Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,182001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
26,701–26,750 of 99,067
PASSERINVEST GROUP, a.s.brumlovka360.cz
Real Estate · Czech Republic
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Brumlovka360.cz is a professionally designed website representing the Brumlovka district, a real estate development in Prague, Czech Republic. The site showcases multiple office buildings, residential projects, parks, and cultural centers, targeting businesses and residents interested in leasing or community engagement. The business is part of PASSERINVEST GROUP, a recognized real estate company. The website is bilingual, providing Czech and English descriptions, enhancing accessibility for a broader audience. Technically, the website uses a modest tech stack including jQuery 1.11.2, Swiper.js, and Waypoints.js. Hosting appears to be provided by Websupport, a Czech hosting provider. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or modern frameworks are detected, and some libraries are outdated, which may pose security risks. From a security perspective, the site lacks visible security headers and privacy or cookie policies, indicating compliance gaps with GDPR and other privacy regulations. No forms or analytics scripts are present, reducing data collection risks but also limiting user engagement tracking. The WHOIS data is consistent with the business location and age, supporting legitimacy. No WAF or blocking mechanisms are detected, and the site content is safe with no adult or questionable material. Overall, the website is a good representation of the business with moderate technical and security maturity. Improvements in privacy compliance, security headers, and updating libraries would enhance trust and reduce risk.
International Military Sports Councilmilsport.one
Government · Belgium
53Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The International Military Sports Council (CISM) operates as a prominent non-profit international organization dedicated to promoting military sports and fostering friendship through sport among armed forces worldwide. With 138 member countries, it organizes a wide range of military sports events, championships, and academic activities, positioning itself as a leading entity in the military sports domain. The website reflects this mission with comprehensive event coverage, news updates, and multilingual regulatory documents, targeting military personnel and associated organizations globally. Technically, the website employs a CMS named MasterEdit and integrates modern web technologies including Google Analytics and Tag Manager for tracking, alongside standard JavaScript libraries like jQuery. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable, likely due to privacy protection, which is common for international non-profits but slightly impacts trust assessment. Overall, the website is professional, content-rich, and trustworthy, serving its niche audience effectively. Strategic improvements in security transparency and accessibility could enhance its posture further.
- Slovenský olympijský a športový výbor
olympic.sk
Government · Slovakia
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The Slovenský olympijský a športový výbor (Slovak Olympic and Sports Committee) operates a comprehensive and professionally designed website serving as the official portal for Slovak Olympic sports news, events, athlete information, and partner relations. The site targets Slovak sports enthusiasts, athletes, and partners, providing timely updates and resources related to Olympic activities. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrating analytics and advertising tools responsibly. Security posture is strong with HTTPS, security headers, and secure form handling, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and digital maturity appropriate for a national sports governing body.
Government · Slovakia
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.mosr.sk is the official online presence of the Ministry of Defence of the Slovak Republic, serving as a comprehensive information portal for defense-related news, policies, and public services. It targets the general public, media, and defense professionals, providing authoritative content on military operations, recruitment, legislative documents, and international cooperation. The site maintains a consistent brand identity aligned with government standards and offers multiple official social media channels for outreach. Technically, the site is built on the SysCom CMS platform and utilizes modern web technologies including jQuery and Google Analytics. It demonstrates good mobile optimization and accessibility features, including a version for visually impaired users and a cookie consent mechanism compliant with GDPR. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks visible advanced security headers and a dedicated security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the domain's legitimacy and consistency with the Slovak Ministry of Defence. Overall, the website is professional, trustworthy, and suitable for its governmental role. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and compliance.
- VfB Stuttgart
vfb.de
Other · Germany
57Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
VfB Stuttgart operates a comprehensive official website serving as the primary digital platform for the football club. The site offers extensive content including news, team rosters, match schedules, ticketing, merchandise sales, and fan engagement features. The club maintains a strong market position in German football with a large fan base and professional digital presence. Technically, the website employs modern JavaScript frameworks, consent management tools, and integrates advertising and analytics services while maintaining good mobile optimization and accessibility standards. Security posture is solid with HTTPS enforced and secure login forms, though some security headers and explicit incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, making it a reliable source for fans and stakeholders.
- BK Loko Trutnov
bktrutnov.cz
Other · Czech Republic
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
BK Loko Trutnov is a well-established basketball club based in the Czech Republic, founded in 1999. The club operates multiple teams across various age groups and genders, actively participating in national and European competitions. Their website provides comprehensive information about matches, results, news articles, photo galleries, and videos, targeting basketball enthusiasts and the local community. Technically, the site uses a custom PHP-based CMS with several JavaScript libraries for UI enhancements but lacks modern security headers and HTTPS enforcement. Privacy compliance is minimal, with no formal privacy or terms of service pages, though the site explicitly states no cookies are used. The security posture is moderate but could be improved with SSL and security headers. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.
Staylive ABstaylive.io
Media · Sweden
67Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Staylive AB is a Swedish technology company specializing in providing white-label streaming platforms for content creators, sports federations, leagues, and clubs. Their platform enables clients to build custom streaming services with features such as live and on-demand content, payment integration, mobile app publishing, and full ownership of content and users. Positioned as a stable and secure solution, Staylive serves a medium-sized market segment with notable partnerships and client testimonials, including a recent acquisition by Two Circles, enhancing their market presence. Technically, Staylive's website is built on Webflow and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and LinkedIn Insight. The platform supports multi-device streaming including iOS, Android, and Apple TV. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and privacy documentation. From a security perspective, Staylive employs HTTPS with SSL encryption and complies with payment security standards (PA-DSS PCI). Cookie consent is implemented with an opt-in mechanism, reflecting basic GDPR compliance. However, explicit privacy policies, terms of service, and security incident response contacts are not clearly presented, representing areas for enhancement. No critical vulnerabilities or suspicious indicators were detected. Overall, Staylive presents a professional and trustworthy online presence with strong business credibility and a solid technical foundation. The lack of WHOIS transparency is mitigated by the company's evident market position and parent company association. Strategic improvements in security policies, privacy documentation, and accessibility would further strengthen their digital maturity and compliance posture.
Staylive ABstaylive.se
Media · Sweden
58Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Staylive AB is a Swedish-based technology company specializing in providing white-label streaming platforms for content owners, sports federations, leagues, and event organizers. Their platform enables customers to launch their own branded streaming services with monetization options such as subscriptions and one-time payments. The company emphasizes full ownership of content and user data, live and on-demand streaming capabilities, and mobile app publishing across major platforms. Staylive is positioned as a stable and secure streaming solution with notable clients and partnerships in the sports and media sectors, and is now part of the parent company Two Circles. Technically, the website is built on Webflow with integrations including Google Analytics, Google Tag Manager, and Finsweet Cookie Consent for privacy compliance. The platform supports modern web standards and mobile optimization, though some accessibility features could be improved. The website employs SSL encryption and claims compliance with payment security standards (PA-DSS PCI), but lacks explicit security headers and detailed privacy or security policies. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but does not publish a security policy or incident response contacts. WHOIS data is incomplete and privacy protected, which is common for tech companies but reduces transparency. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a good security posture but could enhance transparency and compliance documentation. The overall risk assessment is moderate with recommendations to improve security headers, publish comprehensive privacy and security policies, and enhance accessibility. The business shows credible market presence and technical maturity suitable for its industry and target audience.
- IInbank
inbank.cz
Finance · Czech Republic
67Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Inbank.cz is a Czech Republic-based banking institution providing retail banking services such as loans and deposits. The website presents a professional design with moderate technical sophistication, leveraging modern JavaScript frameworks like Nuxt.js and integrating third-party services such as Dokobit for authentication and Google Maps API for location services. The domain registration data aligns well with the business founding date and location, supporting the legitimacy of the entity. However, the website lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS implied but missing explicit security headers and vulnerability disclosures. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security transparency.
- FANSHOP PROSLAVISTY.CZ
proslavisty.cz
—
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
- IInstitut Curie
institut-curie.org
Healthcare · France
70Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Institut Curie is a prominent French non-profit foundation dedicated to cancer research, treatment, and education. The organization operates a hospital staffed with leading experts, an internationally recognized research center, and educational programs to train future cancer specialists. Their website reflects a professional and trustworthy presence, targeting patients, donors, researchers, and the general public interested in cancer-related initiatives. Technically, the website employs modern web technologies including Nuxt.js, Tailwind CSS, and Swiper.js, with performance and mobile optimization rated as good to excellent. Cookie consent is managed via Cookiebot, indicating attention to privacy compliance. Hosting is likely provided by Gandi SAS, a reputable registrar and hosting provider. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected. The domain registration is consistent with the organization's history and business claims, enhancing trustworthiness. Overall, the website is well-designed, content-rich, and professionally maintained, with room for improvement in explicit privacy and security policy disclosures. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen security posture and compliance.
Footshop a.s.footshop.cz
Retail · Czech Republic
71Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
Footshop a.s. operates a prominent e-commerce platform specializing in sneakers, clothing, and accessories, primarily targeting the Czech Republic and Central European markets. The website offers a broad selection of popular brands such as adidas, Nike, Converse, and Vans, supported by a loyalty program and multiple physical stores. The business model focuses on retail sales through both online and offline channels, positioning Footshop as a leading retailer in its niche. The website's content is professionally curated, with clear navigation and comprehensive product categorization, appealing to a general audience interested in fashion and footwear. Technically, the website employs modern web technologies including React, Webpack, and Google Tag Manager, ensuring a responsive and performant user experience. The presence of service workers and performance monitoring scripts indicates a commitment to maintaining site speed and reliability. The platform appears to be built on PrestaShop CMS, a common choice for e-commerce sites, and integrates third-party services for analytics and cookie consent management. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers to protect users. Privacy and cookie policies are clearly presented, with mechanisms for user consent, aligning with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected in the analysis. However, the absence of a dedicated security policy or incident response contact suggests areas for improvement in transparency and readiness. Overall, Footshop.cz demonstrates a mature digital presence with strong business credibility and a solid security posture. The lack of WHOIS data due to privacy protection is common and does not detract from the site's legitimacy. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility features, and maintaining vigilance on third-party scripts to sustain security and compliance.
Infinite Eyeinfinite-eye.com
Technology · United Kingdom
60Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Infinite Eye is a Glasgow-based web design and development agency established in 2001, offering strategy, bespoke website design, WordPress development, and e-commerce solutions primarily to UK organizations. The company positions itself as a specialist with a strong portfolio and a fully remote operational model. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern tools such as Google Tag Manager, Google Optimize, and reCAPTCHA for analytics, optimization, and security. The site is well-designed, mobile-optimized, and provides a professional user experience. Security posture is generally good with HTTPS enforced and secure form handling, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the professional online presence. Overall, the website is credible and functional but would benefit from enhanced security and privacy compliance measures.
Obec Zašovázasova.cz
Government · Czech Republic
54Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Obec Zašová operates an official municipal website serving the local community and visitors by providing comprehensive information about municipal services, cultural events, news, and contact details. The website is well-structured, professionally designed, and targets residents and tourists interested in Zašová. The business model is government/public service with a focus on community engagement and information dissemination. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Swiper, and Nette framework, hosted likely by WEDOS, with good mobile optimization and accessibility features. Security posture is strong with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and visible privacy compliance mechanisms. Overall, the domain is legitimate, long-standing, and consistent with the municipal nature of the site.
Mototechnamototechnadrive.cz
Transportation · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Mototechna Drive is a Czech Republic-based vehicle rental service provider offering both long-term and short-term car rentals. The website is built on a modern Angular framework and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. The site demonstrates good design quality, mobile optimization, and clear navigation, although the analyzed page is a 404 error page, the overall site structure is professional and consistent with the brand. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security headers and explicit security policies. Privacy compliance is good with accessible privacy and cookie policies, and GDPR compliance is indicated. Business credibility is high with consistent WHOIS data and active social media presence. Overall, the site scores well but could improve in security header implementation and incident response transparency.
Other · Czech Republic
62Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website autox.cz currently serves as a minimal placeholder with only a single hyperlink to AAA AUTO, a known automotive company. There is no substantive content, metadata, or business information presented on the site. The domain is registered since 2012 with Czech hosting providers, indicating a stable registration history but the website itself lacks digital maturity and content depth. Technically, the site does not reveal any modern frameworks, scripts, or CMS usage, and no security headers or SSL information is available from the provided data. Security posture is weak due to absence of HTTPS and lack of privacy or cookie policies, which also impacts compliance with GDPR. Overall, the site appears to be either under development or used solely as a redirect or referral page, limiting its business credibility and user trust.
- eSol.cz s.r.o.
esol.cz
Technology · Czech Republic
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
eSol.cz s.r.o. is a Czech-based software development studio specializing in custom mobile applications, web development, and comprehensive IT solutions with a strong focus on transportation and geolocation software. With over 25 years of experience in bespoke software development and more than 15 years in transportation solutions, eSol.cz holds a leading market position in this niche. Their key services include native and hybrid mobile app development for Android and iOS, custom web solutions, API-driven complex platforms, and IT infrastructure management including hosting in their own cloud environment. The company emphasizes long-term client relationships and tailored solutions. Technically, the website is built on modern frameworks such as Bootstrap and jQuery, uses secure HTTPS connections, and integrates Google reCAPTCHA for form security. However, the absence of privacy and cookie policies and missing WHOIS data slightly reduce the overall trust and compliance posture. Security practices are solid with encrypted communications and form protections, but could be improved by adding security headers and incident response disclosures. Overall, the website is professional, well-designed, and trustworthy, serving a specialized business audience effectively.
Energy · Slovakia
69Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Slovenský plynárenský priemysel, a.s. (SPP) is the largest energy supplier in Slovakia with a history spanning over 165 years. The company provides natural gas and electricity to households and businesses, emphasizing reliability, fairness, and ecological solutions such as photovoltaics and virtual batteries. The website targets Slovak domestic and corporate customers, offering comprehensive product and service information, calculators, and customer support portals. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response details are not published. WHOIS data confirms the legitimacy and consistency of the domain registration with the company's identity. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting SPP's market leadership in the Slovak energy sector.
SPP Storage, s.r.o.sppstorage.cz
Energy · Czech Republic
61Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
SPP Storage, s.r.o. is a specialized energy sector company operating a significant underground natural gas storage facility in the Czech Republic. The company offers cross-border gas storage services with a capacity of 6.94 TWh, positioning itself as a reliable partner in the energy storage market. The website reflects a professional and consistent brand image, targeting business clients in the energy industry. Technically, the site is built on Drupal 10 with modern frontend technologies, providing good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie compliance, though some improvements in security headers and incident response transparency are recommended. Overall, the domain registration and website content align well, indicating a legitimate and established business presence.
- V24 Media s.r.o.
vogue.cz
Media · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Vogue.cz is the Czech and Slovak edition of the internationally renowned Vogue fashion magazine, operated by V24 Media s.r.o. The website serves as a comprehensive fashion and lifestyle portal offering news, trends, beauty tips, and cultural content targeted at fashion-conscious audiences in the Czech Republic and Slovakia. It supports subscription services and advertising partnerships, positioning itself as a leading media brand in the regional fashion industry. Technically, the site is built on modern web technologies including React and Next.js, with integrations for fonts, cookie consent, and analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and standard security headers, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, though the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include publishing security policies and incident response contacts to enhance transparency and trust.
NextPage Mediaheroine.cz
Media · Czech Republic
70Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Heroine.cz is a Czech online media platform focused on women's issues, feminism, culture, psychology, and social topics. It offers a mix of free and premium content including articles, podcasts, and a printed magazine available via subscription and e-shop. The website is professionally designed with consistent branding and targets Czech-speaking women interested in progressive social discourse. The platform is operated by NextPage Media and maintains a moderate market position within niche feminist media in the Czech Republic. Technically, the site uses a modern Ruby on Rails framework with integrations for Google Analytics, Microsoft Clarity, Gemius, and advertising networks such as Google Adsense and Seznam SSP. Security posture is good with HTTPS, CSRF protection, and bot mitigation via Cloudflare Turnstile captcha. However, explicit privacy and cookie policies are not clearly found in the provided content, which impacts privacy compliance scoring. WHOIS data is unavailable, which reduces trustworthiness but the professional content and social media presence support legitimacy. Overall, Heroine.cz is a credible media outlet with room for improvement in privacy transparency and WHOIS data availability.
- ALSA, z.s.
alspruvodce.cz
Healthcare · Czech Republic
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ALSA, z.s. operates a community portal dedicated to supporting individuals affected by Amyotrophic Lateral Sclerosis (ALS) in the Czech Republic. The organization provides educational resources, patient counseling, equipment rental, rehabilitation programs, and community networking. Positioned uniquely in the Czech and Slovak regions, ALSA serves a niche healthcare non-profit market focused on ALS patient support. The website is professionally designed using modern React and Next.js technologies, offering a good user experience with mobile optimization and clear navigation. However, it lacks visible privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with no detected security headers or explicit SSL information in the provided data. Social media presence is strong, enhancing community engagement and trust. Overall, ALSA presents as a credible and focused non-profit organization with room for improvement in privacy and security compliance.
Retail · Czech Republic
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.iqfan.cz is a Czech language platform focused on providing information, reviews, tips, and purchasing guidance related to IQOS tobacco heating devices, particularly the IQOS ILUMA series. It targets Czech-speaking users interested in IQOS products, offering discount codes and links to dealers and e-shops. The site maintains a moderate market position within the niche retail sector for tobacco alternatives. Technically, the site is built on ASP.NET Web Forms, uses jQuery 1.12.4, and integrates Google Analytics and Tag Manager for tracking. The design is professional and mobile-optimized, though accessibility features are basic. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and privacy policies. No WHOIS data is available, which limits domain trust verification. Overall, the site is content-rich and functional but would benefit from enhanced privacy compliance and security hardening.
- Pprofi people s.r.o.
spojimese.cz
Non-profit · Czech Republic
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Spojimese.cz is a charitable platform operated by profi people s.r.o. that connects private donors with single parents and people in need in the Czech Republic. The website facilitates verified requests for help and enables direct communication via an online chat. The platform operates without fees and partners with organizations such as Klub svobodných matek. Technically, the site uses modern Blazor Server technology with Semantic UI for the frontend and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and secure forms, but lacks important security headers and cookie consent mechanisms, which are recommended for GDPR compliance. WHOIS data is unavailable, which limits domain trust verification, but the business information and content appear legitimate and consistent with a small non-profit organization focused on social aid. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.
—
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
profi-people s.r.omstranka.cz
Other · Czech Republic
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
mSTRANKA.cz is a Czech service operated by profi-people s.r.o that offers free personal and business website creation with a paid subscription model for hosting and domain management. The service targets individuals, small businesses, craftsmen, and couples seeking wedding websites, providing a turnkey solution including website maintenance and editing. The website is professionally designed with clear navigation and good mobile optimization, leveraging common web technologies such as Bootstrap, jQuery, and Font Awesome. It integrates Google Analytics and Tag Manager for user tracking and employs a cookie consent mechanism to comply with privacy regulations. However, the absence of explicit privacy policy and terms of service pages is a gap in compliance. The WHOIS data for the domain is unavailable, which limits domain trust verification, but the website content and contact information appear legitimate and professional. Overall, the site demonstrates a good balance of usability, business credibility, and moderate security posture.
- CLEVER Soft s.r.o
identifikace.cz
Other · Czech Republic
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website identifikace.cz operates as the Central Registry for animals and items in the Czech Republic, specializing in the registration and identification of pets such as dogs, cats, and ferrets via microchips. Established since 1996, the company CLEVER Soft s.r.o manages this service, providing a paid registration model with free updates and a user-friendly online platform for registration and chip lookup. The site targets pet owners, shelters, and municipalities, positioning itself as a trusted national service with a clear business model and long-standing market presence. Technically, the website is built on ASP.NET Web Forms with modern front-end libraries including Bootstrap and jQuery. It integrates Google Analytics for visitor tracking and CookieYes for GDPR-compliant cookie consent management. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and performance tuning. The technical infrastructure appears stable and moderately performant. From a security perspective, the site enforces HTTPS and provides a cookie consent mechanism with granular controls, reflecting good privacy compliance. However, it lacks publicly available security policies, incident response contacts, and advanced security headers, which are recommended to enhance trust and resilience. No vulnerabilities or suspicious content were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, identifikace.cz is a professionally maintained, trustworthy website serving an essential niche in pet identification and registration in the Czech Republic. Strategic improvements in security transparency and incident readiness would further strengthen its posture and user confidence.
- CClever Soft s.r.o.
kolin.cz
Media · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Kolín.cz is a well-established local news and information portal serving the Kolín region in the Czech Republic. Operated by Clever Soft s.r.o., the website provides timely news articles, event calendars, business directories, accommodation listings, classifieds, and local media services such as TV and cinema information. The site targets residents and visitors of the Kolín area, offering a comprehensive community resource supported primarily through advertising revenue. The domain has been active since 1997, indicating a long-standing presence in the local media landscape. Technically, the website employs a custom CMS and integrates modern web technologies including Google Tag Manager, Google Publisher Tags for advertising, AMP components for performance, and Google Fonts for typography. Hosting is provided by Active24, a reputable Czech hosting provider. The site is mobile-optimized with good SEO practices and basic accessibility features. GDPR compliance is evident through a comprehensive privacy policy and an active consent management platform. From a security perspective, the site uses HTTPS with a good SSL configuration and implements a consent mechanism for cookies and personal data processing. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found in the analysis. Overall, Kolín.cz presents a professional and trustworthy online presence for local news and services. It maintains good privacy and security practices appropriate for its business model and audience. Strategic recommendations include enhancing security headers, auditing third-party scripts regularly, and adding clearer contact phone information to improve user trust and support.
GBGgbgstatus.com
Technology
71Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
GBG Status is a professional status and incident reporting website for GBG, a technology company specializing in identity verification and data validation services. The site provides real-time updates on system performance and incidents affecting various GBG services, targeting business customers who rely on these services. The website is well-structured, mobile-optimized, and uses modern technologies including jQuery and Google reCAPTCHA to secure subscription forms. However, the absence of publicly accessible WHOIS data for the domain raises questions about domain registration legitimacy or recent acquisition. The site lacks explicit privacy, cookie, and terms of service policies, which impacts privacy compliance scores. Overall, the website demonstrates a solid technical foundation and professional presentation but would benefit from enhanced transparency and security policy disclosures.
Netpromotion group s.r.o.netfirmy.cz
Other · Czech Republic
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Netfirmy.cz operates as the largest regional business directory and lead generation platform focused on Eastern Bohemia, Czech Republic. It provides verified company listings, user ratings from Google and Facebook, and facilitates business inquiries with over 120,000 monthly requests. The website is owned by Netpromotion group s.r.o., a company with over 19 years of market presence, positioning itself as a trusted regional business resource. The platform targets general users seeking reliable local businesses and services.
ADRAadra.cz
Non-profit · Czech Republic
73Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
ADRA is a well-established non-profit organization based in the Czech Republic, focused on humanitarian aid and development projects. The website reflects a professional presence with clear branding and content targeted at donors, volunteers, and the general public interested in humanitarian causes. The domain age since 1997 supports the organization's longstanding market presence. Technically, the website is built on WordPress with modern SEO and cookie consent tools such as Yoast SEO and Cookiebot, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS, but lacks some advanced security headers and explicit incident response information. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but improvements in security headers and incident response transparency are recommended. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy and cookie consent mechanism. Overall, the website is trustworthy, professional, and safe for general audiences.
Česká mládež církve adventistůceskamladez.cz
Non-profit · Czech Republic
72Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Česká mládež církve adventistů is a non-profit religious youth organization based in the Czech Republic focused on providing a community space for young people to share their faith and doubts. The organization hosts educational, motivational, and mission-oriented events including regional and national youth congresses and prayer weeks. Their website offers downloadable Bible study materials and detailed contact information for local youth groups. The organization targets youth and young adults interested in the Adventist church, positioning itself as a niche community within the Czech religious landscape. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as jQuery, Google Fonts, and Cookiebot for cookie consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses Cookiebot for GDPR-compliant cookie consent. However, it lacks important security headers and does not publish a privacy policy or terms of service, which are recommended for compliance and trust. No vulnerabilities or suspicious activities were detected. The WHOIS data is unavailable, likely due to privacy protection, but the website content and contact details appear legitimate and consistent with the organization's mission. Overall, the site is professional and trustworthy for its target audience, but it would benefit from enhanced privacy disclosures, security headers, and formal policies to improve compliance and security posture.
Klub Pathfinderpathfinder.sk
Non-profit · Slovakia
51Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Klub Pathfinder is a Slovak non-profit organization dedicated to youth development through outdoor activities, Christian education, and community events. The website serves as a hub for event announcements, training programs, and resources for youth and their leaders. It maintains an active presence with regular content updates and social media engagement, primarily on Facebook. Technically, the site is built on WordPress with common plugins for galleries, forms, and cookie management, providing a moderate performance and good mobile experience. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and formal security policies. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, the site is trustworthy and professional, serving its target audience effectively.
- Statutární město Mladá Boleslav
mb-net.cz
Government · Czech Republic
51Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website https://mb-net.cz/ is the official online presence of the statutory city of Mladá Boleslav, Czech Republic. It serves as a comprehensive portal for residents and visitors, offering city information, municipal services, news updates, event calendars, and contact details. The site is well-positioned as a government entity's digital platform, providing essential public services and information in Czech language. The business model is focused on public service delivery and citizen engagement, with no commercial intent. The domain's long history since 1997 supports its credibility and established presence. Technically, the website employs a custom CMS (vismo®), modern web standards including HTML5, CSS3, and JavaScript, and integrates Google services such as reCAPTCHA for form security and Google Analytics for traffic analysis. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Cookie consent and GDPR compliance mechanisms are implemented effectively. From a security perspective, the site uses HTTPS with excellent SSL configuration, employs reCAPTCHA to protect forms, and manages cookie consent responsibly. However, it lacks explicit published security policies, incident response contacts, and security headers that could enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is a trustworthy, professional municipal portal with good content quality and technical implementation. Strategic improvements include publishing security and incident response policies, enhancing security headers, and possibly adding terms of service to improve transparency and compliance.
- Městský úřad Česká Lípa
mucl.cz
Government · Czech Republic
52Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.mucl.cz serves as the official municipal portal for the city of Česká Lípa in the Czech Republic. It provides residents and visitors with comprehensive information about city administration, public services, events, and contact details. The site is well-structured, professionally designed, and targets local citizens and stakeholders. It offers key services such as news updates, event calendars, online forms, and access to municipal resources. The presence of official branding and social media links reinforces its legitimacy as a government entity. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate widgets. The site uses a custom CMS platform (vismo®) tailored for municipal websites. Performance and mobile optimization are good, with accessibility features implemented to support diverse users. Security measures include HTTPS enforcement and CAPTCHA protection on forms, alongside a cookie consent mechanism compliant with GDPR. Security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing explicit security policies or incident response contacts. The absence of WHOIS data for the domain is a notable transparency gap, though the website content and official contact information strongly indicate a legitimate government presence. No signs of malicious content or blocking mechanisms were detected, and the site maintains a safe content rating suitable for general audiences. Overall, www.mucl.cz is a credible, well-maintained municipal website with good technical and security practices. Strategic improvements in domain transparency and security policy disclosures would further strengthen trust and compliance.
- Michal Novotný
novotnyfotograf.cz
Other · Czech Republic
65Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Michal Novotný operates a professional photography studio specializing in artistic and industrial photography based in Jihlava, Czech Republic. The website serves as a portfolio showcasing photographic works and provides clear contact information for potential clients. The business appears to be a small, local service provider with a focus on quality imagery and client engagement. Technically, the website is built on Drupal CMS with a modern JavaScript stack including jQuery, Masonry, and Bootstrap, hosted behind Cloudflare for CDN and DNS services. The site is mobile optimized and performs moderately well, with a clean and consistent design. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacks advanced security headers and formal security policies. Privacy compliance is basic, with no dedicated privacy or terms of service pages found. Overall, the domain registration is consistent with the business age and location, supporting legitimacy. Recommendations include enhancing security headers, adding privacy and incident response policies, and maintaining up-to-date software versions to improve security and compliance.
Asksuiteasksuite.com
Hospitality
75Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Asksuite is a technology company specializing in AI-powered omnichannel communication platforms tailored for the hospitality industry. Their platform supports hotels and resorts in boosting direct bookings and increasing productivity through integrated communication channels such as AI chatbots, email, social media, and messaging apps. The company positions itself as a favored AI assistant for hoteliers, with a professional and consistent brand presence. Technically, the website is built on WordPress with Elementor and Yoast SEO, hosted on AWS infrastructure, and employs multiple analytics and tracking tools. Security posture is generally good with HTTPS and domain protection statuses, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and consent mechanisms. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.
- MMikroregion Rožnovsko, s.o.
roznovsko.cz
Government · Czech Republic
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Mikroregion Rožnovsko, s.o. is a small non-profit regional association based in the Czech Republic, focused on promoting local culture, tourism, and community development within the Rožnovsko microregion. The website serves as an information hub for residents and visitors, providing updates on cultural events, local governance, and regional projects. The organization leverages modern web technologies including Bootstrap, jQuery, and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content in Czech language. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is basic, with no explicit privacy policy or terms of service found on the main page. Overall, the website is trustworthy and professionally maintained, reflecting the organization's legitimacy and community focus.
- WWirtualna Polska
wp.pl
Media · Poland
70Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Wirtualna Polska is a leading Polish online media company providing a broad range of content including news, sports, finance, entertainment, and weather. The website www.wp.pl serves as a comprehensive portal for Polish users, offering various services such as email, TV online, and radio streaming. The platform is well-established with consistent branding and a large network of subsidiary and partner sites. Technically, the site uses modern web technologies including JavaScript frameworks, GraphQL APIs, and service workers, ensuring a responsive and engaging user experience. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and integrates analytics tools like Hotjar, although some advanced security headers could be improved. Overall, the site demonstrates a mature digital presence with good privacy compliance and user trust indicators.
- Klub Pathfinder z.s.
pathfinder.cz
Non-profit · Czech Republic
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Klub Pathfinder z.s. is a Czech non-profit organization dedicated to youth development through scouting and outdoor activities. The organization offers a variety of programs including weekend meetings, camps, and educational opportunities for youth leaders. The website reflects a well-structured and content-rich platform targeting children, youth, and their guardians, emphasizing values such as responsibility, nature protection, and faith. Technically, the site is built on Drupal CMS with modern web technologies and includes integrations for analytics and user tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data is a concern for domain trust but does not detract from the legitimacy of the organization as evidenced by comprehensive contact information and partnerships. Overall, the site is professional, trustworthy, and well-positioned within its sector.
Non-profit · Czech Republic
53Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.casd.cz represents the Czech-Slovak Union of the Seventh-day Adventist Church, a well-established non-profit religious organization affiliated with a global church community. The site provides rich content including news, educational resources, humanitarian aid information, and media offerings, targeting members and interested individuals in Czechia and Slovakia. Technically, the site is built on WordPress with modern web technologies, including Google Analytics and Google Maps integration, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. The absence of WHOIS data reduces domain trustworthiness, but the website content and structured data strongly indicate legitimacy. Overall, the site is professional, content-rich, and safe for general audiences.
- Université PSL
psl.eu
Education · France
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Université PSL is a prestigious French university composed of multiple member institutions, offering a broad range of graduate programs, research initiatives, and innovation support. The website reflects a well-established educational institution with a strong international presence and a focus on excellence and sustainability. Technically, the site is built on Drupal 10, uses Matomo for analytics, and is hosted under a reputable registrar, OVH SAS. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
Team Vitalityvitality.gg
E-commerce
70Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Team Vitality operates a professional esports team and an official merchandise e-commerce store targeting esports fans and gamers. The website is built on the Shopify platform, integrating modern marketing and analytics tools such as Google Tag Manager, Didomi for consent management, and Shoplift for A/B testing. The site demonstrates a good level of digital maturity with fast performance, mobile optimization, and SEO best practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be enhanced. Privacy compliance is partially implemented with consent mechanisms but lacks visible privacy and terms of service pages. Overall, the website is professional and trustworthy but would benefit from improved transparency and contact information.
Other · France
69Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The Fédération Française de Football (FFF) is the official governing body for football in France, providing comprehensive information on national teams, competitions, clubs, and football-related activities. The website serves a broad audience including fans, players, officials, and stakeholders, offering news, event details, and official communications. The digital infrastructure employs modern web technologies, including JavaScript frameworks, consent management platforms, and analytics tools, ensuring a professional and user-friendly experience. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is trustworthy, well-branded, and professionally maintained, supporting the FFF's role as a key sports federation in France.
SK Slavia Prahaveznakuhvezdaje.cz
Other · Czech Republic
50Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
SK Slavia Praha is a well-established Czech football club celebrating its 130th anniversary with a new visual identity and logo. The website serves as a dedicated platform to showcase this rebranding effort, including the club's history, logo evolution, custom font, fanshop merchandise, and related brand extensions. The site targets fans, sports enthusiasts, and customers interested in official club products. Technically, the website uses modern web standards with custom fonts, video content, and Google Analytics for visitor tracking. The site is mobile-optimized and professionally designed, providing an excellent user experience. Security-wise, the site implements a cookie consent mechanism but lacks visible security headers and explicit privacy or security policies. No contact information or incident response details are provided, which are areas for improvement. Overall, the domain registration aligns with the website's purpose, indicating legitimacy. The site is safe, free of adult or questionable content, and maintains consistent branding.
- Nutrisens
nutrisens.fr
Healthcare · France
50Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Nutrisens is a French agro-food group specializing in nutrition and health, offering products designed by nutrition experts and chefs for patients with malnutrition, dysphagia, specific diets, and food allergies. The company targets both individual patients and healthcare professionals, operating an online shop to distribute its products. The website is built on WordPress with modern SEO and analytics tools, reflecting a medium-sized enterprise with a professional digital presence. Security posture is good with HTTPS and cookie consent implemented, though explicit privacy and terms of service pages are missing. The domain WHOIS data is not found in the VeriSign database, which raises concerns about domain registration transparency. Overall, the website is professional and trustworthy in content but would benefit from improved compliance documentation and clearer domain registration information.
Petit Press, a.s.sme.sk
Media · Slovakia
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
SME.sk is a leading Slovak news portal operated by Petit Press, a.s., providing comprehensive news coverage across various sectors including politics, economy, culture, and sports. The website targets the general Slovak public and holds a strong market position as one of the most read news sources in Slovakia. The business model is primarily based on online media publishing with revenue streams from advertising and subscriptions. The site demonstrates a high level of content quality and consistent branding, reflecting its established reputation since its founding in 1993. Technically, SME.sk employs a modern web technology stack including JavaScript frameworks, Google Fonts, and multiple advertising and analytics platforms such as Google DoubleClick, PubMatic, and Gemius. The site uses a custom CMS and shows good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in speed and accessibility. From a security perspective, the website enforces HTTPS with excellent SSL configuration and includes standard security headers. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR adherence. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for enhancement. Overall, SME.sk presents a secure, professional, and trustworthy online presence with minor gaps in explicit security governance documentation. Strategic recommendations include publishing a dedicated security policy, establishing a vulnerability disclosure program, and enhancing accessibility to improve user experience and compliance.
Vodárny a čerpadlavodarnycerpadla.cz
Other · Czech Republic
53Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Vodárny a čerpadla is a Czech-language website providing practical tips for everyday life, focusing on household care, gardening, kitchen ideas, and DIY repairs. The site targets a general audience interested in improving home and garden maintenance with easy-to-follow advice. The business operates as a content publisher with a niche focus, maintaining a consistent brand and good content quality. Technically, the website uses standard modern web technologies including HTML5, CSS3, and JavaScript, with Cloudflare DNS services. The site is mobile optimized and has good SEO practices but lacks advanced frameworks or CMS identification. Security posture is moderate with HTTPS implied but no visible security headers or explicit security policies. Privacy compliance is limited, with no cookie consent mechanism and only basic privacy and terms pages. WHOIS data is inconsistent, showing a future domain creation date, which raises some trust concerns but does not detract from the site's professional presentation and content accessibility. Overall, the site is functional and trustworthy for its content niche but would benefit from enhanced security and privacy measures.
Media · Czech Republic
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
WebLinks.cz is a Czech language online catalog specializing in internet links related to films, classifieds, collecting, hobbies, and related topics. The website targets Czech users interested in these niche areas and monetizes primarily through Google AdSense advertising. The site structure includes multiple thematic subdomains focusing on specific interests such as model railways, women's inspiration, and job listings. Technically, the site uses basic HTML, CSS, and JavaScript with Cloudflare DNS services but lacks modern CMS or frameworks. The design and user experience are basic with limited mobile optimization and accessibility features. Security posture is weak due to lack of HTTPS information, absence of security headers, and no visible privacy or cookie policies. WHOIS data is inconsistent, showing a domain creation date in the future, which undermines trust in domain legitimacy. Overall, the site is safe for general audiences but requires significant improvements in security, privacy compliance, and technical modernization.
Vyklízení nemovitostí Pardubice, bourací prácevyklizeni-pardubice-hutla.cz
Real Estate · Czech Republic
59Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Vyklízení nemovitostí Pardubice, bourací práce is a small local business specializing in property clearance, waste removal, and demolition services primarily serving the Pardubice region in the Czech Republic. The company offers a wide range of clearance services including residential, commercial, and specialized spaces such as schools and warehouses. Their market position is that of a trusted local service provider with a focus on professional and ecological waste disposal. The website is well-structured, with clear contact information and a customer review, supporting trust and credibility. Technically, the website uses standard web technologies including jQuery, Facebook SDK, and Google Fonts. It implements GDPR-compliant cookie consent mechanisms and structured data markup for SEO. The site is mobile-optimized and provides a good user experience, though some security headers appear to be missing. The WHOIS data is unavailable, which limits domain legitimacy verification, but the website content and contact details suggest a legitimate small business. From a security perspective, the site uses HTTPS and has basic form validation and cookie consent. However, there is no explicit security or incident response policy published, and no advanced security headers detected. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is low to moderate. The main concern is the lack of WHOIS data which reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing a security/privacy policy, and maintaining regular audits of third-party scripts. The business appears credible and the website professional, making it a reliable service provider in its niche.