limiting domain trust verification. Overall, the website is professional and trustworthy but could improve in privacy transparency and security best practices.

O

OK a.m.b.a

ok.dk

67

OK a.m.b.a is a well-established Danish energy company providing a broad range of energy products including fuel, heating oil, electricity, natural gas, and heat pumps. The company operates over 670 local fuel stations across Denmark, targeting private consumers, businesses, and public sector clients. The website reflects a professional and consistent brand presence with clear business offerings and a focus on local energy supply services. Technically, the website employs modern web technologies including JavaScript modules, Google Tag Manager, Adobe Experience Cloud, and Cloudflare for hosting and security. The site is mobile-optimized and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, although explicit security headers and incident response contacts are not clearly visible. The absence of WHOIS data is a notable gap in domain legitimacy verification, which slightly impacts the overall trust score. Overall, the website is professional, secure, and compliant with privacy standards, serving its target market effectively.

P

Pankas A/S

pankas.dk

58

Pankas A/S is a well-established Danish asphalt company with over 75 years of experience, providing comprehensive asphalt services including production, repair, and paving across Denmark. The company targets both business and private customers, positioning itself as a national leader in the asphalt industry. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site employs modern web technologies such as Google Tag Manager, CookieYes for consent management, and uses ASP.NET MVC backend as indicated by anti-forgery tokens. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and anti-forgery protections, but could benefit from enhanced security headers and DNSSEC implementation. Privacy compliance is strong with a comprehensive cookie policy and GDPR consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the company's credibility and market position.

D

DAV NORDIC A/S

davnordic.dk

61

DAV NORDIC A/S is a Danish company specializing in traffic safety, noise reduction, poles, and steel infrastructure solutions. Established in 2016, it holds a leading position in the Danish transportation infrastructure sector, offering project-optimized solutions focusing on economy, work environment, and quality. The company targets businesses and public sector entities involved in infrastructure and traffic safety. The website is professionally designed using WordPress CMS, enhanced with performance tools like WP Rocket, and integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though improvements can be made by enabling DNSSEC and adding security headers. No critical vulnerabilities or suspicious patterns were detected. Overall, the website reflects a trustworthy and credible business presence with good technical maturity and compliance practices.

I

ITS Teknik

its-teknik.dk

53

ITS Teknik is a Danish company specializing in traffic safety, traffic planning, and traffic registration. They provide advanced traffic technology solutions including traffic signals, ITS systems, and various traffic monitoring and control equipment. The company targets municipalities and transportation authorities in Denmark, positioning itself as a trusted specialist in the traffic technology sector. Their website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site is built on WordPress using modern themes and plugins, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and incident response information. Privacy and cookie policies are present, though cookie consent mechanisms could be improved. WHOIS data is unavailable, limiting domain trust analysis, but the overall site and business presentation suggest legitimacy.

S

Saferoad Services Danmark

saferoad-services.dk

54

Saferoad Services Danmark is a medium-sized company specializing in road safety and infrastructure solutions in Denmark. The company offers a range of products including road markings, traffic safety equipment, and consulting services aimed at improving traffic safety and infrastructure robustness. The website reflects a professional and consistent brand presence targeting businesses and public sector entities involved in road infrastructure. Technically, the site uses modern JavaScript frameworks, Tailwind CSS, and integrates analytics tools such as Piwik PRO and Microsoft Application Insights. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are missing. The absence of WHOIS data limits domain trust assessment, but the overall digital footprint suggests a legitimate and professional business. Recommendations include adding privacy and cookie policies, security headers, and vulnerability disclosure information to enhance compliance and trust.

Munck Asfalt is a Danish company specializing in asphalt production and paving services for various infrastructure projects including motorways, country roads, municipal roads, bridges, industrial areas, and parking lots. The company targets both private and business customers, positioning itself as a local/regional supplier with its own asphalt factories. The website is built on the SiteSuite CMS platform and integrates modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Cookiebot for GDPR compliance. The digital maturity is moderate with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS usage and cookie consent management, but lacks visible security headers and explicit security policies. Privacy compliance is supported by Cookiebot, though no dedicated privacy policy or terms of service pages were found. Overall, the website presents a professional and trustworthy image consistent with a small business in the energy and transportation sector.

Business Danmark is a well-established Danish trade union and unemployment insurance fund catering to professionals in sales and marketing. The website clearly communicates its membership offerings and pricing, targeting a specific professional audience. The domain has been active since 2004, supporting the company's credibility and market presence. Technically, the website is built on modern frameworks such as Next.js and React, with integration of common analytics and marketing tools like Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and implements standard security headers, although it lacks a publicly stated security policy or incident response contacts. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website presents a professional and trustworthy digital presence with moderate tracking and advertising transparency.

G

GC Rieber Minerals

gcrieber-salt.com

58

GC Rieber Minerals is a Norwegian-based company specializing in the supply and development of mineral and salt products for diverse markets including road maintenance, fishery, aquaculture, industrial applications, food production, and agriculture. The company emphasizes sustainability and circular economy principles, positioning itself as a partner for businesses seeking innovative and environmentally responsible mineral solutions. Their portfolio includes well-known brands such as Norsal and Stradasalt, which cater to premium salt products and de-icing solutions respectively. The company operates across multiple Nordic countries with detailed contact points and a professional online presence. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, with integrations for GDPR compliance and map services. The site demonstrates good mobile optimization, accessibility features, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy. Despite this, the website content and branding are consistent and professional, mitigating some risk. Privacy and cookie policies are comprehensive and GDPR compliant, supporting the company’s commitment to data protection. Overall, GC Rieber Minerals presents a credible and professional business front with a strong focus on sustainability and customer engagement. Security and compliance practices are good but could benefit from enhanced transparency in domain registration and additional security headers.

S

SPVI

spvi.dk

51

SPVI is a Danish engineering consultancy specializing in traffic management, road marking, traffic planning, project design, and occupational health and safety. The company targets professional clients in the transportation and infrastructure sectors. The website is built on the Wix platform, leveraging standard Wix technologies and polyfills, and is optimized for mobile devices with a moderate performance profile. Security measures include HTTPS usage and JavaScript-based hardening of fetch and XHR requests, but lack comprehensive security headers and explicit privacy or cookie policies. The absence of WHOIS data limits domain trust verification. Overall, the website presents a professional image but would benefit from enhanced privacy compliance and clearer contact information.

N

Nynas

nynas.com

61

Nynas is a well-established specialty chemicals company founded in 1996, focusing on providing bitumen and naphthenic solutions that support sustainable infrastructure and electrification. The company targets industrial and infrastructure sectors with a B2B business model and positions itself as a leader in sustainable specialty chemicals within the energy sector. The website reflects a professional and consistent brand image with good content quality and clear business messaging. Technically, the website employs modern technologies including JavaScript, Google Tag Manager, and Cookiebot for analytics and cookie consent management. The site is hosted with domainnetwork.se DNS servers and uses HTTPS with a good SSL configuration. Performance and mobile optimization are rated as moderate to good, with accessibility and SEO features well implemented. From a security perspective, the website demonstrates good practices such as HTTPS enforcement, cookie consent with granular controls, and domain transfer/update protections. However, DNSSEC is not enabled, and no explicit security policy or incident response contact information is published. Security headers are not explicitly detected, and no vulnerability disclosure mechanism is found. Overall, the security posture is solid but could be improved with additional transparency and technical controls. The overall risk assessment is low, with no signs of malicious or suspicious activity. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, adding security headers, and providing clear incident response contacts to enhance trust and compliance. The website is suitable for general audiences and contains no adult or questionable content.

D

DTL - Danske Vognmænd

dtl.eu

64

DTL - Danske Vognmænd is a Danish transport association providing news, political advocacy, member benefits, consulting, and training services to transport companies and truck owners in Denmark. The website is professionally designed with clear navigation and is targeted at transport professionals and companies. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, FontAwesome icons, and tracking tools like Google Analytics and Facebook Pixel. Cookie consent is managed via CookieHub, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found in the provided content. Security posture is moderate with HTTPS enabled and no visible security headers, suggesting room for improvement in security best practices. Overall, the website is trustworthy and serves its business purpose effectively, but could enhance compliance and security transparency.

W

WhistleSystem ApS

whistlesystem.com

69

WhistleSystem ApS is a Danish technology company founded in 2020, specializing in providing secure, simple, and compliant whistleblower systems primarily targeting businesses seeking to implement whistleblower compliance solutions. The website is professionally designed using WordPress with the Divi theme and integrates multiple marketing and analytics tools such as HubSpot, Google Analytics, and Cookiebot for GDPR compliance. The company positions itself as a trusted provider in the whistleblower compliance market with a focus on security and simplicity. Technically, the website is hosted with Amazon Registrar and uses AWS DNS servers, with HTTPS enabled and a moderate performance profile. Security posture is generally good, though improvements can be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is supported by a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found in the provided content. Overall, the website is safe, professional, and trustworthy with no adult or questionable content detected.

Geveko Markings Denmark A/S is a well-established company specializing in the development, production, and distribution of road marking materials and traffic safety solutions. With over 100 years of experience, the company serves a broad range of sectors including public traffic, parking, decorative surfaces, and accessibility. Their market position is strong within Denmark and internationally, supported by a consistent brand presence and comprehensive product offerings. The website reflects a professional and mature digital presence with clear navigation and relevant content tailored to business customers and public sector clients. Technically, the website is built on a modern CMS platform (Swift CMS) and employs contemporary web technologies such as Bootstrap, Swiffy Slider, and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, indicating a good level of digital maturity. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, includes important security headers, and manages cookie consent appropriately. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website and business demonstrate a solid security posture and compliance with privacy regulations such as GDPR. The absence of WHOIS data limits domain trust analysis, but the professional presentation and certifications like ISO9001 support legitimacy. Strategic recommendations include publishing a security policy, incident response information, and a vulnerability disclosure policy to further strengthen security and trust.

M

Město Roudnice nad Labem

roudnicenl.cz

46

Město Roudnice nad Labem operates an official municipal website serving residents, tourists, and local businesses by providing timely news, public service information, event announcements, and access to official documents. The site positions itself as a trusted government resource with a clear focus on community engagement and transparency. The business model is public service oriented, with a medium-sized municipal scope in the Czech Republic. The website is well-branded and consistent with government standards, featuring partner and certification logos that enhance trust. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and Fancybox, supported by Google Analytics and Tag Manager for user tracking and marketing insights. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Hosting and domain registration are consistent with Czech providers, and the domain age supports the site's legitimacy. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, explicit security headers and incident response policies are not evident, suggesting opportunities to strengthen security posture. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further solidify trust and compliance.

M

Městský úřad Lovosice

meulovo.cz

52

The website meulovo.cz is the official municipal portal for the town of Lovosice in the Czech Republic. It serves as a comprehensive information hub for residents and visitors, offering news updates, event calendars, public notices, and various citizen services such as waste management, social services, education, and business-related information. The site is positioned as a local government authority platform, providing essential public services and community engagement tools. The domain has been registered since 1999, reflecting a well-established presence in the region. Technically, the website employs a modern technology stack including JavaScript frameworks like Vue.js and Mustache.js, integrates Google services such as reCAPTCHA v3 and Analytics, and uses the Vismo CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. It uses HTTPS and includes consent mechanisms for cookies and analytics, demonstrating a good level of digital maturity. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. The business credibility is strong, supported by official contact details, consistent branding, and a trustworthy domain registration. Overall, meulovo.cz is a professionally maintained municipal website with a solid technical foundation and good privacy practices. To enhance security posture, it is recommended to implement security headers, publish a security policy, and consider a vulnerability disclosure mechanism. These steps will further strengthen trust and resilience against potential threats.

N

N+N – Konstrukce a dopravní stavby Litoměřice, s.r.o.

nanlitomerice.cz

44

N+N – Konstrukce a dopravní stavby Litoměřice, s.r.o. is a Czech Republic-based medium-sized company specializing in construction and infrastructure projects, particularly railway construction, bridge and wall structures, and civil engineering works. Established in 2001, the company has a solid market presence and offers comprehensive project documentation and construction services. The website reflects a professional and consistent brand image, targeting construction industry clients and infrastructure developers. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder, Slider Revolution, and Complianz GDPR for compliance. It integrates Google Tag Manager and Google reCAPTCHA for analytics and security. The hosting is provided by cesky-hosting.eu, and the site shows moderate performance with good mobile optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but it lacks explicit security headers and uses an outdated jQuery version, which could pose risks. No exposed sensitive data or vulnerabilities were detected in the HTML content. Privacy compliance is strong with a comprehensive GDPR policy and cookie management. Overall, the website is trustworthy and professionally maintained, with recommendations to update JavaScript libraries and enhance security headers to improve the security posture further.

J

JK Machinery s.r.o.

jk-machinery.cz

41

JK Machinery s.r.o. is a Czech-based manufacturing company specializing in the design and production of agricultural machinery and technology solutions. With over 30 years of experience, the company offers comprehensive services including equipment manufacturing, technology design, installation, and after-sales support. Their market presence spans 42 countries with a strong client base exceeding 2500 satisfied customers. The website reflects a professional and consistent brand image, targeting agricultural businesses and food industry enterprises globally. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and utilizes popular analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices. Hosting is provided by Active24, a reputable provider, and the site uses HTTPS with a valid SSL certificate ensuring secure communications. From a security perspective, the site employs Google reCAPTCHA on its contact forms to mitigate spam and abuse. However, it lacks explicit security headers and does not provide a public security policy or incident response information. Privacy and cookie policies are present and indicate GDPR compliance, though more detailed data retention policies are not disclosed. No vulnerabilities or suspicious content were detected during analysis. Overall, JK Machinery's website is a well-maintained digital asset that supports its business objectives effectively. The security posture is solid but could be enhanced by implementing additional security headers and publishing incident response and vulnerability disclosure policies. The company demonstrates strong business credibility and international reach, making it a trustworthy entity in its sector.

C

Chládek & Tintěra, a.s.

cht.cz

48

Chládek & Tintěra, a.s. is a well-established Czech construction company specializing in railway, bridge, civil engineering, and related construction services. With over 35 years of experience and a workforce of approximately 380 professionals, the company holds a leading position in the Czech construction market. Their website showcases a comprehensive portfolio of projects, career opportunities, and detailed company information, reflecting a mature and professional business model focused on transportation and infrastructure sectors. Technically, the website is built on WordPress using the Mioweb3 theme, enhanced with SEO and GDPR compliance plugins such as Yoast SEO and Complianz. The site integrates modern analytics tools including Google Analytics 4 and Facebook Pixel, and employs Google Consent Mode to manage user privacy preferences effectively. The site is mobile-optimized and demonstrates good performance and SEO practices. From a security perspective, the website enforces HTTPS and uses cookie consent management, but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable gap, reducing the overall trust score and suggesting a need for further domain registration verification. Overall, the website presents a secure, compliant, and professional digital presence for a large construction firm. Strategic improvements in security headers and domain registration transparency would enhance trust and security posture further.

S

SBS Cargo

sbscargo.cz

36

SBS Cargo is a traditional forwarding company established in 2012, specializing in rail and maritime transport services. The company leverages generational knowledge in forwarding and transport sectors, serving clients primarily in energy, coal, steel, wood, paper, chemical oil, and industrial products. Their market position is that of a small but established player with a focus on traditional and reliable logistics solutions. The website reflects a professional and consistent brand image with clear service offerings and partner affiliations. Technically, the website is built on WordPress with Bootstrap and jQuery, optimized for mobile devices and SEO-friendly through the Yoast SEO plugin. Hosting appears to be provided by Webglobe, consistent with the domain's nameserver information. Performance is moderate with good design quality and navigation clarity, though accessibility features are basic. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, indicating compliance gaps with GDPR and other regulations. No contact information or incident response details are present on the homepage, limiting transparency. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact and incident response information to improve trust and regulatory adherence.

Č

ČD-DUSS Terminál, a.s.

cdduss.com

43

ČD-DUSS Terminál, a.s. operates an intermodal terminal in Lovosice, Czech Republic, specializing in handling various container types and providing forwarding, logistics, and customs services. The company targets businesses requiring combined rail and road transport solutions. The website reflects a medium-sized logistics operator with a consistent brand and references from known industry players. Technically, the site is built on WordPress with standard technologies and moderate performance. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance documentation. No contact emails or phone numbers are explicitly provided, which may affect user trust and compliance. Overall, the domain registration data supports the legitimacy of the business, with consistent WHOIS information and appropriate domain age.

A

Aseta Group s.r.o.

inexcz.cz

50

Aseta Group s.r.o. is a well-established facility management company operating in the Czech Republic with over 30 years of experience. The company offers a broad range of services including technical building management, cleaning, waste management, outdoor maintenance, substitute fulfillment, and security services. Their market position is strong, supported by a large workforce and numerous active contracts, indicating a significant presence in the facility management sector. The website reflects a professional and consistent brand image, targeting businesses and institutions requiring comprehensive facility services. Technically, the website uses modern technologies such as jQuery, Tailwind CSS, and Google Analytics, with a custom or Nette-based CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. The absence of WHOIS data is a notable gap, reducing trustworthiness and requiring further verification. Overall, the site is professional and trustworthy but could improve transparency in domain registration and security disclosures.

PREOL, a.s. is a leading Czech company specializing in the processing of rapeseed seed and production of related products such as biofuels, animal feed, and food products. It operates as part of the AGROFERT group, a major player in the Czech agricultural and energy sectors. The website presents a professional image with clear branding, multilingual support, and comprehensive information about its business activities and compliance with GDPR regulations. The company targets both general consumers and business partners in the energy and agricultural industries. Technically, the website uses a custom CMS (Poski), JavaScript libraries such as jQuery, and includes responsive design features for mobile optimization. While the site performs moderately well, there is room for improvement in accessibility and security headers. The cookie consent mechanism and GDPR information demonstrate a commitment to privacy compliance. From a security perspective, the site lacks visible security headers and explicit incident response or security policy pages, which could be enhanced to improve trust and resilience. The absence of WHOIS data is a concern for domain legitimacy, although the website content and business information align with a reputable corporate entity. Overall, the site is secure enough for general use but would benefit from strengthened security practices and transparency. The overall risk assessment is moderate with recommendations to improve security headers, SSL configuration, and incident response transparency. These steps will enhance user trust and regulatory compliance, supporting the company’s strong market position in the Czech energy and agricultural sectors.

C

CS-BETON s.r.o.

csbeton.cz

63

CS-BETON s.r.o. is a Czech-based medium-sized manufacturing company specializing in the production of concrete paving stones and other concrete elements for garden and transport infrastructure. Established since 1992, the company targets construction firms, municipalities, and homeowners with a diversified product portfolio and technical support services. The website reflects a professional and consistent brand presence with clear navigation and relevant content. Technically, the site uses modern web technologies including Google Tag Manager and Google Maps API, with good mobile optimization and SEO practices. Security posture is moderate, with cookie consent mechanisms in place but lacking explicit security headers and incident response information. WHOIS data is unavailable, which limits domain trust verification, but the website content and contact details support legitimacy. Overall, the site is safe, business-focused, and well-structured, scoring 75 out of 100 in AI evaluation.

T

TRCZ s.r.o.

trcz.cz

56

TRCZ s.r.o. is a Czech manufacturing company specializing in automotive safety components such as multifunctional controllers and seat belts. Established in 2003 as a subsidiary of the Japanese Tokai Rika Co., Ltd., it serves major automotive manufacturers with a focus on quality and safety. The company operates a modern factory in Lovosice and holds recognized certifications including ISO 9001 and IATF 16949, underscoring its commitment to quality management. The website reflects a professional digital presence built on WordPress with Elementor, providing clear business information and compliance with GDPR through a dedicated privacy policy page. However, contact details are not prominently displayed on the homepage, and cookie consent mechanisms are absent.

Ú

Ústecká komunitní nadace

komunitninadace.cz

58

Ústecká komunitní nadace is a well-established non-profit community foundation based in Ústí nad Labem, Czech Republic, with roots dating back to 1993. The organization focuses on supporting local community projects through grants and donations, aiming to improve the quality of life in the Ústecký region. Their website reflects a professional and consistent brand image, providing clear information about their mission, donors, and supported projects. The foundation maintains active partnerships with reputable organizations and has a visible presence on major social media platforms. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as Google Analytics, Facebook Pixel, and lazy loading for images. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS with a strong SSL configuration but lacks several recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear GDPR and cookie policies, including consent mechanisms. However, the site does not publish explicit security policies, incident response contacts, or vulnerability disclosure information, which could be areas for future enhancement. Overall, the website presents a trustworthy and credible image for a non-profit organization, with a solid technical foundation and good privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen their digital maturity and risk posture.

Město Štětí operates an official municipal website serving as the primary information portal for the city and its residents. The site provides comprehensive details about city administration, local services, events, and contact information. It targets local citizens and visitors seeking official information. The website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Swiper.js, ensuring a responsive and user-friendly experience. The presence of GDPR-compliant cookie consent and clear contact details reflects a commitment to privacy and transparency. However, the absence of WHOIS data limits domain registration trust verification. Security posture is solid with HTTPS and cookie management, but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and well-maintained, serving its public sector role effectively.

Jasnet, spol. s r.o. is a small Czech Republic-based company specializing in graphic design, multimedia presentations, IT hardware and software sales, network management, and production and advertising services. Their website presents a clear overview of their business offerings and contact information, targeting local businesses and organizations in need of multimedia and IT solutions. The company appears to be a local service provider with a focus on creative and technical services. Technically, the website uses Google Tag Manager and Google Analytics for tracking and marketing purposes, but lacks advanced technical frameworks or CMS platforms. The site is accessible without any WAF or security challenges, but lacks modern security headers and visible SSL configuration details. The website design and content quality are basic, with no detected forms or advanced user interaction features. From a security perspective, the absence of WHOIS data reduces transparency and trust slightly, although the website provides detailed contact information and company registration numbers. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance with GDPR and other privacy regulations. The security posture is moderate but could be improved by implementing HTTPS, security headers, and publishing privacy-related policies. Overall, the website is functional and safe for general audiences but would benefit from enhanced security measures, privacy compliance, and improved technical implementation to increase trust and professionalism.

H

Hospic sv. Štěpána Litoměřice

prohospic.cz

42

The website prohospic.cz represents a small non-profit hospice organization based in Litoměřice, Czech Republic, focused on providing home-based palliative care for terminally ill patients. It serves as an informational and donation platform, targeting local donors and families seeking hospice services. The site is professionally designed with consistent branding and clear donation options, including detailed explanations of donation impacts. Technically, the site uses a custom CMS by Jasnet, with common JavaScript libraries such as jQuery and Modernizr, and integrates Google Analytics and Tag Manager for visitor tracking. Mobile optimization and user experience are good, though some technical debt is present due to outdated libraries. Security posture is moderate; HTTPS is implied but no explicit security headers were detected, and the use of outdated jQuery versions poses potential risks. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy page. No terms of service or incident response policies are published, which could be improved. Overall, the domain registration data is consistent and supports the legitimacy of the organization. Strategic improvements in security and compliance would enhance trust and resilience.

P

Planet Ocean Hosting GmbH

planet-ocean-hosting.com

49

Planet Ocean Hosting GmbH is a German hosting provider with over 20 years of experience offering a broad range of internet services including web hosting, email hosting, managed servers, and communication platforms such as Matrix chat and Jitsi videoconferencing. The company targets startups and established businesses seeking reliable and privacy-conscious hosting solutions, emphasizing German data protection standards and green energy usage. The website is professionally designed, built on WordPress, and optimized for mobile devices with clear navigation and relevant content. Technically, the site uses modern libraries and privacy-respecting analytics (Matomo), but lacks a cookie consent mechanism and explicit security policies. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are absent. WHOIS data is consistent with the business claims, showing no privacy protection and matching nameservers, indicating legitimacy. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

D

Das Bundesministerium für Verkehr

bmv.de

65

The Bundesministerium für Verkehr (BMV) website serves as the official portal for the German Federal Ministry of Transport, providing comprehensive information on transportation and mobility topics. The site targets the general public and stakeholders in the transport sector, offering policy updates, infrastructure information, and mobility initiatives. The website is positioned as a key government authority in Germany's transportation domain, reflecting an enterprise-level operation with consistent branding and good content quality. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with some use of local storage and XMLHttpRequest for dynamic content loading. While the site is accessible over HTTPS and includes structured metadata and Open Graph tags, it lacks explicit privacy and cookie policies, and no advanced frameworks or CMS were detected. Mobile optimization and accessibility are basic but functional. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data, but lacks visible security headers and formal security policies. Tracking via etracker scripts indicates moderate user tracking without clear consent mechanisms, suggesting room for improvement in privacy compliance. WHOIS data aligns with a legitimate government entity, reinforcing trustworthiness. Overall, the site presents a professional and trustworthy front for the ministry but should enhance privacy disclosures, cookie consent, and security headers to improve compliance and user trust. Strategic recommendations include implementing comprehensive privacy and cookie policies, deploying security headers, and enhancing mobile and accessibility features.

F

FW Africa

foodbusinessafrica.com

47

Food Business Middle East & Africa, operated by FW Africa, is a leading media publication and event organizer focused on the food and beverage industry across Africa and the Middle East. The website serves as a comprehensive platform providing industry news, insights, and advertising opportunities targeting business owners, CEOs, and professionals in the sector. It holds a strong market position as the No.1 food and beverage industry magazine and website in the region, supported by a consistent brand presence and professional content quality. Technically, the website is built on WordPress using the Pressbox theme and Divi Builder framework, integrating modern technologies such as Google Tag Manager, Google Analytics, Matomo Analytics, and advanced advertising plugins. The site demonstrates good performance, mobile optimization, and SEO practices, ensuring a positive user experience and accessibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website presents a low-risk profile with a mature digital presence, though the lack of WHOIS data and some security policy disclosures slightly reduce trustworthiness. Strategic recommendations include publishing security and incident response policies, adding vulnerability disclosure information, and enhancing transparency around data protection officers to strengthen compliance and trust.

I

Italyexport

italyexport.net

62

Italyexport is a specialized magazine dedicated to promoting Italian products worldwide, with a focus on sectors such as food, hardware, houseware, and horeca. Established in 1984, it serves as a key promotional platform for Italian exporters targeting international markets. The website is built on WordPress using the Divi theme and integrates modern marketing and analytics tools such as Google Tag Manager and Google Analytics. It demonstrates good digital maturity with GDPR compliance and cookie consent mechanisms in place. Security posture is adequate with HTTPS enforced, though some security headers are not explicitly detected. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional presentation and long-standing business history support legitimacy. Overall, the website is a credible resource for Italian export promotion, though improvements in published contact and security policies would enhance trust.

C

Chrysler Center

mintzedge.com

63

MintzEdge is a resource platform aimed at entrepreneurs, providing insights and tools to support the growth and development of startups and small businesses. The website is professionally designed using Squarespace, featuring relevant content targeted at entrepreneurial audiences. The business operates from New York, USA, and maintains a LinkedIn presence, enhancing its credibility. Technically, the site employs modern web technologies including Google Analytics for tracking and OneTrust for cookie consent, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of security headers and privacy policy pages suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the site presents a professional and business-focused front but would benefit from enhanced transparency and security practices.

Q

Questex

questex.com

60

Questex is a well-established information and events company founded in 2002, focusing on the experience economy across hospitality, healthcare, technology, and wellness sectors. The company operates multiple tradeshows, newsletters, and branding programs to connect professionals and businesses. Their market position is strong, supported by acquisitions such as Affordable Housing Finance and Multifamily Executive. The website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. The technical infrastructure includes modern web technologies and Cloudflare DNS, though DNSSEC is not enabled. Security posture is moderate with HTTPS enabled but lacks some security headers and published security policies. Privacy compliance is good with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and business credible, though improvements in security practices are recommended.

N

Nikodémova noc - Pokyny

nikodemovanoc.sk

41

Nikodémova noc is a Slovak non-profit pastoral project affiliated with the Catholic Church, focused on organizing night adoration events to facilitate spiritual encounters with Jesus Christ. The website serves as an informational and organizational platform for local parishes to participate and promote these events. The project targets church attendees and the broader public interested in spiritual activities, operating primarily within Slovakia and neighboring countries. The domain is well-established since 2012 with consistent registration data and DNSSEC enabled, indicating a legitimate and stable online presence. Technically, the website uses basic web technologies including HTML, CSS, and older versions of JavaScript libraries such as jQuery 1.4.1 and Fancybox 1.3.0. Hosting appears to be provided by Websupport.cz. The site shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS platforms. SEO and accessibility features are minimal but functional. Security posture is moderate with DNSSEC enabled but lacks visible security headers and uses outdated JavaScript libraries that may expose vulnerabilities. The login form for program management lacks visible advanced security features. Privacy and compliance are weak, with no privacy policy, cookie policy, or GDPR compliance indicators present on the site. No contact emails or phone numbers are provided, only a login form for authorized users. No incident response or security policy information is available. The site content is safe, religious in nature, and suitable for general audiences without any adult or questionable content. Overall, the website is functional and serves its niche purpose but requires improvements in security, privacy compliance, and modernization of technical components to enhance trust and resilience against vulnerabilities.

Mouser.cz is a small Czech IT service provider specializing in custom development and management of enterprise information systems, web applications, and network infrastructure. The company offers services including domain registration, web hosting management, LAN network construction, and computer repairs. The website clearly states it is not affiliated with the global Mouser Electronics company, reducing brand confusion. The technical infrastructure is based on PHP, MySQL, HTML5, and JavaScript, hosted likely with WEDOS, a Czech hosting provider. The website is basic in design and content, with minimal SEO and accessibility features. Security posture is weak, with no detected HTTPS or security headers, and no published privacy or cookie policies, indicating compliance gaps. Contact information is clearly provided, but no forms or social media presence is evident. Overall, the site is functional but lacks modern security and privacy best practices.

S

Společnost katolického apoštolátu (Pallotini)

pallotini.cz

47

The website represents the Society of the Catholic Apostolate (Pallotini), a religious non-profit organization founded in 1835. It provides information about the organization's mission, global presence, and apostolic activities including parish work, education, healthcare, and social outreach. The site targets Catholic faithful and those interested in religious apostolate work. Technically, the site uses a custom PHP-based CMS with legacy JavaScript libraries such as jQuery 1.4.1 and basic CSS styling. Hosting is likely provided by Active24, consistent with the domain registrar data. Security posture is moderate with no visible HTTPS confirmation or security headers in the provided data, and outdated JavaScript libraries present potential vulnerabilities. Privacy and cookie policies are absent, indicating compliance gaps with GDPR. Contact information is clearly provided with physical addresses, phone numbers, and a company email. Overall, the site is functional and informative but would benefit from technical modernization and improved security and privacy compliance.

The website 'Monastery Tourism' operated under the domain klasternituristika.cz is a niche platform focused on religious and pilgrimage tourism primarily in the Czech Republic. It offers information on pilgrimage sites, accommodation, places of interest, and pilgrimage routes, targeting pilgrims and tourists interested in Christian historical monuments and faith-based travel. The business model revolves around providing informational content and booking capabilities, supported by user registration and login features. The site has been active since 2015, indicating a mature presence in its niche market. Technically, the website employs a combination of legacy and modern web technologies including jQuery, Bootstrap 3, Leaflet.js for mapping, and the Nette PHP framework. It integrates Matomo analytics for user tracking and uses HTTPS for secure communication. The site is moderately optimized for mobile devices and SEO, with a good user experience and clear navigation. However, some technical improvements are recommended, such as updating libraries and enhancing accessibility. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers like CSP or HSTS, which are important for modern web security. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. The absence of incident response contacts and security policies reduces transparency. The domain WHOIS data is consistent and trustworthy, with no suspicious patterns detected. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer policy disclosures to strengthen trust and regulatory adherence.

The website for stlchess.club currently serves only a 404 error page indicating that the domain is pointed to WP Engine hosting but is not configured for an active site. The domain is registered to the Saint Louis Chess Club in the US, created in 2022, and appears legitimate. However, no business content, contact information, or policies are present on the site, preventing a full assessment of business operations or services. The technical infrastructure includes Cloudflare DNS and analytics, with hosting on WP Engine, but the site lacks configuration and content delivery. Security posture is minimal with no security headers or privacy policies detected, and the site does not implement GDPR compliance mechanisms. Overall, the site is non-functional and provides no user or business value in its current state.

R

Reed Exhibitions Limited

rxglobal.com

72

RX Global, operated by Reed Exhibitions Limited, is a leading global events organizer with over 350 events across 25 countries and 43 industry sectors. The company focuses on creating impactful business experiences and has a strong market position as a large enterprise in the event management industry. Their services include event organization, sales support, event technology, and sustainability initiatives. The website reflects a mature digital presence with a modern Drupal CMS infrastructure, responsive design, and integration of marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent management. Security posture is strong with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user consent mechanisms. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website demonstrates professionalism, trustworthiness, and compliance with relevant regulations.

V

Verdo

verdo.com

64

Verdo is an energy solutions company specializing in sustainable energy production, energy savings, and bioenergy fuel sales. The website presents a professional and consistent brand image targeting general and business audiences interested in sustainable energy. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and LinkedIn marketing integrations, supported by a cookie consent mechanism that complies with GDPR principles. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding mitigate some risk. Security posture is moderate with room for improvement in security headers and published security policies. Overall, the website is functional and professional but requires enhanced transparency and security practices to improve trust and compliance.

D

Deutsches Maritime Zentrum e.V.

dmz-maritim.de

51

The Deutsches Maritime Zentrum e.V. operates as an important non-profit think tank dedicated to strengthening the maritime sector in Germany. The organization focuses on innovation and future-oriented topics to maintain the maritime industry's competitive edge internationally. Their services include providing tools such as an interactive maritime map, funding compass, and educational pathfinder, alongside organizing events and workshops. The website reflects a professional and consistent brand presence with clear targeting of maritime stakeholders and government entities. Technically, the website is built on a modern WordPress platform using the Divi theme and several plugins for SEO, job postings, and cookie management. Hosting is provided by planet-ocean-hosting, and the site employs HTTPS with good SSL configuration. The site is mobile optimized and includes structured data for SEO enhancement. Analytics and tracking are implemented via Google Tag Manager and Borlabs Cookie for consent management. From a security perspective, the site enforces HTTPS and uses reCAPTCHA v3 to protect forms. However, it lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found. Overall, the website presents a low-risk profile with good technical and business credibility. Strategic improvements include adding comprehensive privacy and security policies, enhancing security headers, and publishing contact information to improve transparency and compliance.

A

AHC a.s.

ahc.cz

54

AHC a.s. is a leading Czech non-state provider of healthcare and social services primarily targeting seniors. Their offerings include home healthcare, residential care centers, hospices, emergency care, and additional services such as counseling, medical equipment rental, and pharmacy services. The company operates a broad network of facilities and branches across the Czech Republic, positioning itself as a comprehensive care provider with a strong emphasis on quality, professionalism, and personalized care. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google reCAPTCHA, and Cookiebot for consent management, alongside Microsoft Clarity for analytics. The site is mobile-optimized with good navigation and content structure, although some accessibility features could be enhanced. Security practices include HTTPS enforcement and form protection, but the absence of some security headers and a public security policy indicates room for improvement. The security posture is solid with no evident vulnerabilities or exposed sensitive data, but the lack of WHOIS transparency and privacy policy reduces overall trust. The website integrates partner and subsidiary domains clearly, supporting a robust business ecosystem. Overall, the site is professional, trustworthy, and well-suited for its target audience, though improvements in privacy disclosures and security headers are recommended. Strategically, AHC should focus on enhancing transparency around data protection, publishing security policies, and strengthening technical security controls to maintain and grow trust in a sensitive healthcare sector.

S

Domácí zdravotní péče a pečovatelská služba | Sestřička.cz

sestricka.cz

62

The website www.sestricka.cz provides professional home healthcare and caregiving services across the Czech Republic. It targets individuals seeking medical and caregiving support in the comfort of their homes. The site is built on modern web technologies including Webflow CMS, Google Fonts, Microsoft Clarity for analytics, and Cookiebot for cookie consent management. The presence of Google Tag Manager and Facebook Pixel indicates active marketing and user behavior tracking. Despite the lack of WHOIS data, the website content and cookie compliance suggest a legitimate business operation focused on healthcare services. Security posture is moderate with room for improvement in implementing security headers and publishing clear privacy and security policies. No contact emails or phone numbers were found in the HTML content, which may impact user trust and business credibility. Overall, the site is well-designed, mobile-optimized, and provides relevant content for its target audience.

H

Hospic sv. Štěpána, z.s.

hospiclitomerice.cz

45

Hospic sv. Štěpána Litoměřice is a well-established non-profit healthcare organization providing comprehensive hospice and palliative care services in the Czech Republic since 2004. The website serves as an informative platform for patients, families, healthcare professionals, and donors, detailing services such as inpatient care, home hospice, counseling, and educational programs. The organization maintains a strong community presence and partnerships with governmental and charitable entities. Technically, the website is built on ASP.NET WebForms with modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for user tracking. The site is mobile-optimized and professionally designed, offering a good user experience. Security posture is adequate with HTTPS enforced and secure form handling, though it lacks some advanced security headers and a published vulnerability disclosure policy. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages. Overall, the site is trustworthy and credible, reflecting the organization's mission and operational maturity.

D

Dožít doma

dozitdoma.cz

52

Dozitdoma.cz is a Czech non-profit healthcare website dedicated to promoting and supporting mobile hospice care services. The site provides comprehensive information about hospice care, emphasizing the importance of dignified end-of-life care at home. It features an interactive map of hospice providers across Czechia and encourages early engagement with hospice services. The website is built on Drupal 10 and integrates modern web technologies including Google Maps API and social media tracking tools. It demonstrates good digital maturity with mobile optimization and cookie consent mechanisms in place. Security posture is solid with HTTPS and tracking controls, though some security headers could be improved. Overall, the site is trustworthy and professionally presented, serving a critical healthcare niche with clear and relevant content.

B

Běhy pro hospice

behyprohospice.cz

54

Běhy pro hospice is a Czech non-profit platform established in 2017 that organizes charity running events and personal challenges to support hospice care across the Czech Republic. The website encourages public participation through runs and donations, aiming to fulfill the wish of many terminally ill people to remain at home at the end of life. The platform is partnered with Nadacni fond Avast, enhancing its credibility and reach. Technically, the website uses AngularJS framework with integration of Google Tag Manager and Google Analytics for tracking. The site is mobile optimized and provides a good user experience with clear navigation and calls to action. Hosting and domain registration are consistent with the Czech market and business focus. From a security perspective, the site uses HTTPS and asynchronous loading of tracking scripts, but lacks visible security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Privacy policy is present but cookie policy and terms of service are missing or not clearly linked. Overall, the website presents a trustworthy and professional front for a small non-profit organization with moderate technical maturity. Strategic improvements in privacy compliance and security headers would enhance its posture and user trust.