Security Directory

E

European Meteorological Society

emetsoc.org

55

The European Meteorological Society (EMS) is a well-established non-profit association representing meteorological societies across Europe. It serves as a network for 38 member societies and 31 associate members, organizing annual meetings, webinars, and offering awards to recognize scientific contributions and support young scientists. The website reflects a professional and consistent brand image, targeting meteorological professionals and researchers. Technically, the site is built on WordPress with a modern tech stack including jQuery, Owl Carousel, and Borlabs Cookie for privacy management. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and reCAPTCHA used on forms, though some security headers are missing and no explicit security or incident response policies are published. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection.

I

Ilmatieteen laitos

ilmatieteenlaitos.fi

64

Ilmatieteen laitos is the Finnish Meteorological Institute, a government agency providing authoritative weather forecasts, warnings, and climate research for Finland. The website serves a broad audience including the general public, meteorologists, researchers, and government entities. It offers comprehensive meteorological data, marine and space weather information, and mobile applications. The site is well-positioned as the national source for weather and climate information in Finland. Technically, the website is built on modern frameworks such as Nuxt.js (Vue.js), uses Font Awesome for icons, and integrates Matomo for analytics. It demonstrates good performance, mobile optimization, and accessibility. The content is professionally structured with clear navigation and SEO best practices. Security-wise, the site enforces HTTPS, employs multiple security headers, and has a cookie consent mechanism compliant with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not present, which could be improved to enhance transparency and trust. Overall, the website is highly trustworthy, professionally maintained, and secure, with minor areas for improvement in security policy transparency and incident response readiness.

A

Akademie věd České republiky

avcr.cz

59

Akademie věd České republiky is a prominent public non-university research institution in the Czech Republic, focusing on scientific research, public education, and technology transfer. The website serves as a comprehensive portal for news, events, publications, and multimedia content related to the academy's activities. It targets scientists, educators, students, media, and the general public interested in science and research. The institution holds a leading position in the Czech scientific community, offering a broad range of services including research support, international cooperation, and public outreach.

A

AZ Computers

azcomputers.cz

54

AZ Computers is a Czech Republic based small technology company specializing in custom web design, e-commerce solutions, online marketing, and graphic design services. Established in 2003, the company has built a strong local presence with over 18 years of experience and a portfolio of more than 270 clients, including notable organizations. Their website reflects a professional and modern digital presence with comprehensive service descriptions and client references. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and reCAPTCHA for security, and uses a proprietary CMS called LiveWeb 5.0. The website is mobile-optimized, SEO-friendly, and includes GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS enforced and secure form handling, though some HTTP security headers could be improved. Overall, the site is trustworthy, well-maintained, and aligned with the company's business claims.

D

DriveSpace CZ

drivespace.cz

50

DriveSpace CZ is a small technology company based in Cheb, Czech Republic, specializing in creating elegant and modern websites, e-shops, and providing online marketing services including SEO and PPC. They also offer web hosting and 24/7 technical support, positioning themselves as a regional expert in web solutions. The company demonstrates a professional online presence with clear contact information and active social media engagement. Technically, the website uses modern web technologies such as jQuery, Google Fonts, and analytics tools including Google Analytics and Matomo, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and published security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear legitimate and consistent. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

K

Kling Bohemia

klingwash.cz

43

Kling Bohemia operates a modern contactless car wash service with locations in Prostějov and Šternberk, Czech Republic. The business offers seven distinct washing programs including active foam washing, underbody cleaning, waxing, and polishing. Their model includes a customer card system for prepaid credits, targeting vehicle owners seeking quality and affordable car wash solutions. The website is professionally designed with clear navigation and relevant content, supporting a positive user experience. Technically, the site employs common JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with a cookie consent mechanism indicating GDPR compliance awareness. However, no WHOIS data was retrievable, limiting domain trust verification. Security posture is moderate with room for improvement in HTTP security headers and incident response transparency. Overall, the site is functional, secure, and compliant for a small local business.

A

AXA Partners CEE

axa-assistance.cz

64

AXA Partners CEE operates a professional insurance assistance website focused on travel, auto assistance, and health insurance services primarily targeting customers in the Czech Republic and Europe. The company leverages a modern digital infrastructure including ASP.NET WebForms and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. The website demonstrates good content quality, clear navigation, and consistent branding aligned with the AXA Group. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are lacking. The absence of WHOIS data reduces domain transparency and trust slightly but is offset by the professional presentation and clear contact information. Overall, the site is a reliable digital presence for AXA's insurance assistance services.

D

Úvod - 10000 kroků ke zdraví

desettisickroku.cz

48

The website www.desettisickroku.cz represents a Czech health and urban mobility initiative focused on promoting walking as a healthy lifestyle and community engagement activity. It targets individuals, cities, schools, companies, and partners to participate in walking challenges, fostering positive health and environmental changes. The site is professionally designed with consistent branding and features numerous partners and ambassadors, indicating a well-established presence in its sector. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and older jQuery versions are used, which could be updated for improved security. Privacy compliance is good, with clear cookie policies and GDPR-aligned consent. However, WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness but is mitigated by the professional site content and partner endorsements. Overall, the site is a credible, well-maintained platform supporting a public health cause.

K

KOREK Wines s. r. o.

korekwines.cz

41

KOREK Wines s. r. o. is a Czech-based small business specializing in the import and distribution of authentic wines from prominent European wine regions. Founded in 2018, the company emphasizes quality, terroir authenticity, and sustainable production by partnering with small family wineries. Their business model combines product sales with premium wine-related services such as guided tastings, wine travel, and consulting. The website reflects a professional and consistent brand image targeting wine enthusiasts and hospitality professionals. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is moderate with HTTPS implied but lacks visible security headers and formal privacy documentation. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact information appear credible. Overall, the site is functional, well-designed, and serves its niche market effectively.

M

MRP-Informatics, spol. s r.o.

mrp.cz

56

MRP-Informatics, spol. s r.o. operates the website www.mrp.cz, offering professional accounting software solutions tailored for entrepreneurs, small businesses, and accounting firms primarily in the Czech Republic. Their flagship products include the MRP-K/S accounting system, a visual accounting system, payroll and HR software, and electronic filing tools. The company positions itself as a market leader with over 100,000 installations, emphasizing comprehensive and user-friendly software solutions with ongoing support and updates. Technically, the website is built on Joomla CMS with modern frontend frameworks such as Bootstrap and Font Awesome, enhanced by SP Page Builder for layout management. It integrates third-party services like Tawk.to for live chat support and Google Analytics for user tracking. The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses CSRF tokens for AJAX requests, indicating good baseline security practices. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the professional presentation and business indicators. Overall, www.mrp.cz demonstrates a solid business and technical foundation with good security hygiene and privacy compliance. Strategic improvements in security policy transparency and enhanced HTTP security headers would further strengthen its posture.

K

Keloc

keloc.cz

41

Keloc is a small Czech Republic-based company specializing in IT sales and service, web development, digital printing, hosting, and economic software solutions. The company targets businesses and individuals seeking comprehensive IT and web services. Their market position appears local or regional with a focus on personalized service. Technically, the website is built on WordPress using the Divi theme, incorporating standard analytics and tracking tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is moderate with HTTPS enabled but lacks security headers and visible privacy or terms policies, which are areas for improvement. The absence of WHOIS data reduces trust signals but does not necessarily indicate malicious intent. Overall, the website is functional and professional but could enhance trust and compliance by adding privacy policies, security headers, and clearer contact information.

G

GAS - TM s.r.o.

gas.cz

48

GAS - TM s.r.o. operates the website gas.cz as a specialist retailer and service provider in heating and cooking technology, primarily serving the Czech and Slovak markets. The company offers a broad product catalog including gas boilers, stoves, water heaters, and related accessories, supported by physical retail presence and multiple partner pickup locations. The website demonstrates a mature e-commerce model with integrated customer support and installation services. Technically, the site employs a modern tech stack with Bootstrap, jQuery, and various marketing and analytics tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS, cookie consent management, and CAPTCHA protections, though some security headers are missing and older jQuery versions are used. Privacy compliance is well addressed with clear GDPR and cookie policies. The absence of WHOIS data slightly impacts trust but is mitigated by transparent contact information and business legitimacy indicators. Overall, the site is professional, secure, and trustworthy with room for technical and security enhancements.

ASPP (Asociace stavitelů plynovodů a produktovodů z.s.) is a professional association established in 1998 in the Czech Republic, focused on setting quality standards and certifying companies involved in the construction and reconstruction of gas and product pipelines. The association currently comprises 42 member companies employing approximately 2,500 workers with a significant annual turnover, operating both domestically and internationally. The website serves as an informational and educational platform for members and interested parties, offering documentation, membership details, and training programs. Technically, the site is built on WordPress 4.7.31 with common libraries like jQuery and Bootstrap, and uses Google Analytics for visitor tracking. While the site is functional and professionally presented, it uses outdated software versions and lacks advanced security headers and cookie consent mechanisms, which are areas for improvement. Security posture is moderate with HTTPS enabled but could benefit from updates and enhanced security practices. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

W

World Meteorological Organization

wmo.int

68

The World Meteorological Organization (WMO) is a specialized agency of the United Nations focused on weather, climate, and water resources. It serves as the UN's scientific voice on atmospheric and climate matters, providing authoritative data, early warning systems, and international coordination. The website reflects a large, well-established government/non-profit entity with a global mandate and a strong market position as the leading meteorological authority. The content is professionally curated, targeting governments, researchers, and the public interested in climate and weather. Technically, the website is built on Drupal 10, leveraging modern analytics and tracking tools such as Google Tag Manager, Microsoft Clarity, and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but could be improved by adding explicit security headers and a content security policy. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms, which is a notable gap for a global organization. Contact information is not explicitly provided in the visible content, which may impact user trust and accessibility. Overall, the site is trustworthy and authoritative but should enhance privacy disclosures and contact transparency to improve compliance and user confidence.

O

OLYMP CSMV

olympcsmv.cz

45

OLYMP CSMV is an official government sports center under the Ministry of Interior of the Czech Republic, established in 2009. The website serves as a portal for sports-related news, results, and organizational information targeting athletes, sports departments, and the general public interested in sports activities related to the Ministry. The site is built on a modern WordPress platform using Elementor and Yoast SEO, indicating a reasonable level of digital maturity. Social media integration is present, enhancing outreach and engagement. Security posture is solid with HTTPS enabled and nonce usage, but lacks some security headers and formal privacy/cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

The website pivovar-regent.cz represents a brewery business likely focused on alcoholic beverages, as indicated by the age verification prompt. However, the site content is minimal, lacking substantive business information, contact details, or policies. The technical infrastructure uses the Dojo JavaScript framework and external font/icon libraries but lacks modern CMS or hosting details. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site appears to be a small-scale brewery with limited digital maturity and security compliance.

Z

Zámek Mitrowicz

zamekmitrowicz.cz

60

Zámek Mitrowicz is a historic castle venue located in the Czech Republic, offering hospitality services including weddings, accommodation, corporate events, and cultural programs. The website presents a professional and consistent brand image with clear information about the castle's unique features and services. The technical infrastructure employs common web technologies such as jQuery, Bootstrap, and Font Awesome, providing a moderate performance and good mobile optimization. Security posture is moderate with cookie consent and privacy policy in place, but lacks visible security headers and incident response information. The absence of WHOIS data reduces domain trustworthiness, though the website content and partner affiliations support legitimacy. Overall, the site is functional and suitable for its hospitality business purpose.

M

Meteopress s. r. o.

meteopress.cz

54

Meteopress s. r. o. operates a comprehensive Czech weather forecasting website providing current weather conditions, hourly and 14-day forecasts, meteorological radar data, live webcams, and weather-related articles. The company targets the general public in the Czech Republic and offers business weather services, positioning itself as a reputable media entity in meteorology. Technically, the website leverages modern frameworks such as SvelteKit, integrates Google Fonts, Font Awesome, and uses analytics tools like Google Analytics and Hotjar. The site is well-optimized for mobile and SEO, with fast performance and good accessibility. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the domain WHOIS data is unavailable, likely due to privacy protection, but the website content and business presence indicate legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and providing clearer contact information for security incidents.

M

Moto Olomouc

moto-olomouc.cz

59

Moto Olomouc is a Czech Republic-based retailer specializing in the sale of four-wheelers (ATVs), motorcycles, scooters, electric scooters, and a wide range of motorcycle gear and accessories. The company operates both an e-commerce platform and a physical store located in Olomouc, offering over 70 product stands. The website is well-structured and targets motorcycle enthusiasts and customers in the Czech market. Technically, the site is built on the PrestaShop CMS platform, leveraging modern web technologies including Google Tag Manager and Facebook SDK for marketing and analytics. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and asynchronous loading of tracking scripts but lacks some security headers and formal security policies. The absence of a privacy policy and cookie consent mechanism indicates compliance gaps with GDPR and related regulations. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information suggest a legitimate business. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security posture.

The website www.edb.eu operates as a comprehensive online business directory and catalog primarily focused on Czech and European companies. It offers categorized listings across numerous sectors including transport, energy, manufacturing, real estate, hospitality, education, healthcare, and more. The platform supports multiple languages, enhancing accessibility for a broad European audience. The business model centers on providing company information, business offers, and advertising opportunities to professionals and enterprises seeking reliable suppliers and partners in the region. The site is positioned as an established regional directory with a medium-sized footprint and consistent branding. From a technical perspective, the website employs modern web technologies such as Bootstrap for responsive design, Google Fonts, Font Awesome icons, and integrates analytics tools like Google Analytics 4 and Microsoft Clarity. It uses Google reCAPTCHA to protect forms and implements cookie consent mechanisms to comply with privacy norms. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security-wise, the site enforces HTTPS and uses reCAPTCHA for form security. However, no explicit security headers were detected, and there is no published privacy policy or terms of service in the provided content, which are areas for improvement. No vulnerabilities or suspicious patterns were identified. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no registrant details are publicly available. This privacy protection is justified given the nature of the business directory. Overall, the website presents a professional and trustworthy platform for business information in the Czech and European markets. Strategic recommendations include publishing clear privacy and terms policies, enhancing security headers, providing explicit contact information for security and business inquiries, and improving accessibility compliance to strengthen trust and compliance posture.

T

TicketLIVE - Naživo je to nejlepší

ticketlive.cz

65

TicketLIVE.cz is an e-commerce platform specializing in ticket sales for live events such as concerts, festivals, and sports primarily in the Czech Republic. The website offers a comprehensive event listing, merchandise, vouchers, and a loyalty program called Gold Club. The platform targets consumers interested in cultural and entertainment events, providing a user-friendly interface with search and navigation features. Technically, the site uses modern frontend technologies including Bootstrap, Font Awesome, lazy loading, and Google Tag Manager for analytics and marketing. The site is mobile optimized and presents a professional design with consistent branding. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain transparency and trustworthiness, although the website content and social media presence suggest a legitimate business. Overall, the site scores moderately well on content quality, technical implementation, and security posture but needs to enhance privacy compliance and domain registration transparency.

N

Nuaktiv a. s.

esmao.sk

53

The website www.esmao.sk represents Nuaktiv a. s., a Slovak company specializing in electronic government services for municipalities and public administration. The platform offers a comprehensive suite of eGovernment solutions including portals, submission management, payment modules, and integration with national government systems. It targets municipalities, public authorities, citizens, and integrated service points, positioning itself as a key player in Slovakia's digital government ecosystem with over 125 local government clients and more than one million users. Technically, the website employs a modern technology stack featuring Bootstrap, jQuery, and various UI plugins, ensuring responsive design and moderate performance. The site includes cookie consent mechanisms and uses Google reCAPTCHA for form protection, reflecting a basic level of privacy and security awareness. However, explicit privacy policies and security headers are missing, indicating areas for improvement in compliance and security posture. From a security perspective, the site uses HTTPS and has implemented cookie consent and spam protection, but lacks visible security headers and formal security policies. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business information, confirming domain legitimacy and consistency. Overall, the website is professional, trustworthy, and well-targeted, but could enhance its security and privacy compliance by adding explicit policies and improving technical security controls.

B

Behnshop

behnshop.de

47

Behnshop is a German e-commerce retailer specializing in a wide range of alcoholic beverages, including spirits, liqueurs, and regional classics. The website positions itself as a trusted source for well-known brands and offers a comprehensive online shopping experience targeting mature consumers interested in quality spirits. The business appears to be medium-sized with a history dating back to 2014, likely affiliated with the Waldemar Behn GmbH brand portfolio. Technically, the site employs modern web technologies such as jQuery, Font Awesome, and integrates an advanced accessibility tool (digiaccess) to enhance usability for users with disabilities. The platform is likely built on a commercial e-commerce CMS, possibly Shopware, and is hosted with domain control services provided by GoDaddy.

Svaz měst a obcí České republiky (SMO ČR) is a Czech non-profit association representing cities and municipalities, providing advocacy, education, legal support, and organizing events for local governments. The website serves as a portal for members and the public, offering news, event calendars, training, and member services. The organization holds a strong market position as a leading municipal association in the Czech Republic. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Font Awesome, Swiper.js, and Google reCAPTCHA v3 for security. The site is mobile-optimized with good navigation and content quality. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance, although no explicit privacy policy page was found. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, but lacks some recommended security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is missing, which lowers domain trustworthiness, but the website content and contact information indicate a legitimate organization. Overall, the site is professional and trustworthy with room for improvement in privacy transparency and security header implementation. The absence of WHOIS data is a notable gap that should be addressed to enhance domain legitimacy and trust.

L

Louda Holding a. s.

louda.cz

10

Louda Holding a. s. is a well-established Czech family-owned holding group founded in 1992, operating across six diverse sectors including automotive sales and service, mobility and financing, real estate development, manufacturing, glass production, and education. The company employs over 1,500 people and holds a strong market position as the largest ŠKODA and Hyundai car dealer in the Czech Republic and the largest carsharing provider. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting a general Czech audience. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Cookiebot, hosted via REG-ZONER, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, reCAPTCHA integration, and cookie consent management, though it lacks some advanced security headers and explicit security policies. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or blocking mechanisms.

R

RAUL, s. r. o.

ski-tour.cz

47

ČEZ SkiTour is a prominent organizer of cross-country skiing events in the Czech Republic, targeting amateur skiers and winter sports enthusiasts. The website serves as a hub for race information, news updates, multimedia content, and race results. It holds a strong market position as the largest series of such events in the country, with a clear focus on community engagement and event promotion. Technically, the site employs modern web technologies including jQuery, Slick Carousel, and Google Tag Manager, ensuring a responsive and user-friendly experience. However, some technical aspects such as security headers and explicit privacy policies could be improved. The security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. Overall, the site is professional and trustworthy, though the absence of WHOIS data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include enhancing privacy disclosures, implementing security headers, and publishing incident response information to bolster trust and compliance.

S

Seattle Manufacturing Corporation

smcgear.com

61

Seattle Manufacturing Corporation (SMC Gear) operates an e-commerce platform specializing in high-quality climbing, rescue, and industrial gear. Their product range includes carabiners, pulleys, descenders, and specialized rescue equipment, targeting professionals in rescue, alpine, and climbing sectors. The company has a stable market position as a niche manufacturer and retailer with a medium-sized business footprint, founded in 2010. Technically, the website is built on Magento 2, leveraging modern JavaScript libraries such as RequireJS, jQuery, and KnockoutJS, with Bootstrap and Font Awesome for styling and UI components. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Hosting is managed via Go Montenegro Domains, LLC as registrar, with no DNSSEC enabled. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information is available via a customer service email and contact page, but no dedicated security or incident response contacts are provided. Overall, the website is professional, trustworthy, and safe for general audiences, but improvements in privacy policy visibility, security headers, and DNS security would strengthen its security posture and compliance standing.

B

BrandBits

brandbits.com

46

BrandBits is a small technology company founded in 2009 that offers cloud-hosted SaaS tools designed to enhance customer engagement and brand presentation. Their key services include interactive flipbooks, slidebooks, store locators, visitor recordings, and feedback widgets, targeting businesses seeking to improve their digital customer experience. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience and moderate SEO optimization. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and analytics tools such as Matomo and Google Tag Manager. Hosting and DNS are managed via Cloudflare, with SSL properly configured. The site is mobile optimized and performs moderately well, though accessibility features are basic. Cookie consent is managed through Cookiebot, indicating some privacy compliance efforts. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited domain status, but lacks DNSSEC and explicit security headers. There is no published security policy or incident response contact, and no vulnerability disclosure mechanism is present. The login form uses secure POST methods but no advanced security features are evident. Overall security posture is moderate but could be improved with additional controls and transparency. The overall risk is moderate with no critical issues detected. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and improving privacy compliance disclosures to enhance trust and security culture.

R

RTM plus Liberecko s.r.o.

rtmplus.cz

53

RTM plus Liberecko s.r.o. operates the largest regional television station in the Liberec region of the Czech Republic, providing daily news, local event coverage, and video production services. The company targets residents of the Liberec region and surrounding border areas, offering a premier hour of fresh content daily with a program loop thereafter. The website demonstrates a moderate level of digital maturity with use of modern video streaming technologies and social media integration. However, the absence of WHOIS data and privacy/cookie policies indicates gaps in transparency and compliance. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and incident response information. Overall, the website is professional and content-rich but would benefit from improved privacy compliance and enhanced security practices.

S

Ski Classics

skiclassics.com

53

Ski Classics is an established international series of long-distance cross-country ski races in classic style, operating since 2011 with a domain registered since 2003. The website serves as an information hub for the events, targeting skiing enthusiasts and athletes. The business is positioned as a niche sports event organizer with a medium-sized operational scale, primarily focused on transportation and sports sectors. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies including Google Analytics, Tag Manager, and reCAPTCHA for bot protection. The site demonstrates good SEO and mobile optimization, though accessibility is basic. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and DNSSEC. No incident response or security policy is published, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, with room to enhance security and transparency.

J

Jak třídit – Informace ze světa třídění, recyklace a využití odpadů

jaktridit.cz

42

Jaktridit.cz is a Czech Republic-based informational and educational website dedicated to waste sorting, recycling, and environmental awareness. It serves as a comprehensive resource for the general public, providing detailed guides, interactive tools, and an e-shop for materials supporting waste sorting efforts. The website is well-established in its niche, with consistent branding and high-quality content tailored to a broad audience interested in ecological topics. Technically, the site is built on WordPress with modern web technologies such as Bootstrap, jQuery, and Lightbox2. It employs Google Tag Manager and analytics tools for tracking and marketing purposes. The site is mobile-optimized, accessible, and SEO-friendly, offering a smooth user experience. HTTPS is enforced, and cookie consent mechanisms are implemented, reflecting good privacy compliance. From a security perspective, the site demonstrates solid fundamentals with HTTPS and no visible vulnerabilities or exposed sensitive data. However, it lacks some advanced security headers and does not publish a security policy or incident response information. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly impacts trustworthiness. Overall, Jaktridit.cz presents a trustworthy, professional, and user-friendly platform with strong content quality and privacy practices. Strategic improvements in security headers, transparency on incident response, and WHOIS data availability would enhance its security posture and business credibility.

E

ENVIPARTNER, s.r.o.

portalobce.cz

44

The website www.portalobce.cz serves as a comprehensive digital platform for municipal services in the Czech Republic, offering a suite of modules including flood management, GIS mapping, strategic planning, and citizen engagement tools. The business is positioned as an important player in the government sector, targeting both public administration and citizens with specialized digital solutions. The platform integrates multiple applications and services, some developed locally, enhancing municipal governance and public safety. Technically, the website employs a modern frontend stack with Bootstrap, jQuery, Font Awesome, and integrates third-party analytics tools such as Google Analytics and Hotjar. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, the absence of a CMS or hosting provider information limits deeper infrastructure insights. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and explicit privacy and cookie policies, which are critical for GDPR compliance. The WHOIS data is unavailable, which raises concerns about domain transparency and trustworthiness. No direct contact information or incident response channels are provided, limiting user trust and security communication. Overall, the website is functional and professionally designed but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

M

Město Rýmařov

rymarov.cz

44

The website www.rymarov.cz serves as the official online presence for the town of Rýmařov, Czech Republic. It provides municipal news, public service information, event calendars, and contact details for residents and visitors. The site is positioned as a local government portal, offering essential services and information to its community. The business model is focused on public administration and citizen engagement, with no commercial intent. Technically, the site is built on Joomla CMS using the Helix3 template framework, incorporating modern web technologies such as jQuery, Bootstrap, and Leaflet.js for interactive maps. The site is mobile-optimized and provides a moderate performance experience. Accessibility is basic but present, and SEO practices are implemented at a basic level. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, no advanced security headers or vulnerability disclosure policies are detected. The absence of WHOIS data for the domain reduces trust slightly but does not detract significantly from the site's legitimacy given its official nature. Overall, the website is a trustworthy and functional municipal portal with good content quality and user experience. Strategic improvements in security headers, accessibility, and transparency around vulnerability reporting would enhance its security posture and compliance standing.

O

Olomoucký kraj

rodinajeok.cz

61

The website www.rodinajeok.cz serves as the official regional government portal for family policy in the Olomoucký kraj region of the Czech Republic. It provides comprehensive information about family-oriented programs, events, and support services, targeting families, foster carers, seniors, and local municipalities. The site is well-branded with consistent government imagery and offers useful resources such as calendars, news updates, and contact details. Technically, the site uses a mix of common JavaScript libraries and Google services, with a custom CMS platform. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and integrates Google reCAPTCHA for form protection. However, it lacks explicit security policies and incident response contacts. Overall, the site is trustworthy, legitimate, and well-maintained, with minor areas for security and compliance improvement.

I

iptvsa.store

riptechsolutions.com

48

RIPTechSolution.com is a specialized IPTV review and comparison website targeting English-speaking countries such as South Africa, USA, UK, Australia, Ireland, and Canada. The platform offers unbiased IPTV provider reviews, streaming performance tests, device compatibility information, and user feedback updated for 2025. The business operates primarily as a content and affiliate marketing site, helping consumers choose IPTV services based on price, quality, and features. The website is relatively new, founded in 2024, and hosted by Spaceship, Inc., with a WordPress CMS and Elementor page builder technology stack.

S

Střední Morava – Sdružení cestovního ruchu

stredni-morava.cz

46

Střední Morava – Sdružení cestovního ruchu is a regional tourism association focused on promoting travel, cultural events, and accommodation in the Central Moravia region of the Czech Republic. The website serves as an information hub for tourists, offering event listings, interactive maps, and regional discount cards. The organization appears to be a small non-profit entity established in 2001, with strong ties to regional and national tourism bodies. Technically, the website uses a custom CMS (Noteo Engine) with modern JavaScript libraries and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides multilingual support. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and has no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable source for regional tourism information.

C

COOLINTSOFT s.r.o.

schranka-duvery.cz

58

The website www.schranka-duvery.cz is operated by COOLINTSOFT s.r.o. and provides an online trust box service targeted at primary and secondary schools in the Czech Republic. The platform enables anonymous messaging between students, parents, and designated school staff such as prevention methodologists, facilitating secure and confidential communication. The business model is subscription-based with a free trial and yearly prepaid plans, positioning the company as a niche provider in the educational technology sector within the Czech market. Technically, the website employs a modern front-end stack including jQuery, Font Awesome, Google Fonts, and animation libraries such as Animate.css and WOW.js. The site is mobile-optimized with good navigation and SEO practices. The presence of HTTPS and CAPTCHA on forms indicates a baseline security posture, although the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and security hardening. From a security perspective, the site demonstrates good practices such as SSL encryption and secure form handling but lacks advanced HTTP security headers and explicit privacy banners. The WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and reduces overall trustworthiness. However, the website content and business information appear professional and credible. Overall, the website scores moderately high on content quality, technical implementation, and business credibility but is slightly penalized for privacy compliance gaps and missing WHOIS transparency. Strategic recommendations include implementing security headers, adding cookie and privacy consent banners, verifying domain registration details, and publishing security policies to enhance trust and compliance.

B

BAKALÁŘI software s.r.o.

bakalari.cz

68

BAKALÁŘI software s.r.o. operates the leading school management system in the Czech Republic, serving over 3,500 schools and more than a million users. Their platform simplifies school administration and communication between schools and families, offering modules such as electronic class books, student data management, timetable generation, and cloud backup. The company has a strong market position with over 60% penetration in Czech schools and a 25+ year history, supported by EU funding and Ministry of Education partnerships. Technically, the website leverages a modern tech stack including jQuery, Bootstrap, Font Awesome, Owl Carousel, and DataTables, hosted on Microsoft Azure DNS infrastructure. The site is mobile-optimized and SEO-friendly, with good content quality and clear navigation. Privacy compliance is robust, featuring a comprehensive GDPR policy and a detailed cookie consent mechanism. Security posture is moderate with no visible critical vulnerabilities, though explicit security headers and incident response information are not published. The site uses HTTPS and avoids exposing sensitive data. Analytics are implemented via Google Analytics with user consent mechanisms in place. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Recommendations include enhancing security headers, publishing terms of service and security policies, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

Save the Children Federation, Inc. operates a comprehensive and professionally designed website focused on child welfare, humanitarian aid, and education. The organization is positioned as a leading non-profit with a century-long history, serving children in the U.S. and globally. The website effectively targets donors, volunteers, and partners with clear messaging and secure donation mechanisms. Technically, the site uses a modern Drupal CMS infrastructure with integrations for analytics and marketing, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response details are not published. Overall, the site demonstrates high trustworthiness and compliance with privacy regulations, including GDPR. The lack of WHOIS data is mitigated by strong on-site trust signals and recognized charity certifications.

DER MEDIENVERTRIEB operates a dedicated extranet portal named DMV-Extranet, providing its clients with 24/7 access to sales reporting, special evaluations, billing documents, and market observation data. The portal targets business clients and account managers, facilitating efficient distribution and management of media-related data. The website content is primarily in German, consistent with the company's German market focus. Technically, the website is built using JavaServer Faces with the PrimeFaces 6.2 framework, supplemented by jQuery and Font Awesome for UI components. The site demonstrates moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. The login form is standard, using POST with masked password input, but no advanced security headers or CSRF protections are evident. Security posture is moderate; while HTTPS is assumed (not explicitly confirmed in HTML), the absence of security headers and privacy compliance mechanisms such as cookie consent or GDPR policies indicates room for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data shows consistent domain registration with professional name servers, supporting legitimacy. Overall, the site is functional and serves its business purpose but requires enhancements in privacy compliance, security headers, and user experience to improve trust and security posture.

Č

ČMKOS

cmkos.cz

44

Českomoravská konfederace odborových svazů (ČMKOS) is the largest trade union confederation in the Czech Republic, dedicated to defending the labor, economic, and social rights of employees nationwide. The organization actively advocates for its members in relation to the state, regional authorities, and employers, while also cooperating with international trade union bodies. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, indicating a well-established organization with a broad target audience of workers and union members. Technically, the site leverages Drupal 8 and Elementor, integrating modern web technologies and ensuring mobile responsiveness and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates a professional and trustworthy online presence aligned with its non-profit labor union mission.

D

Destinační společnost Hradecko, z. s.

hkinfo.cz

45

The website www.hkinfo.cz serves as the official tourist information center for Hradec Králové, Czech Republic, operated by Destinační společnost Hradecko, z. s. It provides comprehensive local cultural event calendars, ticket sales, guided tours, souvenirs, and regional products, targeting tourists and local residents interested in cultural and leisure activities. The site is well-branded, consistent, and integrates multiple partner organizations, enhancing its credibility within the local tourism ecosystem. Technically, the site uses a variety of JavaScript libraries and frameworks including jQuery, Bootstrap, and Google Analytics, with a CMS identified as Mijahoo 2.05. The site is moderately optimized for performance and mobile use, with good SEO practices evident.

S

SmartEmailing 2.1

se-forms.cz

52

The website se-forms.cz hosts a login page for SmartEmailing 2.1, an email marketing platform primarily targeting businesses and marketers seeking email campaign management solutions. The site offers a user login form with client-side validation and promotes a new application portal at portal.smartemailing.cz. The business appears to be a small technology company founded around 2019, operating in the Czech Republic. The domain registration data aligns well with the business profile, indicating legitimacy and consistency. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Parsley.js for form validation, and the Nette PHP framework. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. The site is moderately optimized for mobile and accessibility, with a clean and professional design. However, SEO and accessibility features are basic. From a security perspective, the site uses HTTPS and includes client-side validation but lacks visible security headers such as CSP or HSTS. No privacy or cookie policies are present, which is a compliance gap under GDPR. The presence of a third-party tracking pixel (Leady) indicates moderate user tracking. No contact or incident response information is provided, limiting transparency. Overall, the website is functional and professionally designed but would benefit from enhanced security headers, explicit privacy and cookie policies, and improved transparency regarding contact and incident response. These improvements would strengthen compliance and user trust.

N

NETservis s.r.o.

webredakce.cz

44

Webredakce.cz is a Czech Republic-based technology company operated by NETservis s.r.o., offering a comprehensive content management system (CMS) designed for easy management of websites and e-shops. The platform emphasizes responsive design, multilingual support, and custom module development, targeting businesses and individuals seeking efficient web content management solutions. The company showcases reputable client references, indicating a solid market presence in the CMS domain. Technically, the website employs common web technologies including jQuery, Fancybox, Google Analytics, and Google Tag Manager, with a custom CMS backend. The site is mobile-optimized with responsive design and includes client-side form validation and CAPTCHA tokens to mitigate spam. However, the use of an older jQuery version and lack of explicit security headers suggest areas for technical improvement. From a security perspective, the site uses HTTPS and implements basic form security measures but lacks visible security headers and published privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy verification, impacting overall trustworthiness. No WAF or blocking mechanisms were detected, and the site content is safe and business-oriented. Overall, Webredakce.cz presents a professional and functional CMS offering with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and compliance.

E

EGIA

epic2026.com

58

EPIC2026 is a professionally managed HVAC industry conference organized by EGIA and OPTIMUS Financing, targeting home services professionals and contractors. The event offers comprehensive training, keynote speakers, networking, and exhibitor showcases scheduled for February 2026 in Las Vegas. The website is built on WordPress with WooCommerce for registration and e-commerce functionality, integrating modern web technologies and SEO tools. The site demonstrates good digital maturity with clear navigation, mobile optimization, and rich content. Security posture is adequate with HTTPS and domain protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its niche but could improve privacy and security transparency.

F

FeWo-Touristik GmbH

fewo-von-privat.de

55

Fewo-von-privat.de is a German-based online platform specializing in vacation rental listings, offering over 7,200 private holiday apartments and houses across Germany and Europe. The website targets private travelers seeking affordable and diverse accommodation options, providing a user-friendly search and booking interface along with travel information and tips. The business operates in the hospitality sector with a medium-sized footprint and has been established since at least 2008. Technically, the site uses a Joomla CMS with a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted on AWS infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content.

N

NETservis s.r.o.

kookiecheck.cz

46

Kookiecheck.cz is a Czech Republic-based small technology company specializing in cookie consent management solutions compliant with legislation effective from January 1, 2022. The website offers a SaaS model with tiered pricing and customization options for clients to manage cookie consents easily. The business is operated by NETservis s.r.o., a company founded in 2021, with clear branding and a client login portal indicating a professional service. Technically, the website uses older jQuery libraries and standard web fonts, with basic mobile optimization and no detected CMS. Security posture is moderate with HTTPS usage but lacks modern security headers and uses outdated JavaScript libraries, posing potential vulnerabilities. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Contact is only available via a web form without direct emails or phone numbers. Overall, the site is professional and trustworthy but requires improvements in security and privacy transparency.

P

POLAR televize Ostrava

polar.cz

61

POLAR is a regional television broadcaster serving the Moravskoslezský kraj region in the Czech Republic. Established in 1998, it provides continuous streams of local news, entertainment, and multimedia content. The website reflects a mature digital presence with video streaming capabilities, social media integration, and advertising services. The business model centers on regional broadcasting and multimedia production, targeting local residents and advertisers. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Video.js, hosted likely by Websupport, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not found, indicating room for compliance improvement. Overall, the domain registration and website content align well, supporting a trustworthy and established media entity.

W

Work with maps like never before

mapotic.cz

52

Mapotic.cz is a Czech-based technology company specializing in smart mapping solutions that empower users to work with dynamic location data. Their platform offers web and mobile map solutions, thematic and community maps, data visualization, tracking, and custom API services. The website presents a professional and consistent brand image with a focus on various sectors including tourism, ecology, education, logistics, smart cities, and IoT data visualization. The company targets organizations and individuals seeking advanced mapping tools to enhance their projects. Technically, the website is built on WordPress with Elementor, uses modern libraries such as Bootstrap and jQuery, and integrates monitoring tools like New Relic and Google Tag Manager. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS and security headers in place, but lacks explicit privacy and cookie policies, as well as clear contact information for security or incident response. WHOIS data is unavailable, which limits domain trust verification. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

N

Národní pedagogický institut České republiky (NPI ČR)

edusit.cz

63

Edusíť is a Czech Republic-based educational platform operated under the Národní pedagogický institut České republiky (NPI ČR). It serves as an open network connecting schools with experts across various thematic educational areas. The platform offers a free database of registered experts, thematic LinkedIn groups for community engagement, and registration services for new experts. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence for a small non-profit educational initiative. Technically, it leverages modern web technologies including Vue.js, Laravel Nova for administration, and integrates analytics tools such as Google Analytics and Hotjar for user behavior insights. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the website's purpose and Czech national affiliation, supporting its legitimacy and trustworthiness.