Security Directory

A

ARSY line, s.r.o.

webproskoly.cz

57

ARSY line, s.r.o. operates the website www.webproskoly.cz, providing specialized web hosting and content management solutions tailored for Czech primary and kindergarten schools. The company offers a subscription-based model with no upfront investment, focusing on modern, accessible, and legislatively compliant web platforms. Their services include modules for photo galleries, news updates, event calendars, and integration with school meal systems, targeting educational institutions in the Czech Republic. The website demonstrates a professional and consistent brand presence with strong customer testimonials and clear contact information. Technically, the site employs a modern technology stack including jQuery, Google Tag Manager, Facebook Pixel, and proprietary CMS components. It is optimized for mobile devices and accessibility, with good SEO practices and performance. The site uses HTTPS and consent-based cookie management, reflecting a good security posture, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid with HTTPS enforcement and CAPTCHA on forms, but lacks explicit published security policies or incident response contacts. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the website is a well-executed niche educational service platform with good technical and security practices, though improvements in transparency around security policies and WHOIS data availability would enhance trust and compliance.

Z

Zařízení školního stravování Matiční dům

maticni.cz

41

Zařízení školního stravování Matiční dům is a contributory organization affiliated with the Moravian-Silesian Region, providing school catering services primarily for students and staff of the associated educational institution. The website serves as an information portal for meal menus, ordering, and contact details, targeting the local school community. The site is built on WordPress with standard plugins and offers a functional, well-structured user experience with clear navigation and mobile optimization. Technically, the site uses modern WordPress 6.6.4 with jQuery and several plugins for content display and gallery management. HTTPS is enforced, ensuring secure communication. However, the site lacks advanced security headers and a published privacy policy, which are important for compliance and trust. No analytics or advertising scripts were detected, indicating minimal user tracking. Security posture is moderate with good SSL configuration and cookie consent mechanisms but missing security.txt and incident response information. The absence of WHOIS data limits domain trust assessment, though the website content and regional government affiliation support legitimacy. Overall, the site is safe, professional, and suitable for its educational audience. Recommendations include publishing a privacy policy and terms of service, implementing security headers, adding a security.txt file, and verifying domain registration details to enhance trust and compliance.

W

Witzenmann Opava, spol. s r.o.

witzenmann.cz

64

Witzenmann Opava, spol. s r.o. is a manufacturing company specializing in flexible metal components such as metal hoses, compensators, and bellows, serving industries including automotive, aerospace, and industrial sectors. The company is part of the Witzenmann Group with a global presence across 16 countries and 22 subsidiaries. Their website is professionally designed, multilingual, and provides comprehensive product and solution information targeting B2B customers. Technically, the site uses modern web technologies including Usercentrics for consent management and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the domain registration and WHOIS data align well with the business identity, indicating a legitimate and trustworthy entity.

T

TREND ochranné pracovní pomůcky

trend-oopp.cz

55

TREND ochranné pracovní pomůcky is a Czech Republic based company specializing in retail and wholesale of protective work equipment (OOPP). The business has a history dating back to 1993/1994, with a recent merger in 2023 uniting two related companies under one brand. The website reflects a small-sized retail business targeting both wholesale and retail customers in the protective equipment sector. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and WP Store Locator, with jQuery and Nicepage for UI enhancements. The site is mobile responsive and has moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. WHOIS data is unavailable, which limits domain trust assessment and raises some concerns about registration transparency. Overall, the website is professional and business-focused but would benefit from improved privacy compliance and security best practices.

M

MORAVEC Kvalitní ponožky s.r.o.

moravec-cz.com

55

MORAVEC Kvalitní ponožky s.r.o. operates a professional e-commerce website specializing in high-quality socks and seamless underwear, targeting Czech consumers. The company emphasizes its 25 years of experience, Czech manufacturing, and product quality, positioning itself as a trusted local brand in the retail sector. The website is built on the Shoptet platform, leveraging modern e-commerce technologies and integrating marketing and analytics tools such as Google Analytics and Facebook SDK. Security measures include HTTPS enforcement and cookie consent mechanisms, although some improvements in security headers and library updates are recommended. Overall, the site is accessible, well-structured, and compliant with GDPR requirements, reflecting a mature digital presence for a small-sized retail business.

M

MK Fruit s.r.o.

mkfruit.cz

44

MK Fruit s.r.o. is a well-established Czech wholesale company specializing in fresh fruit, vegetables, and dairy beverages. The company maintains strong partnerships with domestic and EU growers and serves a diverse clientele including hospitals, schools, and retail chains. Their business model emphasizes high-quality fresh produce combined with comprehensive logistics and customer service. The website reflects a professional digital presence built on WordPress with WooCommerce and Elementor, indicating a moderate level of digital maturity. Security measures include HTTPS, reCAPTCHA on forms, and GDPR-compliant cookie management, though some security headers could be improved. Overall, the site is trustworthy and compliant with privacy regulations, supporting the company's credibility in the retail sector.

S

Stavební škola

stavebniskola.cz

63

Stavební škola is a Czech educational institution specializing in construction-related vocational and maturitní studies. Established in 2007, it offers a range of four-year and three-year study programs in architecture, water management, transport construction, and various crafts. The website serves prospective students, current students, and the public with detailed program information, event announcements, and school activities. The institution maintains a solid regional presence in the education sector with a focus on practical skills and lifelong learning.

S

Střední odborná škola a Základní škola, Město Albrechtice, příspěvková organizace

souzma.cz

48

The website represents a public educational institution in Město Albrechtice, Czech Republic, offering secondary vocational and basic education. It is affiliated with the regional government (Moravskoslezský kraj) and provides a variety of educational programs including special education and vocational training. The site targets prospective students and the local community, providing detailed information about courses, admissions, and school activities. Technically, the website employs a modern technology stack including jQuery, Flatpickr, Tippy.js, and Google Tag Manager, built on the Nette PHP framework. It features responsive design, accessibility considerations, and integrates Google reCAPTCHA for form security. Cookie consent and GDPR compliance mechanisms are implemented, reflecting a mature digital presence. From a security perspective, the site uses HTTPS and includes anti-bot measures. However, explicit security headers are not evident in the HTML content, and no published security or incident response policies were found. The WHOIS data is missing, which slightly impacts trust but is mitigated by the official nature of the institution and clear contact information. Overall, the website is professional, secure, and compliant with privacy regulations, serving its educational mission effectively. Strategic improvements include enhancing security headers, publishing security policies, and improving WHOIS transparency to bolster trust.

Z

Základní škola Brno, Svážná 9

zssvazna.cz

50

Základní škola Brno, Svážná 9 is a well-established primary educational institution located in Brno, Czech Republic, with a domain age dating back to 2006. The website serves as an official communication channel providing news, event calendars, practical information, and access to school-related services such as electronic grade books and school meal ordering. The target audience primarily includes parents, students, and the local community. The business model is that of a public contributory organization focused on primary education. The site maintains a consistent brand presence and offers clear contact details and social media integration, enhancing trust and engagement. Technically, the website is built on the Vismo CMS platform and employs modern web technologies including JavaScript frameworks like Vue.js, Mustache.js templating, Google reCAPTCHA v3 for form security, and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting and DNS details align with the Czech Republic, consistent with the institution's location. From a security perspective, the site uses HTTPS with good SSL configuration and integrates reCAPTCHA to protect forms. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, and no published security policy or incident response contacts are found. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. No vulnerabilities or suspicious content were detected, and the site is free from WAF blocking or security challenges. Overall, the website demonstrates a solid security posture and good privacy compliance for an educational institution. The domain registration data supports legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding incident response contact information to further strengthen security and compliance posture.

I

Integrovaná střední škola Hodonín

issho.cz

57

The website www.issho.cz represents Integrovaná střední škola Hodonín, a regional educational institution in the Czech Republic offering vocational and maturitní secondary education along with adult lifelong learning programs. The site provides comprehensive information about study programs, school news, and community activities, targeting students, prospective students, and adult learners. The business model is focused on education and collaboration with private companies for student placement. Technically, the website is built on the CalmCube2 CMS platform, utilizing jQuery, Colorbox, Google Fonts, and Facebook Pixel for tracking. The site is served over HTTPS with a cookie consent mechanism in place, indicating GDPR compliance awareness. The design is professional with good navigation and content relevance, though mobile optimization and accessibility are basic. From a security perspective, the site lacks explicit security headers and detailed privacy or security policies. No WHOIS data was retrievable, which impacts trustworthiness but the website content and domain usage suggest legitimacy. Tracking via Facebook Pixel and imedia.cz retargeting is present, with moderate user tracking levels. No vulnerabilities or critical security issues were detected in the content. Overall, the site scores moderately high on content quality and technical implementation but has room for improvement in security posture and privacy transparency. Strategic recommendations include enhancing security headers, publishing detailed privacy and security policies, and providing clear contact information for incident response and data protection officers.

Základní škola Sušice, Lerchova ulice, is a primary educational institution serving the local community in the Czech Republic. The website provides information about school activities, projects, events, and educational resources primarily targeting students, parents, and school staff. The school holds a recognized certification from Scio, indicating a commitment to educational quality. The website content is well-structured with regular updates and photographic documentation of school events, reflecting active community engagement. Technically, the website employs a basic but functional technology stack including HTML, CSS, JavaScript, and a third-party cookie consent library. Hosting is provided by Active24, a known Czech hosting provider. The site lacks advanced CMS or modern frameworks and shows basic mobile optimization and accessibility features. SEO is minimal but sufficient for the target audience. From a security perspective, the site implements a cookie consent banner but lacks visible HTTPS enforcement confirmation, security headers, or published security policies. No forms or sensitive data collection mechanisms are present, reducing immediate risk exposure. However, the absence of explicit privacy and security policies and lack of incident response contacts indicate room for improvement in compliance and security posture. Overall, the website is a functional, community-focused educational portal with moderate technical maturity and basic security measures. Strategic improvements in HTTPS enforcement, security headers, privacy policy clarity, and accessibility would enhance trust and compliance.

D

DigiLabs Software, s.r.o.

zsdidaktis.cz

55

ZŠ DidaSmart is a private primary school located in Brno, Czech Republic, specializing in education for gifted children with an individualized approach. The school emphasizes talent development and preparation for gymnasium entrance exams, boasting over 10 years of successful teaching experience and ranking in the top 10% of Czech primary schools based on SCIO test results. The website is professionally designed, mobile-optimized, and rich in relevant content targeting parents and prospective students. Technically, the site uses modern web technologies including Google Tag Manager and Facebook Pixel for analytics and marketing, and is built on a Nette-based CMS framework. Security posture is good with HTTPS enforced and secure forms, though some security headers are missing. Privacy and cookie policies are present, indicating GDPR compliance, but explicit cookie consent mechanisms could be improved. Contact information is comprehensive, including email, phone, physical address, and a contact form. WHOIS data is unavailable, which reduces domain trustworthiness despite the professional presentation. Overall, the website demonstrates a strong business presence with good technical and security practices, suitable for its educational mission.

O

Obchodní akademie a Vyšší odborná škola sociálně právní, Ostrava

oa-vos.cz

48

Obchodní akademie a Vyšší odborná škola sociálně právní, Ostrava is a well-established educational institution in the Czech Republic offering secondary and higher vocational education in business, economics, social work, and social pedagogy. The website reflects a medium-sized public institution with a strong regional presence and a broad range of educational programs and extracurricular activities. The institution is funded by the Moravskoslezský kraj regional government, which adds to its credibility and trustworthiness. Technically, the website uses a modern tech stack including jQuery, Nette Framework, and various JavaScript libraries for UI enhancements and user experience. It is hosted on reputable Czech infrastructure with HTTPS enforced and basic security best practices in place. The security posture is solid but could be improved by adding explicit security headers and publishing a security policy or incident response contacts. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, both in Czech. Overall, the website is professional, trustworthy, and suitable for its educational audience.

S

Střední škola André Citroëna Boskovice, příspěvková organizace

skolaac.cz

49

Střední škola André Citroëna Boskovice is a Czech secondary educational institution offering both maturita (high school leaving exam) and vocational apprenticeship programs. The school targets prospective students and the general public, providing a range of study programs, accommodation, catering, and sports facilities. It maintains partnerships with numerous reputable local and international companies, enhancing practical training opportunities for students. The website is professionally designed, well-structured, and provides comprehensive information about the school, its programs, and services.

Š

Školský komplex

skolskykomplex.cz

51

Školský komplex is an educational consortium based in Brno, Czech Republic, providing information and resources about multiple schools and related projects. The website serves as a portal for students, parents, and educators, offering contact information, building plans, and details on EU projects. The site is built on WordPress using Elementor and several Jet plugins, indicating a modern and maintainable technical infrastructure. Google Analytics is used for visitor tracking, but privacy and cookie policies are absent, which is a compliance gap. Security posture is adequate with HTTPS enabled, but lacks security headers and formal incident response or vulnerability disclosure mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the site content and branding appear professional and consistent. Overall, the site is functional and serves its educational purpose well but would benefit from improved compliance and security practices.

Z

Základní škola Světlo s.r.o.

zssvetlo.com

60

Základní škola Světlo s.r.o. is a private elementary school based in Třebíč, Czech Republic, focusing on providing quality education with an individual approach and a friendly atmosphere. The school emphasizes collaboration with families and holistic development of students intellectually, personally, and spiritually. Their market position is that of a modern, value-driven educational institution with a strong local presence and active engagement through social media and virtual tours. Technically, the website is built on WordPress with modern plugins and libraries, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-aligned with its educational mission.

Z

Základní škola a gymnázium Navis

zsnavis.cz

53

Základní škola a gymnázium Navis is a Czech educational institution offering preschool, primary, and gymnasium level education with a focus on intellectual, personal, and spiritual development. The school positions itself as a modern, value-based institution founded by families for children, aiming to nurture responsible freedom and comprehensive growth. The website reflects a professional and well-structured digital presence, targeting students, parents, and prospective applicants. Technically, the site uses a modern CMS (Dmp.Cms.Core) and popular JavaScript libraries such as jQuery and Bootstrap, hosted partially on Microsoft Azure Blob Storage for media assets. The site is mobile-optimized and includes standard SEO and accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable, which limits domain trust verification. Overall, the site is safe, professional, and compliant with GDPR, serving its educational mission effectively.

Š

Škola Parentes

parentes.cz

47

Škola Parentes is a small educational institution based in the Czech Republic offering primary, kindergarten, and gymnasium level education. The website presents a well-structured and professionally designed platform that highlights their educational philosophy, tutoring services, character formation programs, and extracurricular activities. The institution targets parents and prospective students seeking quality education in Prague. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, incorporating modern web technologies and third-party integrations such as Google Analytics and Facebook Pixel with a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and consent management in place, though security headers are not explicitly detected. The absence of WHOIS data limits domain trust assessment, but the website content and social media presence support legitimacy. Privacy policy and terms of service pages are not explicitly found, indicating room for compliance improvement.

V

VOŠ, SŠ, JŠ, ZŠ a MŠ MILLS, s.r.o.

mills.cz

45

The website mills.cz represents a private educational institution in the Czech Republic offering a broad spectrum of educational services including kindergarten, primary, secondary, higher vocational, language education, and lifelong learning programs. The institution appears well-established with a domain age dating back to 2007 and clear physical address information. The website is professionally designed with good navigation and mobile optimization, targeting students and lifelong learners primarily within the Czech Republic. From a technical perspective, the site uses standard HTML5 and CSS3 technologies with Adobe Typekit fonts for typography. Hosting and domain registration are consistent with the Czech-based registrar WEDOS. The website performance is moderate with good SEO practices but lacks advanced frameworks or CMS indications. Accessibility is basic but functional. Security posture is limited based on the provided data. No security headers or HTTPS enforcement details were found, and no privacy or cookie policies are published, which impacts compliance and trust. No contact emails or phone numbers are provided, limiting direct communication channels. No forms or data collection mechanisms are present on the main page, reducing immediate data protection concerns but also limiting user engagement. Overall, the website is safe and suitable for general audiences with no adult or questionable content. The domain registration data supports legitimacy and trustworthiness. Strategic improvements in security headers, privacy compliance, and contact information publication would enhance the site's security and user trust.

The website www.educanet.cz is currently inaccessible in terms of meaningful content, displaying only PHP error messages related to improper translation loading and header modification issues. The absence of WHOIS registration data further complicates trust and legitimacy assessments. The site lacks any visible privacy, cookie, or terms of service policies, and no contact or business information is available. Technically, the site suffers from poor implementation and security hygiene, exposing PHP warnings publicly and lacking security headers or HTTPS enforcement indications. Overall, the digital maturity of the site is low, with significant risks related to security and compliance. Strategic remediation is urgently needed to improve the site's stability, security posture, and user trust.

Z

Základní škola a praktická škola Brno, Vídeňská, příspěvková organizace

videnska.cz

46

The website www.videnska.cz represents a public educational institution named Základní škola a praktická škola Brno, Vídeňská, located in Brno, Czech Republic. It offers basic and practical schooling services including preparatory classes and secondary practical education. The site targets students, parents, and educators within the local region and functions as a contributory organization under public funding. The content is well-structured, informative, and tailored to its audience, with clear navigation and relevant educational resources. Technically, the website employs a modern JavaScript stack including jQuery, Flatpickr, and Nette Framework components, alongside Google Tag Manager and reCAPTCHA v3 for analytics and security. The site is mobile-optimized and uses cookie consent mechanisms compliant with GDPR. However, there is room for improvement in security headers and explicit security policy documentation. From a security perspective, the site enforces HTTPS, integrates reCAPTCHA for form protection, and provides cookie consent banners. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, confirming legitimacy and trustworthiness. Overall, the site maintains a good security posture but could enhance its security headers and incident response transparency. The overall risk is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include implementing security headers, publishing security policies, and maintaining up-to-date third-party libraries to further strengthen security and compliance.

O

Obchodní akademie s. r. o.

obaka.cz

40

Obchodní akademie s. r. o. is a small private educational institution in the Czech Republic specializing in business academy studies combined with sports activities. It operates multiple campuses in Ostrava and Karviná, targeting students interested in both academic and athletic development. The website presents clear contact information and social media presence, supporting its regional educational role. Technically, the site uses a modern JavaScript stack including jQuery, Nette Framework AJAX, and Google reCAPTCHA for security on login forms. The site is mobile optimized with moderate performance and basic SEO and accessibility features. Security posture is good with HTTPS and CAPTCHA but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. WHOIS data is missing, limiting domain trust assessment, but no suspicious content or vulnerabilities were detected. Overall, the site is professional and functional but could improve privacy compliance and security hardening.

S

Střední odborná škola ochrany osob a majetku s.r.o.

sosoom.cz

40

Střední odborná škola ochrany osob a majetku s.r.o. is a Czech educational institution specializing in secondary vocational education with a focus on security and legal protection. The website presents multiple regional branches with clear contact details and physical addresses, targeting students seeking specialized secondary education. The business operates primarily in the education sector within the Czech Republic and appears to be a small-sized entity. Technically, the website uses modern frontend libraries such as jQuery, Nette Framework, Flatpickr, and Slick carousel, providing a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS enforced and Google reCAPTCHA v3 implemented for form protection, but lacks security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security best practices. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information suggest a legitimate educational organization. Overall, the site is safe, professional, and functional but would benefit from enhanced privacy compliance and security hardening.

S

Střední škola grafická Brno, p.o.

ssgbrno.cz

63

Střední škola grafická Brno, p.o. is a specialized secondary educational institution located in Brno, Czech Republic, focusing on graphic arts, printing, bookbinding, and packaging design. The school offers modern equipment and training programs aimed at students interested in these creative and technical fields. The website serves prospective students, current students, parents, and the public with comprehensive information about study programs, admissions, school news, and events. The institution holds a solid regional position as a reputable educational provider in its niche. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies such as jQuery, Typed.js, and various analytics and tracking tools including Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is hosted with a Czech registrar and uses Cloudflare DNS services, ensuring good performance and security. The site is mobile-optimized and accessible, with structured data enhancing SEO and user experience. From a security perspective, the website enforces HTTPS, includes essential security headers, and uses security plugins like Wordfence. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit privacy policy and terms of service pages, which are important for GDPR compliance and user trust. Cookie consent mechanisms are implemented, indicating some level of privacy awareness. Overall, the website is professional, trustworthy, and well-maintained, with a strong business credibility score. Strategic recommendations include publishing comprehensive privacy and security policies, adding incident response contact information, and maintaining regular security audits to ensure ongoing compliance and protection.

P

PanoPro s.r.o.

panopro.cz

58

PanoPro s.r.o. is a Czech Republic-based company specializing in professional 3D laser scanning, virtual tours, interactive maps, and 3D modeling services. The company targets businesses and professionals requiring advanced spatial visualization solutions across the Czech Republic. Their website reflects a professional service provider with a clear focus on real estate and related industries, offering both 3D and 2D deliverables. Technically, the website is built on WordPress using the Divi theme and integrates common plugins for SEO, analytics, and form handling, indicating a moderate level of digital maturity. Security-wise, the site employs HTTPS and Google reCAPTCHA, but lacks published privacy, cookie, and security policies, which are important for compliance and trust. Overall, the website is accessible, well-structured, and professional, but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

S

Střední škola technická a řemeslná, Nový Bydžov

sstrnb.cz

49

Střední škola technická a řemeslná, Nový Bydžov is a Czech secondary technical and vocational school offering education in technical fields, food industry, and driving training. The institution targets students and prospective students seeking practical and theoretical education in these sectors. The website reflects a well-established regional educational institution with partnerships with notable companies such as Škoda, Volvo, and Bosch. Technically, the website uses modern JavaScript libraries and frameworks, including jQuery, Flatpickr, and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is strong with a clear GDPR-compliant privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, supporting the institution's educational mission.

S

Střední škola právní - Právní akademie, s.r.o.

prak.cz

48

Střední škola právní - Právní akademie, s.r.o. is a private secondary school based in the Czech Republic specializing in legal education. The institution has a longstanding tradition dating back to 1993 and offers practical, quality education with individual student support. The website targets prospective students, current students, and parents, providing comprehensive information about programs, admissions, and school activities. The business model focuses on specialized education services with a strong emphasis on practical skills and international cooperation. Technically, the website employs a modern technology stack including jQuery, Flatpickr, Slick Slider, and Google Tag Manager, integrated within a Nette PHP framework environment. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with external dependencies on trusted CDNs and services. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA Enterprise for form protection, alongside a cookie consent mechanism compliant with GDPR. However, explicit security headers are not evident, and there is no published security policy or incident response contact information. No vulnerabilities or suspicious content were detected. Overall, the website presents a professional and trustworthy digital presence for the educational institution, with strong privacy compliance and good business credibility. Strategic improvements in security headers and transparency policies could further enhance trust and security posture.

O

HOME | služby

obchodkapolicka.shop

56

The website www.obchodkapolicka.shop is a small-scale service-oriented site built on the Wix platform, utilizing Wix Thunderbolt framework and standard JavaScript polyfills. The site lacks substantive business content, contact information, and privacy or cookie policies, which limits its credibility and trustworthiness. Technically, the site is moderately optimized for mobile devices and uses HTTPS, but it lacks important security headers and SEO optimization, including a 'noindex' directive that prevents search engine indexing. The WHOIS data is minimal and does not provide registrar or registrant details, indicating privacy protection or incomplete registration data, which further reduces trust. Overall, the site appears functional but lacks essential compliance and trust indicators.

S

Střední škola obchodní a služeb SČMSD, Polička, s.r.o.

ssospolicka.cz

48

Střední škola obchodní a služeb SČMSD, Polička, s.r.o. is a private secondary vocational school located in Polička, Czech Republic, with a long-standing tradition dating back to 1929. The school offers a variety of study programs including business, marketing, public administration, cosmetology, hairdressing, and sports massage, targeting students and their parents. The website reflects a professional and well-structured digital presence with comprehensive content, clear navigation, and modern web technologies. Security measures such as HTTPS, Google reCAPTCHA Enterprise, and Google Tag Manager are implemented, although some security headers could be improved. Privacy and cookie policies are present and GDPR compliant. However, WHOIS data for the domain is unavailable, which slightly impacts trustworthiness from a domain registration perspective. Overall, the site is trustworthy, content-rich, and serves its educational audience effectively.

V

Viamédia

avispublicsdebretagne.com

54

Bretagne Marchés Publics is a regional public procurement portal serving Brittany and other regions in France. Operated by Viamédia since 2011, it provides services for public buyers to publish tenders and for companies to consult and respond to public market opportunities. The website is professionally designed, mobile-optimized, and includes modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS registration data is a concern but does not currently impact the legitimacy of the active and professional website. Overall, the site is a trusted resource for public procurement in its region.

FOKUS – Opava, z.s. is a Czech non-profit organization established in 2007, dedicated to providing social services primarily for persons with mental illness and disabilities in the Moravian-Silesian region. The organization operates multiple service centers offering social rehabilitation, protected workshops, clinical psychology outpatient services, and community-based support. It is funded through regional and municipal grants, as well as partnerships with local government and social institutions. The website reflects a stable regional presence with detailed project updates and transparent funding acknowledgments. Technically, the website is built on legacy JavaScript libraries such as Prototype.js and Scriptaculous, with a custom HTML structure and no detected CMS. The site is moderately optimized for performance and accessibility but lacks modern features such as cookie consent mechanisms and advanced SEO optimizations. No analytics or tracking scripts are present, indicating a privacy-conscious approach. From a security perspective, the site lacks visible security headers and cookie policies, and there is no evidence of HTTPS enforcement or advanced security frameworks. However, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-standing domain registration consistent with the organization's history, supporting legitimacy. Overall, the website is trustworthy and professionally maintained for its non-profit purpose but would benefit from modern security enhancements, privacy compliance improvements, and technical modernization to improve user experience and security posture.

S

Střední zdravotnická škola Opava

szsopava.cz

44

Střední zdravotnická škola Opava is a regional secondary healthcare educational institution operated as a contributory organization by the Moravian-Silesian Region in the Czech Republic. The website provides comprehensive information about study programs, student services, courses, and school projects including Erasmus+ mobility. The site targets students, prospective students, and educational stakeholders interested in healthcare education. Technically, the website is built on WordPress with modern plugins and accessibility features, offering a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking some security headers and incident response disclosures. The absence of WHOIS data limits domain legitimacy verification but the website content and contact details support its authenticity. Strategic recommendations include adding security headers, publishing incident response contacts, and verifying domain registration details to enhance trust and compliance.

E

Elim Opava, o.p.s.

elimopava.cz

40

Elim Opava, o.p.s. is a well-established non-profit organization based in the Czech Republic, focused on providing social and community services such as low-threshold youth services, family assistance, volunteer coordination, foster family support, and community work. The organization has a strong local presence with a history dating back to 1998 and a dedicated facility since 2002. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeted at children, youth, families, and local community members. Technically, the website is built on WordPress with common plugins and jQuery, offering good mobile responsiveness and moderate performance. While HTTPS is properly implemented, the site lacks some security headers and formal privacy and cookie policies, which are important for compliance and user trust. No forms are present on the homepage, and contact is provided via email and phone, supplemented by social media presence on Facebook. From a security perspective, the site shows a good baseline with no visible vulnerabilities or exposed sensitive data. However, improvements are recommended in implementing security headers, publishing privacy and cookie policies, and establishing incident response and vulnerability disclosure mechanisms. The domain WHOIS data is consistent with the organization's claims, showing a long-standing registration that supports legitimacy. Overall, Elim Opava's website is a trustworthy and professional platform for their non-profit activities, with room for enhancement in privacy compliance and security best practices to further strengthen user trust and regulatory adherence.

V

VÍTKOVICE STEEL, a.s.

vitkovicesteel.com

54

VÍTKOVICE STEEL, a.s. is a prominent European steel manufacturer specializing in rolled steel products. The website serves as a comprehensive career portal targeting job seekers, students, and graduates interested in joining the company. It highlights available positions, employee benefits, company culture, and educational cooperation, reflecting a strong employer brand and community engagement. The site is professionally designed, mobile-optimized, and integrates modern web technologies including WordPress and Elementor, with embedded multimedia content and social media integration enhancing user engagement. Technically, the website employs secure HTTPS protocols, cookie consent management, and Google Tag Manager for analytics, indicating a mature digital infrastructure. The presence of security headers and absence of exposed sensitive data reflect a solid security posture. However, the lack of publicly available WHOIS data limits transparency, though this is common for corporate domains. Privacy policies and cookie management comply with GDPR standards, supporting user privacy and regulatory adherence. Overall, the site demonstrates a high level of professionalism, security, and privacy compliance, making it a trustworthy platform for prospective employees and stakeholders. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and security maturity.

C

Charita Opava

charitaopava.cz

53

Charita Opava is a well-established non-profit Catholic organization based in the Czech Republic, providing a broad range of social and health care services including protected housing, social rehabilitation, day care, therapeutic workshops, and senior care. The organization targets residents of the Opava region, donors, volunteers, and partners, positioning itself as a trusted regional social service provider with multiple governmental and community partnerships. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses a custom CMS named HandMade, with standard web technologies including HTML5, CSS3, and JavaScript. It integrates multiple Google Analytics and Tag Manager scripts for user tracking and analytics, and implements a cookie consent mechanism compliant with GDPR. The site is mobile optimized with moderate performance and basic accessibility features. From a security perspective, the website enforces HTTPS and uses cookie consent to manage user privacy preferences. However, it lacks explicit security headers and a vulnerability disclosure policy, which are recommended for improved security posture. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, Charita Opava's website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security headers, accessibility, and explicit security policies would further enhance trust and resilience.

Jinak o.p.s. is a Czech non-profit organization dedicated to providing social services such as support for independent living, social therapeutic workshops, social rehabilitation, education, and counseling. The website targets individuals seeking social support within the Czech Republic and presents a clear, consistent brand with relevant content for its audience. The organization maintains an active presence with contact information and partner links, indicating a community-focused approach. Technically, the website uses older but functional technologies including jQuery 1.11 and integrates multimedia features like YouTube and text-to-speech services. However, the site lacks modern security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and contact details suggest a legitimate entity. Overall, the site is functional and professional but would benefit from technical and security improvements.

Základní škola a Praktická škola, Opava is a public educational institution located in Opava, Czech Republic, providing primary and practical school education. The website serves students, parents, and the local community with information about school events, projects, and contact details. The institution maintains a consistent brand presence and complies with GDPR regulations, reflecting a responsible approach to data privacy. Technically, the website uses a modern tech stack including jQuery, Mapy.cz API, and Owl Carousel, built on the AKTIVNÍ ŠKOLA CMS platform. It is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security posture is good with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy and professionally maintained, supporting the institution's mission effectively.

M

Mateřská škola Eliška, Opava, příspěvková organizace

mseliska.cz

54

Mateřská škola Eliška is a small, regionally funded preschool educational institution located in Opava, Czech Republic. It operates as a contributory organization under the Moravskoslezský kraj regional government, providing early childhood education and specialized support services such as rehabilitation and orthoptics. The website targets parents and guardians in the local community, offering information about classes, events, and organizational details. The business model is public sector focused, emphasizing community service rather than commercial revenue generation. Technically, the website employs a modern JavaScript stack including jQuery, Swiper.js for sliders, and Magnific Popup for image galleries, along with accessibility enhancements via ResponsiveVoice. The site is mobile optimized and features good navigation and content structure, though SEO and metadata completeness could be improved. No CMS or hosting provider details were identified. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS as implied by Open Graph URLs, but lacks visible security headers and cookie consent mechanisms. No forms or data collection points were found on the main page, reducing attack surface. The absence of WHOIS data and domain registration details is a concern for trust but does not directly impact the operational security posture. Privacy policy is present and appears GDPR compliant, but no explicit incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and trustworthy for its intended audience, with moderate technical maturity and some room for security and compliance improvements. The lack of WHOIS data and cookie consent are the main gaps. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving metadata for SEO and social sharing.

S

Statutární město Opava

opava-city.cz

64

Statutární město Opava operates an official municipal website serving as the primary digital platform for city residents, visitors, and local businesses. The site provides comprehensive information about city governance, public services, news, events, and contact details. It targets a broad audience including citizens, municipal employees, and tourists, positioning itself as a trusted source of local government information. The business model is that of a government service portal, focusing on transparency and community engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap framework, and mapping libraries like Leaflet.js. It uses WebJET CMS for content management and integrates Google Tag Manager and Google Analytics for tracking and analytics. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit privacy policy and terms of service pages, security headers, and incident response contacts, which are areas for improvement. No vulnerabilities or malicious content were detected, and the site maintains a good security posture overall. Overall, the website is a professional and trustworthy municipal portal with good content quality and technical implementation. The absence of WHOIS data limits domain transparency, but the official branding and comprehensive contact information support its legitimacy. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and providing incident response contacts to strengthen compliance and trust.

U

Urssaf

urssaf.fr

57

Urssaf.fr is the official website of the French social security contribution agency, providing personalized support and online services for employers, independent workers, and associations in France. The site offers comprehensive information, declaration services, and legal documentation, positioning itself as a key government resource in the social security sector. The website is professionally designed with consistent branding and good content quality, targeting a broad audience involved in social security contributions. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and the Jahia CMS platform. It is mobile-optimized, accessible, and includes privacy and cookie consent mechanisms compliant with GDPR. Performance is moderate, with a well-structured HTML and CSS foundation. Analytics and chatbot services are integrated for user engagement and data collection. From a security perspective, the site enforces HTTPS, includes CSRF protection, and follows best practices, although explicit security headers could be verified further. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is typical for AFNIC-managed .fr domains, and does not detract from the site's legitimacy. Overall, Urssaf.fr presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing visible security headers, publishing incident response contacts, and maintaining up-to-date third-party libraries to sustain security and trust.

L

LED

weareled.fr

50

LED is a French digital agency specializing in designing, developing, and optimizing digital products such as websites, e-commerce platforms, and applications. As a subsidiary of Groupe Les Enchanteurs, LED positions itself as a user-centric agency with expertise in digital strategy, UX/UI design, development, and project management. The website reflects a professional and consistent brand image targeting organizations and brands seeking digital transformation. Technically, the site is built on WordPress with integrations of modern frameworks like Laravel, React, and Next.js, hosted by OVH. It employs Google Tag Manager and Axeptio for analytics and cookie consent, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS with good SSL configuration but lacks explicit security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, well-structured, and compliant with GDPR, though it could improve by publishing detailed security policies and vulnerability disclosure information.

L

Limbus Studio

limbus.fr

53

Limbus Studio is a French-based creative agency specializing in WordPress web design, development, and maintenance services. Established since 2005, the company offers a broad range of services including branding, digital design, motion design, print, packaging, SEO, and WooCommerce support. The agency positions itself as a trusted partner with a strong client base and positive reviews, emphasizing quality and long-term client relationships. Technically, the website is built on WordPress using the Enfold theme and WooCommerce platform, enhanced with performance optimization tools like WP Rocket and RocketCDN. The site is well-structured with comprehensive metadata, schema.org structured data, and social media integration, reflecting a mature digital presence. Mobile optimization and accessibility are well addressed. Security posture is solid with HTTPS enforced, anti-clickjacking measures, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers like Content-Security-Policy are not detected, and no dedicated security or incident response pages are found. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service pages. Overall, the website demonstrates professionalism and reliability, though the absence of WHOIS data and explicit privacy documentation slightly reduce trust scores. Strategic improvements in privacy transparency and security header implementation are recommended to enhance compliance and trustworthiness.

O

Outseta

outseta.com

58

Outseta operates as a SaaS membership operating system designed to help businesses and creators monetize and grow their membership offerings. The platform integrates payments, authentication, protected content, CRM, email marketing, and help desk tools into a unified solution. The website presents a professional and modern interface with good content relevance and user experience, targeting businesses seeking an all-in-one membership management solution. Technically, the site employs modern web technologies including Google Fonts, Google Tag Manager, reCAPTCHA, and Plausible Analytics, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and bot protection, but lacks explicit security headers and published security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and technology usage suggest a legitimate business. Privacy and cookie policies are not clearly presented, indicating room for compliance improvement.

G

Google Analytics Alternative

abralytics.com

44

Abralytics is a privacy-focused web analytics platform positioned as an alternative to Google Analytics (GA4), targeting web development agencies and businesses concerned with data privacy. The company offers cookie-free analytics, EU-based data storage, and white label branding, emphasizing user privacy and compliance. The website is built on WordPress with Elementor and integrates marketing and analytics tools such as HubSpot, Microsoft Clarity, and Google Tag Manager. While the site is professionally designed and mobile-optimized, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is generally good with HTTPS and domain protections, but DNSSEC and security headers are missing. Overall, the domain registration is consistent with the business profile, indicating legitimacy.

C

Cercle Communication

cerclecommunication.com

59

Cercle Communication is a small Canadian marketing and communication agency focused on providing personalized and multidisciplinary services to businesses. The website is built on the GoDaddy Website Builder platform, indicating a moderate level of digital maturity with basic technical infrastructure including HTTPS and service worker support. However, the site lacks comprehensive privacy and security policies, contact information, and advanced SEO or accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and incident response contacts. Overall, the website presents a basic but functional online presence suitable for a small agency, with room for improvement in privacy compliance and security best practices.

V

Visual Capitalist

visualcapitalist.com

65

Visual Capitalist is a media company specializing in delivering rich, visually engaging content focused on investment trends, business opportunities, and economic data. Their market position is strong within the niche of visual data journalism, supported by a subscription model (VC+), licensing, and advertising revenue streams. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and high-quality content. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and security headers, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, the site is trustworthy and well-maintained, though the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security transparency and accessibility features.

L

LMC France

lmc-web.fr

34

LMC France is a French web development agency specializing in delivering customized digital solutions. The company targets businesses and organizations seeking professional web development services. The website demonstrates a professional design with consistent branding and good content quality, indicating a small-sized agency operating in the technology sector within France. Technically, the site is built on WordPress using Elementor and integrates SEO tools like Yoast and analytics via Matomo, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data raises concerns about domain legitimacy and registration transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and security.

PNORS Technology Group is an Australian-owned enterprise comprising a group of companies that provide integrated and complementary technology-based solutions aimed at helping Australian businesses grow. The company positions itself as a medium-sized technology group with subsidiaries such as Pacific Commerce, WilldooIT, and Netway, focusing on improving business productivity and efficiency through technology. The website is professionally designed using the Odoo CMS platform and incorporates modern web technologies including Google Tag Manager for analytics and tracking. Privacy and cookie policies are implemented with consent mechanisms, reflecting a commitment to user privacy and compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of a published security policy and incident response information suggests room for improvement. The lack of WHOIS data for the domain is a notable anomaly that impacts trustworthiness from a domain registration perspective. Overall, the website is safe, professional, and well-structured, targeting Australian businesses seeking technology solutions.

H

HashBang

hashbang.fr

50

HashBang is a Lyon-based cooperative specializing in bespoke web and software engineering services, founded in 2013. The company emphasizes sustainable and responsible digital solutions, leveraging Python and Django technologies. Their market position is that of a trusted local cooperative with a strong commitment to social and ecological values. Technically, the website uses modern frameworks such as Bulma CSS and Wagtail CMS, hosted on Scaleway infrastructure, indicating a moderate level of digital maturity with good mobile optimization and accessibility. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal security policies. Privacy compliance is partial, with a privacy policy present only in the legal mentions page and no cookie consent mechanism. Overall, the website is professional, trustworthy, and content-rich, targeting French-speaking business clients seeking custom IT solutions.

C

CRESS AURA

cress-aura.org

49

CRESS AURA is a regional non-profit organization dedicated to representing, promoting, and supporting social and solidarity economy (ESS) structures in the Auvergne-Rhône-Alpes region of France. The organization offers key services including advocacy, training, accompaniment, and networking to ESS actors such as project initiators, enterprises, and local authorities. The website reflects a professional and consistent brand presence with rich content and clear navigation, targeting stakeholders involved in social economy and regional development. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by OVH sas. It employs Matomo analytics, indicating a privacy-conscious approach to user tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and explicit security headers, which are recommended for enhancement. No privacy or cookie policies were found, indicating a gap in GDPR compliance. Contact information is available via multiple verified company emails and a contact form. The domain registration is consistent with the organization's profile, showing legitimacy and appropriate domain age. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the website demonstrates strong business credibility and content quality but should improve privacy compliance and security hardening to enhance trust and regulatory adherence.