Security Directory

O

OVISION CZ a.s.

ovision.cz

46

OVISION CZ a.s. is a Czech-based company specializing in comprehensive document services, including reprography, postal operations, digitalization, and outsourcing of printing environments. Established in 2014, the company has grown through multiple acquisitions and operates several subsidiaries under the OVISION GROUP brand. Their target audience primarily consists of businesses seeking efficient document management and outsourcing solutions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on Joomla CMS with UIkit framework and uses modern JavaScript libraries, providing a moderate performance and good mobile optimization. However, there are gaps in privacy compliance and security best practices, such as the absence of privacy and cookie policies and missing security headers. No WAF or blocking mechanisms were detected, and the domain registration aligns well with the company's business claims, indicating legitimacy.

S

Salut Restaurant

salutrestaurant.cz

65

Salut Restaurant is a modern hospitality business located in Prague 7, Holešovice, offering seasonal, fresh, and modern cuisine with a focus on quality dining experiences. The website showcases a professional and well-structured digital presence, including event hosting, daily and evening menus, and an e-shop. The business is part of the Absolutum Group, indicating a stable parent company relationship. Technically, the website employs modern JavaScript libraries and tracking tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR and cookie policies. Overall, the website is trustworthy and professionally maintained, though the lack of WHOIS data slightly reduces domain trustworthiness.

P

Poradce podnikatele

pp.cz

56

The website 'Poradce podnikatele' appears to be a Czech business advisory platform aimed at entrepreneurs and business owners. It provides guidance and information related to business operations, although explicit details about services and company information are limited. The domain is well-established, created in 1999, and WHOIS data aligns with a Czech business presence, supporting legitimacy. Technically, the site uses Bootstrap 5.3.3 and Google Fonts, indicating a modern but basic frontend implementation. Mobile optimization appears good, but accessibility and SEO are basic. Security posture is weak due to lack of security headers, privacy policies, and contact information for incident response. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the site is safe for general audiences with no adult or questionable content detected.

M

Městský úřad Votice

mesto-votice.cz

45

The website www.mesto-votice.cz serves as the official online portal for the town of Votice, Czech Republic. It provides residents and visitors with municipal information, news, public services, event calendars, and contact details. The site is clearly targeted at local citizens and stakeholders interested in town governance and community activities. The business model is that of a government municipal service portal, focusing on transparency and public communication. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like Maps and Translate to enhance user experience and accessibility. The site demonstrates good mobile optimization and accessibility features, with a clear navigation structure and consistent branding. From a security perspective, the site uses HTTPS, which is a fundamental security measure. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data is a concern for domain legitimacy but does not directly impact the website's operational security. Overall, the website is a well-maintained municipal portal with good content quality and user experience. Strategic improvements in security headers, privacy compliance mechanisms, and domain registration transparency would enhance trust and security posture significantly.

M

Město Benešov

benesov-city.cz

50

The website benesov-city.cz serves as the official digital portal for the city of Benešov, Czech Republic. It provides residents and visitors with comprehensive municipal information, including news, events, public services, and administrative contacts. The site is well-positioned as a government entity portal, offering key services such as online citizen services, event calendars, and official announcements. The target audience primarily consists of local citizens and visitors seeking city-related information and services. From a technical perspective, the website employs a traditional web stack with HTML5, CSS, and JavaScript, leveraging the Vismo CMS platform. It integrates modern tools such as Google Analytics for visitor tracking and Google reCAPTCHA for form security. The site is hosted under a Czech registrar with a domain age dating back to 1998, indicating a mature and stable online presence. Mobile optimization and accessibility features are well implemented, contributing to a positive user experience. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms. Cookie consent mechanisms comply with GDPR requirements, enhancing privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its role as a municipal information hub with good technical and security practices. Strategic recommendations include enhancing security headers, publishing a formal security policy, and considering a vulnerability disclosure program to further strengthen security posture.

N

NEXT REALITY GROUP a.s.

nextreality.cz

61

NEXT REALITY GROUP a.s. operates a professional real estate website targeting clients and partners across the Czech Republic. The company emphasizes honesty, quality client care, and professional service, offering property sales, rentals, and franchise opportunities. The website is well-structured, with clear navigation and a professional design that supports its market position as a significant player in the Czech real estate sector. Technically, the site employs modern web technologies including Google Analytics, Microsoft Clarity, and CookieHub for analytics and cookie management, alongside a chatbot for customer interaction. The site is mobile-optimized and uses HTTPS to secure communications. Security posture is generally good with enforced HTTPS and cookie consent mechanisms; however, the absence of visible security headers and explicit security policies suggests room for improvement. The WHOIS data is missing, which impacts trust and transparency, but the website content and business information appear legitimate and professional. Overall, the site is safe, GDPR compliant, and provides a positive user experience.

T

ThePrime.cz

theprime.cz

48

ThePrime.cz is a specialized subscription-based news portal focused on the Czech and Slovak real estate markets, operated by journalist Robert McLean. It provides market news, investment insights, event information, and multimedia content targeting real estate professionals and investors in the region. The business model centers on subscription revenue and content delivery through a WordPress-based platform. Technically, the website employs a modern WordPress CMS with various plugins for analytics, payment processing, and content management. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data implementation. Security posture is adequate with HTTPS and cookie consent mechanisms, but could benefit from enhanced security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the website's regional focus and business age. Overall, the site presents a professional and trustworthy presence in its niche market.

F

FestivalyVina

festivalyvina.cz

41

FestivalyVina operates the largest wine festival tour in the Czech Republic, organizing and promoting multiple wine-related events across various cities. The website serves as an official portal providing event calendars, galleries, and information about wine producers, targeting wine enthusiasts and the general Czech public interested in wine culture. Technically, the site uses established JavaScript libraries such as jQuery and Swiper.js, integrates Google Analytics for visitor tracking, and loads resources over HTTPS, indicating a modern but moderately optimized infrastructure. Security posture is adequate but could be improved by implementing security headers and publishing privacy and cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and partner affiliations suggest a legitimate business. Overall, the site is professional, content-rich, and well-branded but requires enhancements in privacy compliance and security transparency.

O

Opravdový vztah s.r.o.

opravdovyvztah.cz

67

Opravdový vztah s.r.o. operates a professionally designed website focused on relationship coaching, therapy, and personal development services primarily targeting individuals and couples in the Czech Republic. The company offers a range of services including therapy, coaching, couples therapy, educational materials, podcasts, and an e-shop. The website positions itself as a leading and highly rated project in its niche. Technically, the site is built on WordPress with WooCommerce for e-commerce functionality, leveraging modern JavaScript libraries and third-party analytics and marketing tools such as Google Analytics, TikTok Pixel, and Facebook Pixel. The site is mobile optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not confirmed. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness. Overall, the site is safe, compliant with GDPR, and professionally maintained.

N

Nadace NEXT

nadacenext.cz

56

Nadace NEXT is a Czech non-profit foundation established in 2022, continuing the charitable activities of NEXT REALITY GROUP. The foundation focuses on helping individuals in need and operates primarily within the Czech Republic. The website is professionally designed using WordPress with Elementor and Astra theme, providing a good user experience and clear navigation. It includes GDPR-compliant privacy and cookie policies with a consent mechanism, reflecting a mature approach to privacy. The technical infrastructure is modern and includes spam protection and Google Tag Manager for analytics. Security posture is good with HTTPS and security headers in place, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy and well-aligned with its business purpose.

V

Ville de Saint-Étienne

saint-etienne.fr

72

The website www.saint-etienne.fr is the official digital portal for the city government of Saint-Étienne, France. It serves as a comprehensive resource for residents and visitors, offering access to municipal services, news, cultural and sporting events, administrative procedures, and employment opportunities. The site is well-positioned as an authoritative source for local information and community engagement. Technically, the site is built on Drupal 10, leveraging modern web technologies including Google Tag Manager, Google Analytics (GA4), Matomo Analytics, and OneSignal for push notifications. It employs a robust cookie consent mechanism via Tarteaucitron, ensuring GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly available security policy or incident response contact, which could enhance transparency and trust. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a formal security policy, incident response information, and a vulnerability disclosure program to further strengthen security posture and user trust.

F

Fresh Food Ventures Group BV

crisp.jobs

62

Crisp.jobs is the career portal for Crisp, an online supermarket specializing in fresh food delivery in the Netherlands. The company leverages technology to provide fresh products directly from the source to consumers, emphasizing quality and convenience. The website presents a professional and well-structured platform showcasing job opportunities across multiple departments, reflecting an active and growing business. The company holds a B Corporation certification, reinforcing its commitment to social and environmental standards. Technically, the website employs modern web technologies, likely a React-based single-page application, with optimized performance and mobile responsiveness. It integrates Google Tag Manager for analytics and marketing purposes and implements a comprehensive cookie consent mechanism, indicating good privacy compliance. The site is served over HTTPS with no visible security flaws in the HTML content. From a security perspective, while HTTPS and cookie consent are well implemented, the site lacks publicly available security policies and incident response contacts, which could be improved to enhance trust and preparedness. No vulnerabilities or suspicious content were detected. Overall, the domain registration aligns with the business identity, supporting legitimacy. The overall risk profile is low, with recommendations focusing on publishing security and incident response policies and enhancing security headers. The website is suitable for general audiences, with no adult or questionable content detected.

M

Mittelstand-Digital Zentrum Zukunftskultur

digitalzentrum-zukunftskultur.de

42

Mittelstand-Digital Zentrum Zukunftskultur is a German organization dedicated to supporting small and medium-sized enterprises (SMEs) in their digital transformation journey, focusing on building future-proof corporate cultures. The center offers a variety of services including workshops, events, practical examples, and media resources, all aimed at fostering digital responsibility, sustainability, and the adoption of artificial intelligence technologies. It operates as part of the nationwide Mittelstand-Digital network and is funded by the German Federal Ministry for Economic Affairs and Energy (BMWK), positioning it as a trusted partner for SMEs in Germany. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted on Hetzner servers. SEO is well-implemented with Yoast SEO Premium, and the site is mobile-optimized with good performance. Analytics are handled via Matomo with privacy-respecting configurations such as DoNotTrack and disabled cookies, reflecting a strong commitment to user privacy. From a security perspective, the site enforces HTTPS and employs anti-spam measures on forms, but lacks visible security headers and formal security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy, though cookie consent mechanisms are absent. Overall, the website presents a professional, trustworthy, and content-rich platform for its target audience of German SMEs. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security and vulnerability disclosure policies to further strengthen trust and compliance.

G

Glide Design

glidedesign.com

63

Glide Design is a Texas-based company specializing in web design, development, and SEO services, targeting businesses seeking digital marketing and website solutions. The website presents a professional design with good content quality and clear navigation, optimized for mobile devices. The technical infrastructure is based on WordPress CMS, utilizing modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, HubSpot, and Hotjar, indicating a mature digital presence. Security posture shows moderate maturity with the use of HTTPS and analytics scripts, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, suggesting the need for verification of domain registration status. Overall, the website is functional and professional but would benefit from enhanced compliance and security transparency.

G

Galaxy Digital LLC

galaxydigital.com

67

Galaxy Digital LLC operates the website galaxydigital.com, offering a comprehensive volunteer management software solution called Get Connected. The company targets non-profit organizations and mission-driven groups primarily in the United States and Canada. Their software facilitates volunteer recruitment, engagement, scheduling, tracking, and reporting, positioning them as a leading provider in the volunteer management SaaS market. The website is professionally designed, well-structured, and rich in content, reflecting a mature digital presence. Technically, the site is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar. The site employs HTTPS with strong security headers, ensuring secure communications and good security posture. Forms are integrated via HubSpot, providing secure data collection mechanisms. The website is mobile-optimized and accessible, with good SEO practices. Security-wise, the site demonstrates solid fundamentals with HTTPS enforcement and security headers. However, it lacks publicly available security policies, incident response plans, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and business information appear legitimate and professional. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic recommendations include publishing explicit security and incident response policies, clarifying domain registration details, and enhancing privacy transparency to further strengthen trust and compliance.

N

NBCF Shop

nbcfshop.com

66

NBCF Shop is an e-commerce platform dedicated to selling merchandise that supports the National Breast Cancer Foundation's mission of breast cancer awareness, education, and support. The website offers a variety of products including apparel, accessories, HOPE Kits, and educational materials. It targets a general audience interested in supporting breast cancer causes through purchases. The business operates on Shopify, leveraging a mature e-commerce infrastructure with integrations for marketing and customer reviews. The domain is well-established since 2013, consistent with the organization's history and mission. Technically, the site uses modern web technologies and is mobile-optimized, though some improvements in privacy policy transparency and DNS security could be made. Security posture is solid with HTTPS and domain locking, but lacks DNSSEC and explicit security headers. Overall, the site is professional, trustworthy, and serves a niche non-profit retail market effectively.

F

Flatiron School

flatironschool.com

69

Flatiron School is a well-established coding bootcamp founded in 2012, offering comprehensive on-campus and online courses in software engineering, data science, cybersecurity, AI, and game design. The company targets individuals seeking career advancement in technology fields and maintains a strong market position with over 20,000 alumni and partnerships with major tech companies. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the website is built on WordPress hosted likely on AWS infrastructure, utilizing a broad range of modern marketing and analytics tools including Google Tag Manager, Facebook Pixel, TikTok Pixel, Marketo, and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and domain registration protections in place, but could be improved by enabling DNSSEC and publishing explicit security policies. The security evaluation shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is strong with visible cookie consent mechanisms and a comprehensive privacy policy. Business credibility is high with clear contact information, structured data, and trust indicators such as alumni network size and corporate partnerships. No adult or questionable content is present, making the site safe for general audiences. Overall, Flatiron School’s website demonstrates a mature digital infrastructure supporting its educational mission, with room for minor security enhancements. The domain registration data aligns well with the company’s history, reinforcing legitimacy and trustworthiness.

M

making-space.org

making-space.org

57

making-space.org is a minimal placeholder website hosted on WordPress.com and registered through Automattic Inc. The site currently displays a simple message indicating that something new is coming, with no substantive business content or services described. The technical infrastructure relies on WordPress CMS with Jetpack and Gutenberg plugins, hosted on Automattic's platform, providing basic analytics and social sharing capabilities. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and compliance policies are absent, and no contact or business information is provided, limiting trust and credibility. Overall, the site appears to be in early development or a holding page with limited digital maturity.

E

EncolaJS & Contributors

encolajs.com

56

EncolaJS Enforma is a specialized technology solution offering a comprehensive form-building framework for VueJS applications. It targets frontend developers seeking flexible, schema-driven, and reactive form solutions integrated with popular validation libraries and UI frameworks. The business operates as an open-source project with community engagement via GitHub and social media, positioning itself as a niche player in the VueJS ecosystem. Technically, the website leverages modern technologies such as VueJS, VitePress, TailwindCSS, and integrates marketing and analytics tools like Mailerlite and Google Tag Manager. Hosting and DNS services are provided by Cloudflare, ensuring good performance and security at the infrastructure level. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the site is professional, well-structured, and safe for general audiences, but could improve in compliance and security best practices.

D

dealerdesk GmbH

dealerdesk.com

54

Dealerdesk GmbH operates a specialized CRM platform tailored for automotive dealerships, offering integrated services such as lead management, marketing automation, and customer communication tools including WhatsApp and video chat. The company is well-established in the German automotive sector with a significant user base and recognized market presence. Technically, the website is built on WordPress with modern web technologies and demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site reflects a professional and trustworthy business with no critical vulnerabilities detected.

G

Ghoda s.r.o.

ghoda.cz

42

Ghoda s.r.o. operates a specialized e-commerce platform focused on horse cosmetics, repellents, and feed supplements, primarily serving the Czech Republic market. The company positions itself as a trusted partner for equine care products, offering a curated selection of reputable brands and supporting a partner reseller program. The website demonstrates a solid digital presence with clear business information, active social media links, and customer engagement through newsletters and articles. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, and Google Tag Manager, ensuring responsive design and moderate performance. The presence of cookie consent mechanisms and privacy policies indicates compliance with GDPR requirements. However, the absence of WHOIS data limits transparency regarding domain registration details. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Advertising and tracking are managed with user consent, balancing marketing needs with privacy. Overall, the website is professional, trustworthy, and well-structured, though improvements in domain transparency and security header implementation are recommended to enhance trust and compliance.

H

Hobby Horse by Andy

hobbyhorsebyandy.cz

47

Hobby Horse by Andy is a Czech Republic based e-commerce business specializing in accessories and apparel for the niche sport of Hobby Horsing. The website offers a variety of products including bridles, hoodies, and t-shirts tailored for hobby horse riders. The business is small and recently founded in 2023, targeting hobby horsing enthusiasts primarily in the Czech market. The site is built on WordPress with WooCommerce, leveraging modern plugins and themes to provide a functional and visually appealing shopping experience. Social media integration with Facebook and Instagram supports community engagement. From a technical perspective, the website is well-structured, mobile optimized, and uses HTTPS, but lacks some advanced security headers and explicit security policies. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page in Czech. No contact emails or phone numbers are explicitly provided on the homepage, which could impact customer trust. Overall, the website demonstrates a good balance of content quality, technical implementation, and privacy compliance, suitable for a small niche e-commerce business.

K

Klub Sportowy Adamus Equestrian

adamusequestrian.pl

39

Adamus Equestrian is a Polish sports club specializing in show jumping, represented by top Polish riders and founded by Bartosz Adamus, a successful businessman and active competitor. The website is professionally designed using WordPress and the Divi theme, showcasing stallions, riders, transport services, and partnerships with strategic sponsors. The technical infrastructure is modern and well-maintained, hosted by cyber_Folks S.A., with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is partially met with a GDPR privacy policy available but lacking a cookie consent mechanism. Overall, the website presents a credible and trustworthy business presence in the equestrian sports niche.

P

Petra Nollová

fyzooterapie.cz

43

Petra Nollová operates a specialized physiotherapy and management service for horses and dogs, focusing on manual therapy, rehabilitation, and training. The business targets horse owners, riders, and those involved in equine sports, offering personalized care and management solutions. The website positions the business as a small, professional service provider within the Czech Republic, founded recently in 2023. Technically, the site is built on WordPress using the Enfold theme and Yoast SEO plugin, hosted by a Czech hosting provider. The site is mobile-optimized and provides clear navigation and professional content. Security posture is adequate with HTTPS enabled and secure form handling, but lacks security headers and privacy compliance elements such as privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security practices.

The website www.mikrop.cz is currently inaccessible due to a critical PHP fatal error related to memory exhaustion, preventing any content from loading. The absence of WHOIS data further complicates verification of domain ownership and legitimacy. No metadata, contact information, or business details are available for analysis. The technical infrastructure appears to be misconfigured or poorly maintained, with no evidence of HTTPS or security headers, indicating a weak security posture. Overall, the site is non-functional and lacks any visible trust or compliance indicators.

A

úvod

amateurjumptour.cz

50

Amateurjumptour.cz is a Czech-language website focused on amateur jumping tours or events, likely serving a niche community of sports enthusiasts. The site appears to be small-scale and community-oriented, with basic content and limited business information. Technically, the website is built using Sitebuilderhost CMS and hosted by Websupport, employing standard web technologies such as JavaScript and CSS. The site is mobile-optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is minimal with no visible security headers or explicit policies, though HTTPS is presumed given external resource loading from secure domains. Privacy compliance is basic, with a cookie consent banner present and a linked privacy policy, but no terms of service or incident response information is found. Overall, the domain registration is consistent with the website's profile, showing legitimacy and appropriate domain age. The site does not contain adult or explicit content and is accessible without WAF or blocking mechanisms.

K

Koně Hradištko

kone-hradistko.cz

52

Koně Hradištko is a specialized equestrian business based in the Czech Republic focusing on horse breeding, riding training, event hosting, and hospitality services including accommodation. The website presents a well-structured and content-rich platform targeting horse enthusiasts, riders, and tourists interested in the Kinsky horse breed and related cultural events. The business operates in a niche hospitality and equestrian sector with a small-scale footprint and regional market presence. Technically, the website is built on WordPress using common JavaScript libraries such as jQuery, Slick Carousel, and Fancybox, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and secure form handling, but lacks advanced security headers and visible privacy or cookie policies, which are compliance gaps. The absence of WHOIS data limits domain legitimacy verification, though the website content and partner ecosystem suggest a legitimate operation. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

S

Smallstep

smallstep.com

65

Smallstep is a technology company specializing in device identity and certificate management solutions, positioning itself as an innovator in Zero Trust security. The company offers a unified platform that secures devices and enforces hardware-bound credentials, targeting enterprises that require strong device authentication. The website demonstrates a mature digital presence with modern technologies such as Next.js and React, integrated with HubSpot for marketing and forms. The site is well-designed, mobile-optimized, and features strong branding with endorsements from major enterprise customers. Security posture is solid with HTTPS and domain protections, though improvements like enabling DNSSEC and publishing security policies are recommended. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and technically sound, with minor gaps in privacy and security transparency.

Z

ZeroSSL

zerossl.com

66

ZeroSSL is a technology company specializing in providing free and automated SSL certificates to website owners, developers, and enterprises. The company positions itself as a trusted certificate authority with a strong market presence, supported by notable industry clients such as Microsoft, Intel, and Hubspot. Their services include SSL certificate issuance, monitoring, one-step validation, quick installation, and ACME automation, catering to a broad audience seeking reliable and fast SSL solutions. Founded in 2016, ZeroSSL has established a medium-sized operation with consistent branding and a professional online presence. Technically, the website leverages a modern technology stack including jQuery, Google Tag Manager, Google Analytics, and Cookiebot for cookie consent management. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features, though there is room for improvement in accessibility and security headers. From a security perspective, ZeroSSL enforces HTTPS and employs domain registration protections such as clientDeleteProhibited and clientTransferProhibited statuses. Cookie consent is managed comprehensively with granular user controls, reflecting good privacy compliance. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not publicly available, representing areas for enhancement. Overall, the website is professional, trustworthy, and secure, with no indications of malicious content or vulnerabilities. The domain registration details align well with the business claims, supporting legitimacy. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, enhancing HTTP security headers, and providing clearer contact information for security incidents.

E

Edacy SA

edacy.com

55

Edacy SA operates a French-language online education platform specializing in intensive 3-month bootcamp programs focused on technology, artificial intelligence, product management, UX/UI design, and entrepreneurship. The company targets individuals seeking career transformation in tech, primarily in West Africa and French-speaking regions, offering project-based learning, mentorship, and strong employability support. The website is professionally designed with clear navigation and good mobile optimization, leveraging Google Tag Manager for analytics. However, the absence of privacy and cookie policies and missing WHOIS registration data present compliance and transparency concerns. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Overall, Edacy presents a credible educational service with room for improvement in privacy compliance and security transparency.

S

SmartMailer.cz

smartmailer.cz

53

SmartMailer.cz is a Czech-based small technology company founded in 2021, offering a SaaS email marketing platform tailored for businesses, especially e-commerce users on Prestashop and WooCommerce. The platform provides easy-to-use tools for creating and managing email campaigns, newsletter automation, and detailed campaign analytics. The business model is subscription-based with tiered pricing according to the number of contacts. The website is professionally designed, multilingual, and provides clear contact and legal information, positioning SmartMailer as a trustworthy niche player in the Czech and Slovak markets. Technically, the website uses modern web technologies including JavaScript, Google Analytics, and Google reCAPTCHA for security and analytics. Hosting is inferred to be with WEDOS, a Czech hosting provider. The site is mobile optimized with good SEO practices but lacks some accessibility features. Security posture is solid with HTTPS and anti-spam measures on forms, though it lacks published security policies and some HTTP security headers. From a security and compliance perspective, the site does not publish a privacy or cookie policy, which is a notable GDPR compliance gap. The terms of service are comprehensive and available via a modal on the homepage. No incident response or vulnerability disclosure information is provided. WHOIS data is consistent with the business claims, showing no suspicious patterns. Overall, the site is safe, professional, and business-focused with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, adding security headers, and providing incident response contacts to enhance trust and compliance. These improvements will strengthen the security posture and regulatory adherence, supporting business growth and customer confidence.

The Fédération Cynologique Internationale (FCI) is a well-established international federation dedicated to the promotion and preservation of pedigree dogs worldwide. It serves a global audience of dog breeders, judges, and enthusiasts by providing breed standards, organizing events, and advocating for canine welfare. The website reflects its authoritative position with comprehensive content, multilingual support, and structured navigation. Technically, the site is built on ASP.NET WebForms with common libraries like jQuery and Bootstrap, offering moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent and legitimate, supporting the organization's credibility.

D

DeepCloud

deepcloud.swiss

64

DeepCloud AG is a Swiss technology company specializing in AI-powered cloud services designed to optimize collaboration, efficiency, and business performance. The company positions itself as a trusted partner for digital transformation, offering a comprehensive ecosystem of integrated solutions tailored to the Swiss market and compliant with international standards such as ISO 27001:2022. Their product suite includes services for document sharing, digital signatures, digital identity, data capture AI, data visualization, banking integrations, secure communications, business management, and signature validation. Technically, the website is built on WordPress with modern SEO and analytics tools, including Google Tag Manager, Matomo, and LinkedIn Insight, all implemented with user consent mechanisms. Security posture is strong, with HTTPS enforced and ISO certification, though some security headers could be improved. The domain WHOIS data is privacy protected, which is typical for Swiss domains and justified for this business type. Overall, DeepCloud demonstrates a mature digital presence with a professional, secure, and privacy-conscious approach.

R

HOME | #RecreateResponsibly

recreateresponsibly.org

60

The website www.recreateresponsibly.org is a community-focused platform dedicated to promoting inclusive, safe, and sustainable outdoor recreation. It positions itself as a non-profit entity encouraging responsible behavior in nature. The site is built on the Wix platform, leveraging Wix Thunderbolt and associated JavaScript libraries, indicating a moderate level of technical maturity suitable for small to medium-sized organizations. The content is well-structured with clear messaging but lacks comprehensive privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is basic with no evident security headers or advanced protections, and WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

Rekomal - Malíři pokojů is a small, local service provider specializing in interior painting, renovations, and related construction services primarily in the Ostrava region of the Czech Republic. The company offers a range of services including painting, plasterboard installation, facade repairs, and home insulation. The website is built on WordPress using popular plugins such as Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site is well-structured and provides clear information about services and references, but lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is basic with no advanced headers or incident response contacts visible. Overall, the website is accessible, professional, and serves its target audience effectively but would benefit from enhanced security and privacy compliance measures.

Úklidy Morava is a small, local cleaning services company based in Moravská Ostrava, Czech Republic, offering household, office, and communal area cleaning services primarily in the Moravian region. The company emphasizes professional and precise cleaning work with a long-standing presence since 1995, supported by a domain registered in 2013. The website presents clear business information and contact details but lacks formal privacy and cookie policies, which are important for compliance and user trust. Technically, the site uses older JavaScript libraries and lacks visible advanced security headers, indicating room for improvement in security posture. Overall, the site is functional and professional but would benefit from modernization and enhanced compliance measures.

M

Malíři Morava

maliri-morava.cz

43

Malíři Morava is a small, established painting and renovation service provider operating primarily in the Morava region of the Czech Republic. The company offers a range of services including interior painting, facade coatings, drywall installation, bathroom renovations, and masonry work. The website is built on WordPress with a modern design and includes customer testimonials and clear contact information, supporting its credibility and local market presence. Technical infrastructure leverages common WordPress plugins and libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial, with cookie consent mechanisms present but no privacy or terms of service pages found. Overall, the website is professional and trustworthy for its business domain but could improve in compliance and security best practices.

C

CentraleSupélec Alumni

centralesupelec-alumni.com

58

CentraleSupélec Alumni operates as the official alumni network for the prestigious French engineering school CentraleSupélec, offering a comprehensive platform for graduates and students to connect, share experiences, and access career opportunities. The website provides a variety of services including a member directory, event calendar, job board, and mentoring programs, positioning itself as a key resource for its community. The business model is membership-based with additional revenue from contributions and donations. Technically, the website employs modern web technologies such as Vue.js, Google Tag Manager, and Google Maps API, ensuring a responsive and interactive user experience. The platform integrates OAuth authentication with major providers, enhancing security and ease of access. While performance is moderate, the site is mobile-optimized and SEO-friendly. From a security perspective, the site enforces HTTPS and uses secure login mechanisms. However, some standard security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, representing an area for improvement. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good data protection practices. No vulnerabilities or exposed sensitive data were identified. Overall, the website is professional, trustworthy, and well-aligned with its educational and non-profit mission. The lack of WHOIS data for the subdomain is typical and does not detract from its legitimacy. Strategic recommendations include enhancing security headers, improving accessibility, and maintaining regular security audits to uphold trust and compliance.

F

Fondation CentraleSupélec

fondation-centralesupelec.fr

60

Fondation CentraleSupélec is a non-profit organization dedicated to supporting the excellence and outreach of CentraleSupélec, a leading French engineering school. The foundation funds projects across education, research, entrepreneurship, and student financial aid, engaging a broad audience including students, faculty, donors, and corporate partners. The website reflects a professional and consistent brand presence with high-quality content and clear messaging aligned with its mission. Technically, the site is built on WordPress using Elementor and related plugins, with modern SEO and analytics tools such as Yoast SEO and Matomo. The infrastructure is moderately performant and mobile-optimized, though accessibility could be improved. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but lacks some security headers and a published security policy. Overall, the website is trustworthy and professionally maintained, with no signs of malicious activity or content safety concerns. However, the absence of explicit privacy and terms of service pages, as well as contact information, slightly reduces privacy compliance and user trust. The domain WHOIS data is not publicly available, typical for .fr domains, but the site content and branding strongly support legitimacy. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, improving accessibility, and providing clear contact information to strengthen trust and compliance.

C

CentraleSupélec

summerschoolcentralesupelec.fr

51

CentraleSupélec is a prestigious French engineering school offering specialized summer school programs focused on Artificial Intelligence and Digital Transformation & Industry 4.0. The website presents detailed program information, registration options, and cultural activities, targeting students and professionals seeking advanced engineering education. The institution has a strong international presence and academic reputation, supported by partnerships and overseas campuses. Technically, the website is built on WordPress with the Divi theme and several plugins, providing a modern and responsive user experience. Security posture is solid with HTTPS and privacy mechanisms, though some security headers and incident response information are missing. WHOIS data is unavailable, which limits domain transparency but the website content and social media presence support legitimacy. Overall, the site is professional, secure, and well-structured, suitable for its educational purpose.

Paris Digital Lab is a specialized digital innovation program affiliated with CentraleSupélec, focused on empowering digital entrepreneurs and recruiting top software engineering talents from leading universities. The program facilitates rapid development of Minimum Viable Products through intensive sprints involving student teams and corporate partners. The website reflects a professional and consistent brand image, targeting students, executives, and companies interested in digital transformation and open innovation. Technically, the site is built on WordPress with modern front-end frameworks and integrates Google reCAPTCHA for form security. However, some security best practices such as DNSSEC and security headers are missing, and privacy compliance could be improved with explicit cookie and privacy policies. Overall, the site is well-positioned in its niche with a solid business model and credible digital presence.

B

Boutique CentraleSupélec

boutique-centralesupelec.com

64

Boutique CentraleSupélec is an official e-commerce merchandise store serving the CentraleSupélec community, including students, alumni, faculty, and partners. The website offers branded textiles, accessories, and goodies to reinforce the institution's identity and community belonging. The site is built on the Shopify platform, leveraging standard Shopify technologies and integrations, hosted on Google Cloud infrastructure. It features a cookie consent mechanism and privacy policy compliant with GDPR, presented in French. However, no explicit contact information or terms of service pages are found, which could be improved for transparency and trust. The domain WHOIS data shows an anomalous future creation date, which may be a data error but warrants attention. Security posture is generally good with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Overall, the site is professional, accessible, and trustworthy for its niche audience.

J

Jobijoba

jobijoba.mx

63

Jobijoba is an online job search engine operating in Mexico, aggregating job offers from various sources to provide a comprehensive employment search platform. It targets job seekers and employers, offering services such as job alerts, company profiles, and career tips. The website is professionally designed with consistent branding and good content quality, positioning itself as a leading job aggregator in the Mexican market with international presence.

J

Jobijoba

jobijoba.it

65

Jobijoba is an established Italian job search engine that aggregates job listings from multiple sources to provide users with a comprehensive job search experience. The platform targets job seekers in Italy and offers additional services such as job alerts, company profiles, and career advice. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and a consent management platform (Didomi) to comply with privacy regulations. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly disclosed. Overall, Jobijoba presents a trustworthy and professional online presence with moderate user tracking balanced by GDPR-compliant consent mechanisms.

J

Jobijoba

jobijoba.de

65

Jobijoba is a German job search engine providing a comprehensive platform for job seekers to find employment and training opportunities across various sectors and professions. The website is well-branded, with consistent design and clear navigation, targeting primarily the German job market. It offers services such as job alerts, categorized job listings by industry, profession, location, and company, and integrates cookie consent management to comply with privacy regulations. Technically, the site uses modern analytics tools like Google Tag Manager and Piano Analytics, and is hosted on OVH, a reputable hosting provider. The site is mobile-optimized and SEO-friendly, with proper metadata and Open Graph tags enhancing social sharing and search visibility. Security-wise, the site enforces HTTPS and uses a consent management platform, but lacks visible security headers and explicit security policies. No contact emails or phone numbers were found in the provided content, which limits direct communication channels. Overall, the website is professional and trustworthy but could improve privacy transparency and security posture.

J

Jobijoba

jobijoba.ch

69

Jobijoba.ch is a Swiss-focused online job search platform that aggregates job listings and offers job seekers a comprehensive portal to find employment opportunities across various sectors and professions. The platform is part of a broader network of country-specific job sites, indicating a mature and regionally diversified business model. The website is well-structured, with clear navigation and a professional design tailored to the Swiss job market. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and a consent management platform to ensure compliance with privacy regulations. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly visible. Privacy compliance is well addressed through a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site presents a trustworthy and professional front for job seekers and employers in Switzerland.