Security Directory

D

Digitalwerk

digital-werk.org

53

Digitalwerk is a regional initiative based in Brandenburg, Germany, focused on supporting the digital transformation of small and medium-sized enterprises (SMEs). The organization offers free workshops, events, and experience stations to help businesses in the crafts and mid-sized sectors adopt digital technologies. The website is professionally designed using WordPress and the Divi theme, incorporating modern SEO and event management plugins. The technical infrastructure is solid, with HTTPS enabled and reputable hosting and domain registration through IONOS SE. However, the absence of DNSSEC and missing privacy and cookie policies indicate areas for improvement in security and compliance. Tracking is minimal and primarily conducted via etracker, with no aggressive user profiling detected. Overall, the site presents a trustworthy and professional image aligned with its business mission.

V

Volkswagen Belegschaftsstiftung

volkswagen-belegschaftsstiftung.de

55

Volkswagen Belegschaftsstiftung is a non-profit foundation established in 2011 by Volkswagen AG to support disadvantaged children, youth, and young adults around the global Volkswagen locations through sustainable aid projects. The website serves as an informational and navigational platform presenting the foundation's goals, projects, and a dedicated Förderportal for funding applications. Technically, the site is built on TYPO3 CMS with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and published incident response policies. The domain registration data aligns well with the foundation's identity, indicating a trustworthy and legitimate online presence.

M

MINUTACZ s.r.o.

minutacz.cz

46

MINUTACZ s.r.o. operates as an authorized distributor and retailer of Swiss watch brands TISSOT and BALL within the Czech Republic. The company has a well-established market presence since 2010, offering official products, service locations, and brand information targeted at consumers seeking quality Swiss watches. The website is professionally designed using WordPress CMS, incorporating SEO and GDPR compliance plugins to enhance digital maturity and user experience. The site is optimized for mobile devices and provides clear navigation and contact information, reinforcing trust and credibility. From a technical perspective, the website employs modern web technologies including Google Analytics and Tag Manager for user tracking, Yoast SEO for search optimization, and Slider Revolution for visual content. The site uses HTTPS with good SSL configuration, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a retail website. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, reflecting adherence to GDPR requirements. However, the absence of explicit security policies or incident response contacts suggests room for improvement in transparency and preparedness. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness. Strategically, MINUTACZ should focus on enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure channel to strengthen its security culture and compliance posture. These steps will further solidify customer trust and reduce risk exposure in the evolving digital landscape.

C

Úvod | CIVOP - bezpečnost práce (BOZP) pro firmy

civop.cz

55

The website civop.cz represents a small business specializing in occupational safety (BOZP) services targeted at companies in the Czech Republic. The site is built on WordPress using the GeneratePress theme and incorporates Google Tag Manager for analytics and marketing purposes. The content is professional and relevant to its business domain, focusing on safety consulting and compliance services. Technical infrastructure appears standard for a small business website with moderate performance and good mobile responsiveness. Security posture is basic, with no advanced security headers detected and no visible privacy or cookie policies, indicating room for improvement in compliance and security transparency. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly reduces overall trustworthiness. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and verifying domain registration details to improve business credibility and compliance.

F

Fly United

flyunited.cz

49

Fly United is a professional travel service provider based in the Czech Republic, offering comprehensive travel management solutions for private and corporate clients. With over 30 years of experience and a strong client base exceeding 850 corporate customers, the company positions itself as a reliable partner in the transportation sector. Their services include flight bookings, accommodation, travel insurance, visas, transfers, car rentals, and airport parking, supported by online platforms such as Onesto, Symphony SME, and Fly Online. The website is bilingual (Czech and English) and targets both private travelers and businesses seeking travel management solutions. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Google Analytics integration, ensuring good SEO and user tracking capabilities. Security measures include HTTPS enforcement and Google reCAPTCHA v3 on forms, alongside visible PCI DSS certification, indicating compliance with payment security standards. However, the absence of WHOIS data and lack of explicit security policies or incident response information on the site represent areas for improvement. Overall, the website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content. The security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing vulnerability disclosure information. Privacy compliance is good, with a clear privacy policy and terms of service, though a cookie consent mechanism is not evident. Strategic recommendations include improving security header implementation, adding incident response and vulnerability disclosure details, and enhancing accessibility features to meet broader compliance standards. These steps will strengthen trust and security culture, supporting Fly United's market position as a dependable travel service provider.

P

Planeo

planeo.cz

68

Planeo.cz is a large Czech retail and e-commerce platform specializing in electronics, garden, sport, and auto-moto products with over 100 physical stores. The website presents a professional and user-friendly interface with comprehensive privacy and cookie policies compliant with GDPR. The technical infrastructure leverages modern analytics and advertising technologies including Google Tag Manager, Cookiebot, Exponea, and multiple ad networks, indicating a mature digital marketing strategy. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers are not confirmed in the provided data. The absence of WHOIS data due to privacy protection slightly reduces trust but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing security headers and ensuring all forms are secured against CSRF and input vulnerabilities.

Legendary Cards is an e-commerce platform operated by eSports s.r.o., specializing in collectible sports cards and memorabilia primarily targeting Czech sports enthusiasts and collectors. The website offers a range of products including limited edition cards, sports figures, and related accessories, supported by promotional content and news updates. The business operates with a clear focus on the Czech market and maintains an active social media presence to engage its audience. Technically, the website employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, and the Nette Framework. The site is mobile-optimized with a responsive design and uses cookie consent mechanisms to comply with GDPR. Performance is moderate with good navigation and content structure, though some improvements in accessibility and SEO could be made. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent with granular user controls. However, it lacks explicit security headers and a published security policy or incident response contact. No critical vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture. Overall, the website is trustworthy and professionally maintained, with legitimate domain registration consistent with the business identity. Strategic improvements in security headers and incident response transparency would enhance the security posture further.

Š

Škoda Group

skodagroup.com

63

Škoda Group's website is accessible and built using modern web technologies such as Nuxt.js and integrates Google reCAPTCHA for bot protection. The site implements a cookie consent mechanism via CookieYes, indicating some attention to privacy compliance. However, the website lacks critical business and contact information such as privacy policy, terms of service, contact emails, phone numbers, and physical addresses, which limits its transparency and trustworthiness. The WHOIS data for the domain is unavailable, showing no registration details, which raises concerns about the domain's legitimacy and age. The technical infrastructure appears moderately optimized with good mobile responsiveness but lacks visible security headers and comprehensive privacy compliance indicators.

W

Wittener Transport Kontor – Heinrich Stratmann GmbH

logistikeria.de

55

Wittener Transport Kontor – Heinrich Stratmann GmbH (WTK Stratmann) is a well-established, family-run logistics and special transport company based in Germany with a history dating back to 1953. The company operates multiple locations across Germany and has subsidiaries and joint ventures in the Czech Republic and Poland, offering comprehensive transport, warehousing, and distribution services. Their business model focuses on specialized transport solutions with a strong emphasis on safety, quality, and sustainability, supported by multiple certifications including ISO 9001, SQAS, HACCP, GMP+B4, and ISO 14001. The website reflects a professional and consistent brand image targeting business clients requiring specialized logistics services.

E

EnVys, a.s.

envys.cz

66

EnVys, a.s. operates a community energy platform in the Czech Republic, offering long-term stable electricity prices sourced directly from local power plants. The company targets citizens, firms, and municipalities, emphasizing sustainability and compliance with ESG and Green Deal requirements. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Blazor, jQuery, Google Analytics, Microsoft Clarity, and a chatbot for enhanced user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. WHOIS data is unavailable due to CZ NIC privacy policies, but the presence of official documents and clear contact information supports legitimacy. Overall, the site reflects a mature digital presence suitable for a medium-sized energy company.

U

Unie odběratelů

unieodberatelu.cz

60

Unie odběratelů is a Czech non-profit association dedicated to improving the energy market by advocating for consumer rights and promoting community energy solutions. The organization positions itself as a counterbalance to large energy companies and lobbies, focusing on legislative improvements and enabling access to stable, affordable energy for its members. The website reflects a small but important entity within the Czech energy sector, targeting municipalities and energy consumers interested in communal energy initiatives. Technically, the website is built on an ASP.NET Web Forms platform using older JavaScript libraries such as jQuery 1.11.0 and jQuery UI 1.10.3, alongside modern UI components like Swiper.js. The site is moderately optimized for mobile and SEO, with a good user experience and clear navigation. However, the use of outdated libraries and lack of visible security headers indicate technical debt and potential security risks. From a security perspective, the site uses HTTPS as indicated by resource URLs, but no explicit security headers were detected. The absence of privacy and cookie policies is a compliance gap, especially under GDPR regulations. No contact emails or phone numbers are publicly listed, only a contact form, which limits direct communication channels. The WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and external references support its legitimacy. Overall, the site is functional and professional but would benefit from technical and compliance improvements to enhance security posture and user trust. Strategic recommendations include updating JavaScript libraries, implementing security headers, publishing privacy and cookie policies, and improving transparency of contact information.

C

Clearly

clearly.cz

68

Clearly.cz is a newly launched e-commerce website specializing in health and wellness products, leveraging the Shopify platform for its online retail operations. The site targets general consumers interested in supplements and wellness, positioning itself as a clear and trustworthy brand dedicated to health. The business model is direct-to-consumer online sales with regional partner domains supporting multiple European markets. The website content is professionally designed, well-structured, and optimized for SEO and mobile devices, providing a good user experience.

M

Ministerstvo vnitra České republiky

prevencekriminality.cz

52

The website prevencekriminality.cz is an official government portal operated by the Ministry of Interior of the Czech Republic, focused on crime prevention strategies and public safety. It serves as a comprehensive resource for citizens, public authorities, and professionals involved in crime prevention, offering news, projects, events, and educational materials. The site maintains a strong market position as the authoritative source for crime prevention information in the Czech Republic. Technically, the site is built on WordPress using modern plugins such as Oxygen Builder, Yoast SEO, and GDPR compliance tools like Complianz. It leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized and includes accessibility features, though some improvements could be made. SEO practices are well implemented with structured data and meta tags. From a security perspective, the site enforces HTTPS and uses Cloudflare services, with cookie consent management in place. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers and a dedicated security policy page are absent, which could be enhanced. Incident response and vulnerability disclosure mechanisms are not publicly documented. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively balances user experience with security and privacy considerations, making it a reliable resource for its audience.

P

PixelBrothers s.r.o.

pixelbrothers.cz

50

PixelBrothers s.r.o. is a Prague-based digital agency specializing in custom web design, e-commerce platforms, and corporate systems development. The company offers a broad range of services including SEO, PPC marketing, programming, and mobile app development, targeting businesses seeking tailored digital solutions. Their market position is strong within the Czech Republic, supported by a portfolio of reputable clients and positive testimonials. Technically, the website is built on modern frameworks such as Bootstrap and PrestaShop, with integrations for analytics and live chat, demonstrating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and consent mechanisms in place, though improvements are recommended in security headers and explicit privacy documentation. Overall, the website is professional, user-friendly, and trustworthy, though the absence of WHOIS data slightly impacts domain trustworthiness. Strategic recommendations include enhancing security policies, publishing comprehensive privacy and terms documents, and verifying domain registration details.

S

Sedláček s.r.o.

sedlacek-karcher.cz

50

Sedláček s.r.o. operates the website www.sedlacek-karcher.cz as an authorized reseller and service provider of cleaning and hygiene systems, prominently featuring brands such as Kärcher, TORK, and Kimberly-Clark. The company has a long-standing presence since 1994, targeting both business and consumer markets with sales, service, and rental offerings. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site employs modern tracking and analytics tools including Google Tag Manager, Hotjar, and Facebook Pixel, alongside security measures like HTTPS and Google reCAPTCHA for form protection. However, the absence of explicit privacy and cookie policy pages and lack of WHOIS domain registration data introduce some trust and compliance concerns. Overall, the site demonstrates a moderate security posture with room for improvement in transparency and security headers.

S

Středočeský krajský atletický svaz

skas.cz

42

Středočeský krajský atletický svaz is a regional athletics association serving the Central Bohemia region of the Czech Republic. The organization focuses on athletics event management, communication with clubs, and dissemination of athletics news and documentation. The website serves as an information hub for athletes, coaches, and sports clubs within the region, providing schedules, results, and official documents. The domain is well-established since 2013, reflecting a mature regional sports entity. Technically, the site is built on Joomla CMS with common JavaScript libraries like jQuery and MooTools, offering a moderate performance and basic mobile optimization. Security posture is moderate with HTTPS usage and CSRF tokens in forms but lacks advanced security headers and incident response information. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

N

Nej.cz

internetpb.cz

74

Nej.cz is a Czech telecommunications provider offering internet, digital television, and telephone services primarily targeting personal and business customers. The company operates as part of the O2 group, indicating a strong market position within the Czech Republic. The website presents a professional and consistent brand image with clear service offerings and contact information. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Cookiebot for cookie consent, Hotjar for user behavior analytics, and reCAPTCHA for form security. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent management. However, WHOIS data is unavailable, likely due to privacy protection, which is common for this business type. Overall, Nej.cz demonstrates a trustworthy and professional online presence with room for minor security enhancements.

Běh města Příbrami is a local event website dedicated to the 32nd annual running race held in Příbram, Czech Republic. The site provides detailed information about the event schedule, registration links, fees, and sponsors. It targets runners and the local community interested in participating or supporting the event. The business model centers on event organization and promotion with partnerships from local sponsors and organizations. The website content is relevant and well-structured, focusing on event details and participant information. Technically, the website is built on WordPress using Bootstrap for responsive design and jQuery for interactivity. It employs plugins for image galleries and lightbox effects. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS, ensuring encrypted communication. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No contact email or security incident response information is available, limiting transparency. The domain registration is consistent with the website's purpose and location, supporting legitimacy. Overall, the website is functional and serves its purpose as an event information portal but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.

Brdská 25 is a Czech-based small-scale event organization focused on endurance running and related outdoor sports competitions in the Central Brdy region. The website serves as an informational and registration portal for the annual running race and associated events such as Nordic walking and cruiser bike races. The target audience includes sports enthusiasts, families, and the local community. The business operates primarily as an event organizer with a niche regional market position. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and Responsive Lightbox. The infrastructure is moderate in performance and basic in mobile optimization and accessibility. The site lacks HTTPS, which is a critical security shortfall. No advanced security headers or privacy policies are present, indicating gaps in compliance and security posture. Security evaluation reveals significant vulnerabilities due to the absence of HTTPS and security headers, exposing users to potential risks. No privacy or cookie policies are found, which may lead to GDPR non-compliance. The site does not appear to collect extensive user data or employ tracking technologies, reducing privacy risks but also limiting analytics capabilities. Overall, the website is functional and content-rich for its purpose but requires urgent improvements in security and privacy compliance to protect users and enhance trust. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and improving mobile and accessibility features.

H

Hastra-Service GmbH

hastra-service.de

56

Hastra-Service GmbH is a medium-sized, owner-managed construction and service company based in Halle (Saale), Germany, specializing in asphalt and road construction, traffic safety, and winter services. With approximately 100 employees, the company serves regional clients in Halle and Magdeburg, offering a broad range of services including Tief-, Kanal- und Rohrleitungsbau and specialized Gussasphalt applications. The company holds multiple certifications such as ISO 9001 and AVPQ, underscoring its commitment to quality and professionalism. The website reflects a solid market position with clear service offerings and ongoing recruitment efforts. Technically, the website is built on WordPress 6.8.3 using the OnePress theme, leveraging modern libraries like jQuery and Bootstrap. The site is mobile-optimized with good design quality and navigation clarity, although some accessibility features could be improved. Performance is moderate, and SEO is basic but functional. No advanced analytics or tracking tools are detected, indicating a minimal user tracking approach. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No incident response or vulnerability disclosure information is provided, which could be improved to strengthen trust and readiness. Overall, Hastra-Service GmbH presents a trustworthy and professional online presence consistent with its business operations. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and regulatory adherence.

R

Rheingas Halle-Saalegas GmbH

gasmann.de

59

Rheingas Halle-Saalegas GmbH, operating under the brand 'Der Gasmann', is a regional energy supplier specializing in liquefied gas and gas bottles serving Mitteldeutschland, Germany. The company offers a range of services including sales, rental, and maintenance of gas tanks and bottles, targeting residential and commercial customers in the region. Their market position is that of a trusted local energy provider with a focus on sustainable and modern energy solutions. The website is built on TYPO3 CMS, integrates Google services for analytics and maps, and demonstrates a moderate to good level of digital maturity with responsive design and clear navigation. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the website reflects a professional and trustworthy business presence with good customer engagement features.

P

Pavliš a Hartmann, spol. s r.o.

firefighting-phhp.com

45

Pavliš a Hartmann, spol. s r.o. is a traditional Czech manufacturer specializing in fire hoses and firefighting equipment, including hydrant systems, pumps, nozzles, and valves. The company operates an e-commerce platform targeting firefighting professionals and safety equipment buyers, with a market presence primarily in the Czech Republic and Slovakia but serving customers worldwide. The website is professionally designed, mobile-optimized, and provides comprehensive product information and contact details, supporting a medium-sized manufacturing business model. Technically, the website uses a custom CMS (Live System), integrates Google Tag Manager with privacy-conscious consent settings, and employs modern web technologies such as Bootstrap and Lightbox. Hosting appears to be provided by Active24. The site demonstrates good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. The absence of WHOIS domain registration data reduces trustworthiness slightly, though the website content and contact information appear legitimate and professional. Overall, the website scores well in content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture. Strategic improvements in security transparency and domain registration clarity are recommended to enhance trust and compliance.