Security Directory

T

Great memories start with ticket.io

ticket.io

57

ticket.io is a technology platform focused on providing ticketing services for events, targeting event organizers and attendees. The website is built on WordPress and optimized with WPRocket, indicating a moderate level of technical maturity. The content is professional and relevant, though some key compliance elements such as privacy and cookie policies are not detected in the provided content. Security posture appears basic with no advanced headers or security policies evident, and WHOIS data is protected, which is common but reduces transparency. Overall, the platform appears legitimate but would benefit from enhanced security and compliance measures.

F

Fundacja Dorastaj z Nami

dorastajznami.org

61

Fundacja Dorastaj z Nami is a Polish non-profit organization dedicated to supporting children of public service workers and healthcare professionals who have lost their lives or suffered injuries in the line of duty. Established in 2010, the foundation provides long-term educational and social support to over 300 children, while also promoting respect for public service through exhibitions, social campaigns, and debates. The website is professionally designed using WordPress and Elementor, featuring comprehensive GDPR-compliant privacy and cookie policies, and integrates modern analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent and transparent. Overall, the foundation presents a trustworthy and well-maintained digital presence aligned with its mission.

M

Móda Ženy

modazeny.cz

7

The website modazeny.cz is a Czech-language content platform focused on women's fashion, health, and lifestyle topics. It operates as a small media publishing site using WordPress with the Newspaper theme and common plugins. The site targets a female audience interested in fashion and wellness. Technically, it employs standard web technologies including jQuery, Google Fonts, and Font Awesome, with moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, security headers, and incident response information, which impacts its compliance and security posture. The domain is currently expired, posing a significant risk to business continuity and trust. Overall, the site is safe for general audiences but requires urgent attention to domain renewal and compliance documentation.

P

PR články

pr-clanky.eu

36

PR články is a Czech-language website focused on publishing PR articles across various categories such as news, finance, health, travel, and lifestyle. The site operates on the WordPress platform, utilizing common plugins like Yoast SEO and jQuery-based libraries for enhanced user experience. Hosting is provided by WEDOS Internet, a reputable Czech hosting provider. The website targets a general audience interested in diverse PR content and informational articles. Technically, the site demonstrates moderate performance and good mobile optimization but lacks advanced security headers and privacy compliance mechanisms. No privacy policy, cookie consent, or terms of service were detected, which may expose the site to compliance risks, especially under GDPR regulations. Security posture is basic with no evident vulnerabilities but could be improved by implementing standard security headers and SSL verification. Overall, the website is professional and content-rich but would benefit from enhanced security and privacy practices to increase trust and compliance.

G

Gransy s.r.o.

ibydleni.eu

46

iBydlení.eu is a Czech online magazine specializing in housing, renovation, and garden design trends. The website provides advice and articles aimed at homeowners and enthusiasts interested in modern living spaces. The business operates in the media sector, targeting a general Czech-speaking audience with a niche focus on home improvement and lifestyle content. The company behind the domain is Gransy s.r.o., a Czech-registered entity, which aligns with the website's language and content focus. The website uses WordPress CMS with the Newspaper theme and several plugins to enhance SEO and user experience. Technically, the site is moderately optimized for performance and mobile devices, with good SEO metadata and structured data implementation. Security-wise, the site enforces HTTPS and uses some best practices like opening external links in new windows with noopener, but lacks security headers and formal privacy or cookie policies, which are compliance gaps. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

Z

Ženy info

zeny.info

56

The website 'Ženy info' is a Czech language media platform targeting modern women with news and articles relevant to their interests. It operates on the WordPress CMS and uses common web fonts and Google Tag Manager for analytics. The site appears to be a small-scale content publisher without visible contact or business registration information. Technically, the site is moderately optimized for mobile and SEO but lacks advanced security headers and privacy compliance mechanisms. The security posture is basic with no HTTPS verification in the provided data and no visible security policies or incident response contacts. Overall, the site presents moderate risk with recommendations to improve security and privacy compliance to enhance trustworthiness.

E

EXTÉRIA FRANCHISING s.r.o.

exteriamarket.sk

48

EXTÉRIA FRANCHISING s.r.o. operates a unique franchising concept in the Czech Republic specializing in occupational safety (BOZP) and fire protection (PO). The company offers franchise opportunities with tailored BOZP products, targeting entrepreneurs and business managers seeking to establish or grow their own franchise branches. The website demonstrates a professional and consistent brand presence with comprehensive content and multimedia support, including videos and galleries. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates essential marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, alongside GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS data and lack of published security policies slightly reduce trustworthiness. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, positioning the company as a credible small business in its niche.

L

Locus Map - mobile outdoor navigation app

locusmap.app

50

Locus Map is a well-established mobile outdoor navigation app targeting outdoor enthusiasts engaged in hiking, cycling, geocaching, sailing, flying, and other sports activities. The company offers a multi-functional app with offline and online maps, route planning, track recording, and integration with wearable devices. The website reflects a mature digital presence with comprehensive content, active community engagement, and multiple map provider partnerships. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. Security posture is strong with HTTPS, security headers, and consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain registration is consistent with the business claims, enhancing trustworthiness.

T

Tatrzańskie Ochotnicze Pogotowie Ratunkowe

topr.pl

37

Tatrzańskie Ochotnicze Pogotowie Ratunkowe (TOPR) is a well-established mountain rescue organization operating primarily in the Tatra Mountains region of Poland. The website serves as an official portal providing critical safety information, emergency contact details, avalanche warnings, and weather updates to tourists, hikers, and residents. The organization is government-supported and operates as a non-profit entity, with clear disclosures of public funding and operational mandates. The site is professionally designed with consistent branding and clear navigation, targeting a general audience interested in mountain safety and rescue services. Technically, the website is built on WordPress CMS, leveraging modern frontend technologies such as Bootstrap 5, jQuery, and Swiper.js for interactive elements. Hosting is provided by cyber_Folks S.A., and the site enforces HTTPS with good SSL configuration. While performance is moderate and mobile optimization is good, there is room for improvement in accessibility and security headers implementation. The site uses Google Analytics for user tracking at a moderate level but lacks a cookie consent mechanism, which is a privacy compliance gap. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a formal security policy or incident response contact reduces the overall security posture. The WHOIS data aligns well with the business history, showing a domain age consistent with the organization's longevity and no suspicious registration patterns. Overall, the site is trustworthy and credible but could enhance compliance and security practices. The risk assessment indicates a low risk environment with no critical issues detected. Strategic recommendations include implementing security headers, adding a cookie consent banner, publishing a security policy, and conducting regular security audits to maintain and improve the security posture and privacy compliance.

F

Familienwerk Sölden e.V.

dorfhelferinnenwerk.de

49

Familienwerk Sölden e.V. is a German non-profit organization specializing in family care services, ensuring families receive support during temporary absences. The website presents a professional image with clear descriptions of services such as Familienpflege and Dorfhilfe, targeting families in southern Germany. The organization positions itself as a regional specialist with a focus on compassionate and professional care. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and caching for performance. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the site is trustworthy and well-structured, though cookie consent mechanisms and explicit privacy compliance features could be enhanced.

D

Dikoju

dikoju.de

49

Dikoju is a German research project focused on advancing digital competencies within child and youth welfare services. It is a collaborative initiative between the Arbeitsgemeinschaft für Kinder- und Jugendhilfe (AGJ) and the University of Cologne, funded by the German Federal Ministry of Education and Research. The project conducts empirical studies and develops qualification modules to support professionals in the digital transformation of social services. The website reflects a professional and well-structured digital presence with clear information about the project, partners, advisory board, and funding sources. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, ensuring good SEO and user interaction capabilities. The site is hosted on German servers and employs HTTPS with strong SSL configuration, contributing to a secure user experience. Mobile optimization and accessibility are well addressed, although some security headers are missing, which could be improved. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Privacy compliance is adequate with a privacy and cookie policy present, though no explicit cookie consent mechanism is detected. Overall, Dikoju presents a trustworthy and professional online presence suitable for its research and educational mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and implementing cookie consent mechanisms to improve compliance and user trust.

J

Jugend- und Familienministerkonferenz der Länder (JFMK)

jfmk.de

48

The Jugend- und Familienministerkonferenz der Länder (JFMK) website serves as the official online presence for the German governmental conference focused on youth and family policy coordination across federal states. The site provides information about the conference's mission, leadership, and activities, targeting government officials, policy makers, and families in Germany. The website is professionally designed with consistent branding and clear navigation, supporting its role as a trusted governmental resource. Technically, the site is built on WordPress using the Avada theme and several plugins including LayerSlider, Ultimate Member, Borlabs Cookie, and Yoast SEO. It is hosted with domaincontrol.com nameservers, likely GoDaddy, and uses HTTPS with good SSL configuration. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are not explicitly detected. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. No exposed sensitive data or vulnerabilities were found in the analyzed content. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which could be improved to enhance trust and security posture. Overall, the website is a secure, professional, and trustworthy governmental platform with good privacy compliance. Strategic recommendations include adding security headers, publishing security and incident response policies, and implementing a vulnerability disclosure process to further strengthen security and compliance.

T

Tag der Medienkompetenz

tag-der-medienkompetenz.de

45

The website 'Tag der Medienkompetenz' serves as the official platform for a biennial media literacy event held in Niedersachsen, Germany. It is supported by regional governmental institutions and targets educators and media professionals. The site provides detailed event information, workshops, and networking opportunities, reflecting a well-established presence since 2009. Technically, the site is built on WordPress with the Divi theme and includes modern plugins for SEO and cookie management, ensuring a good user experience and compliance with privacy regulations. Security posture is adequate with HTTPS and cookie consent but could be improved with additional security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and well-aligned with its educational mission.

B

bricks

ckpbrno.cz

40

Centrum kardiovaskulární péče (ckpbrno.cz) is a specialized healthcare provider based in the Czech Republic, focusing on cardiovascular care and related medical services. The website offers comprehensive information about their ambulatory and hospitalization services, including cardiology, arrhythmology, and rehabilitation. Their target audience includes patients requiring cardiovascular care and medical professionals seeking consultation or collaboration. The business operates on a small scale with a clear regional focus and was established in 2019. Technically, the website is built on WordPress using the Bricks theme and several plugins such as Complianz for GDPR compliance and Automatic CSS for styling. The site is well-optimized for SEO with proper metadata, Open Graph tags, and structured data. Mobile optimization and user experience are good, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent mechanisms aligned with GDPR. However, no explicit security headers were detected, and there is no visible security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration is consistent and legitimate, supporting the trustworthiness of the site. Overall, the website presents a professional and trustworthy digital presence for a healthcare provider. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen the security posture and user trust.

T

TV Plus Productions

tv-plus.de

53

TV Plus Productions is a German media production company specializing in TV content creation. The website is professionally designed using WordPress and Elementor, targeting German-speaking audiences interested in media and TV production services. The technical infrastructure is modern and leverages popular CMS and page builder technologies, ensuring good mobile optimization and user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies such as privacy and cookie policies. No contact information or incident response details are present, which limits transparency and trust. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

R

Radio38 GmbH & Co. KG

radio38.de

51

Radio38 GmbH & Co. KG operates a regional radio station serving the Braunschweig and Wolfsburg areas in Germany, providing local news, music, and community information. The website is professionally designed, mobile-optimized, and integrates multiple advertising and analytics technologies, including Google Tag Manager and Snowplow Analytics. GDPR compliance is well implemented with a comprehensive privacy policy and cookie consent mechanism. The business model is primarily advertising-supported regional broadcasting with digital streaming capabilities. Security posture is solid with HTTPS enforced and some security best practices observed, though additional security headers could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a legitimate and professional regional media company with good digital maturity.

W

WEYKUP! Künstleragentur - Künstlervermittlung für Bands, Musiker & DJ's

weykup.com

61

WEYKUP! Künstleragentur is a German-based artist booking and management agency with over 20 years of experience in the music business. The company specializes in booking musicians, bands, and DJs, offering services including event consulting, social media management, and networking within the German music scene. Their market position is that of a specialized boutique agency with a strong focus on quality and personalized service. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern plugins and good performance and mobile optimization. Security posture is adequate with HTTPS and cookie consent management, but lacks explicit security headers and published privacy or security policies. Overall, the website is professional and trustworthy, though it would benefit from enhanced privacy compliance and clearer contact information.

V

vomfeinsten Catering & Service GmbH

vomfeinstencatering.de

40

vomfeinsten Catering & Service GmbH is a medium-sized German catering company specializing in event, business, junior, and trade fair catering services. The company operates multiple locations in Germany and targets businesses and event organizers seeking high-quality, flexible catering solutions. Their website reflects a professional and consistent brand image with clear service offerings and contact channels. Technically, the site is built on WordPress using the Enfold theme and integrates modern tools such as Google Analytics with privacy considerations like IP anonymization. The hosting appears to be managed by a German provider, supporting regional compliance and performance needs. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

V

Vintage Foto Bulli

vintagefotobulli.de

59

Vintage Foto Bulli is a specialized event service provider based in Germany, offering vintage VW Bulli photobooth rentals primarily for weddings, corporate events, roadshows, and trade shows. Established in 2015 and operated by ad.letics GmbH, the company holds a niche market position with official Volkswagen licensing and a strong presence in Köln, Hamburg, and München. The website reflects a professional brand image with comprehensive service descriptions, customer testimonials, and active social media engagement. Technically, the site is built on WordPress using modern plugins and analytics tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response information. Overall, the site is trustworthy, compliant with GDPR, and well-positioned for its target audience.

N

Nicezeit - Lindener Eiskonzept - Eisdiele Hannover

nicezeit.com

47

Nicezeit is a small artisanal ice cream business based in Hannover, Germany, specializing in handmade, natural, and dye-free ice cream produced since 2019. The company operates two physical retail locations and offers event catering services with specialized ice cream vehicles and stands. Their business model focuses on premium quality, regional ingredients, and unique flavor creations, targeting local consumers and event clients. The website is professionally designed using WordPress, integrating SEO and social media plugins, and provides clear business and contact information. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website and domain registration data support a trustworthy and legitimate business presence.

N

NEXT LEVEL SOLUTIONS

next-level-solutions.eu

51

NEXT LEVEL SOLUTIONS is a premium transportation and chauffeur service provider based in Germany, offering tailored VIP chauffeur, shuttle, valet, vehicle transfer, and event transport services across Europe. The company targets exclusive clientele including business and private customers, emphasizing excellence and comfort. Their website reflects a professional and consistent brand image with detailed service descriptions and team member profiles. Technically, the site is built on WordPress with modern plugins and frameworks, including Matomo for privacy-conscious analytics and Borlabs Cookie for GDPR-compliant consent management. Security posture is good with HTTPS enforced and no exposed sensitive data, though additional security headers and explicit security policies could enhance protection. The absence of public WHOIS data is due to EURid privacy policies common for .eu domains, and the website content supports legitimacy. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, making it a trustworthy digital presence for the business.

G

Gilde Brauerei

gilde-brauerei.com

52

Gilde Brauerei is a historic brewery based in Hannover, Germany, with a rich tradition dating back to 1546. The company produces a range of beers and operates brewery gastronomy, tours, and an online fan shop. The website is built on WordPress with modern plugins for SEO and cookie consent, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and documented security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the website reflects a professional and trustworthy business with room for improvement in privacy and security transparency.

C

Circus-Theater Roncalli

roncalli.de

67

Circus-Theater Roncalli is a German-based entertainment company specializing in circus theater performances, combining artistry, clowning, and live music. The website serves as a platform for ticket sales and tour information, targeting a general audience interested in cultural and live entertainment. The business appears established with a medium-sized presence in the hospitality sector. Technically, the website is built on WordPress with modern SEO and consent management tools, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized and provides a good user experience with clear branding and consistent content. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the website is trustworthy and professional but would benefit from publishing explicit privacy and terms of service pages and providing direct contact information for enhanced credibility and compliance.

B

bob6 - Das neue Eventmanagement Tool

bob6.de

65

bob6.de is a German website offering an event management software solution focused on participant management. The site promotes ease of use and provides a demo for prospective users. The business appears to be a small technology company targeting event organizers and managers. Technically, the website is built on WordPress using the Divi theme and employs Yoast SEO for search engine optimization. The site is accessible, mobile-optimized, and uses HTTPS, indicating a baseline level of technical maturity. However, the absence of privacy and cookie policies, lack of contact information, and minimal WHOIS data reduce the overall trust and compliance posture. Security headers are not detected, and no incident response or vulnerability disclosure information is provided, suggesting room for improvement in security practices. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures.

A

agent.ally

agent-ally.de

62

agent.ally is a small, specialized digital agency based in Hildesheim, Germany, offering tailored IT support, software development, web design, and marketing services with a strong focus on social media. The company emphasizes personal and flexible client engagement, combining expertise in IT, design, and marketing to deliver user-centric digital experiences that enhance brand positioning and customer engagement. Technically, the website is built on WordPress with modern plugins and libraries, demonstrating good digital maturity and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Sat.1 Norddeutschland GmbH

sat1regional.de

59

SAT.1 REGIONAL is a regional news media company providing news and video content focused on Northern Germany, including Hamburg, Schleswig-Holstein, Niedersachsen, and Bremen. It operates under the parent company ProSiebenSat.1 Media SE and targets residents interested in local news and events. The website offers livestreams, newsticker updates, and categorized news content, serving as a trusted regional media outlet. Technically, the site is built on WordPress with modern SEO and cookie consent plugins, hosted on Amazon AWS infrastructure, and optimized for mobile users. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-maintained, with no signs of blocking or malicious content.

P

Patronite Sklep

patronite-sklep.pl

53

Patronite Sklep is a Polish e-commerce platform specializing in selling merchandise and products related to popular content creators and authors. The website offers a variety of branded items such as clothing, mugs, and accessories, targeting fans and supporters of these creators. The business operates on a WooCommerce platform integrated with WordPress, leveraging modern web technologies and SEO tools to enhance user experience and visibility. The domain is relatively new, registered in 2022, aligning with the business's apparent startup phase. Social media integration with Facebook and Instagram supports community engagement and marketing efforts. Technically, the site is well-structured with responsive design and moderate performance, although some security best practices like DNSSEC and security headers are missing. Privacy compliance is partially addressed through a cookie consent mechanism, but lacks a publicly accessible privacy policy or terms of service. Overall, the site presents a professional and trustworthy e-commerce presence with room for improvement in security and compliance documentation.

D

DALU, s.r.o.

dalu.cz

54

DALU, s.r.o. is a Czech renewable energy company established in 2008, specializing in the design, installation, and servicing of photovoltaic and wind power plants for both businesses and households. The company positions itself as a stable and reliable provider in the Czech energy market, emphasizing quality, sustainability, and innovation. Their service portfolio includes comprehensive energy solutions, consulting, system monitoring, and recycling of solar panels. The website reflects a professional digital presence built on WordPress with the Divi theme, featuring clear branding and user-friendly navigation. Contact information is readily available, and GDPR compliance is addressed through dedicated policy pages and consent mechanisms. However, some security best practices such as security headers and incident response policies are not explicitly presented.

E

EXTÉRIA FRANCHISING s.r.o.

exteriamarket.cz

48

EXTÉRIA FRANCHISING s.r.o. operates a unique franchising concept in the Czech Republic specializing in occupational safety (BOZP) and fire protection (PO). The company offers franchise licenses, business growth methodologies, and technical implementation support, targeting entrepreneurs and business managers seeking to establish or grow their BOZP-related businesses. The website is professionally designed, mobile-optimized, and rich in multimedia content including video interviews and testimonials, reinforcing its market position as a leading BOZP franchise in the region. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and Kadence Blocks. It integrates Google Analytics, Google Tag Manager, Facebook Pixel, and Google reCAPTCHA for analytics, marketing, and security purposes. The site employs HTTPS with a strong SSL configuration and includes a comprehensive cookie consent mechanism, reflecting good privacy compliance practices. From a security perspective, the site uses HTTPS and reCAPTCHA to protect forms but lacks explicit security headers in the provided data. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain reduces trustworthiness from a domain registration standpoint, though the website content and business information appear legitimate and professional. Overall, the website presents a low risk with strong business credibility and privacy compliance. Strategic improvements in security headers and domain registration transparency would further enhance trust and security posture.

Press-media.cz is a Czech-language online media platform established in 2015, focusing on lifestyle, housing, finance, women's topics, advice, and news. The site operates on WordPress with a modern tech stack including popular plugins for SEO and content management. The website presents a professional design with good navigation and mobile optimization, targeting a general Czech-speaking audience interested in lifestyle and news content. Security posture is adequate with HTTPS enabled and secure login forms, but lacks advanced security headers and visible privacy or cookie policies. No contact emails or phone numbers are provided, which may impact user trust and compliance. Overall, the site is legitimate and stable with room for improvement in privacy compliance and security best practices.

N

Nest Agency

nestagency.cz

55

Nest Agency is a creative agency based in Ostrava, Czech Republic, specializing in content creation including video, photography, graphic design, and web development for brands aiming to grow and engage their customers. The website presents a professional and modern digital presence built on WordPress with SEO and page builder plugins, showcasing a portfolio of projects and social media integration. The technical infrastructure is standard for a small creative agency, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain trust assessment but the website content and branding suggest a legitimate business. Overall, the site is safe, professional, and targeted at business clients in the media and marketing sector.

S

Stowarzyszenie „Polskie Miasta Cittaslow”

cittaslowpolska.pl

50

The website cittaslowpolska.pl represents the Polish association of the international Cittaslow network, a non-profit organization dedicated to promoting sustainable development and quality of life in small towns across Poland. The site provides information about the association's mission, member towns, events, and cultural initiatives. It targets local communities, cultural advocates, and environmental supporters, positioning itself as a niche non-profit with a clear focus on small-town development and cultural preservation. The business model revolves around community engagement, promotion, and support rather than commercial activities. Technically, the website is built on WordPress using modern frameworks such as UIkit and jQuery, enhanced with SEO tools like Yoast SEO and accessibility features including the UserWay widget. The site is mobile-optimized, has good navigation clarity, and employs cookie consent mechanisms. Performance is moderate, with no critical technical issues detected. The presence of Google Tag Manager indicates moderate user tracking for analytics purposes. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data shows a long-standing domain registration without privacy protection, consistent with the organization's legitimacy. However, improvements in security headers and formal security documentation are recommended. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. It demonstrates good content quality and technical implementation but could enhance its security posture and privacy compliance documentation to further strengthen trust and resilience.

A

Aiphone

aiphone.com

63

Aiphone is a globally recognized leader in intercom and access control systems, providing a wide range of IP video intercoms, audio intercoms, and cloud-based solutions. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting security professionals and property managers across various industries including commercial real estate, education, and healthcare. The company leverages modern web technologies such as WordPress CMS, Yoast SEO, and advanced JavaScript libraries to deliver a responsive and SEO-optimized experience. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and integrates Google reCAPTCHA for bot protection, indicating a solid security posture. However, the absence of WHOIS registration details introduces some uncertainty about domain registration transparency. Overall, the website is trustworthy, professional, and well-maintained, supporting Aiphone's market position as a technology leader in security communication solutions.

F

fragFINN e.V.

fragfinn.de

64

fragFINN e.V. operates a German-language child-friendly search engine and educational platform targeting children up to 12 years old. The website offers curated, media pedagogue-reviewed content including tips, quizzes, videos, audio, and games designed to provide a safe and educational online environment for children. The organization positions itself as a non-profit entity focused on child safety and education in the digital space. Technically, the website is built on WordPress with common plugins such as Yoast SEO and WPBakery Page Builder, leveraging Matomo analytics with cookies disabled to respect user privacy. The site is hosted on servers associated with internet1.de and uses HTTPS with a good SSL configuration. The site is mobile-optimized, accessible, and SEO-friendly, providing a high-quality user experience. From a security perspective, the site employs HTTPS and disables cookies in analytics, but lacks explicit security headers and does not provide visible privacy or cookie policies on the homepage. There is no public vulnerability disclosure or incident response information. WHOIS data is consistent and indicates a legitimate domain registration dating back to 2016, appropriate for the organization's history. Overall, fragFINN.de is a trustworthy, well-maintained educational platform with a strong focus on child safety and content quality. However, it would benefit from publishing explicit privacy and cookie policies, implementing security headers, and providing clear incident response contacts to enhance compliance and security posture.

T

TokoMoo

tokomoo.com

56

TokoMoo is a small technology business specializing in premium Elementor template kits and WordPress themes, targeting web designers and small to medium businesses seeking professional website templates. The website is built on WordPress with Elementor and uses Cloudflare DNS services. It employs SEO best practices with the Rank Math plugin and includes structured data for organization and author information, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, which are compliance gaps. Overall, the website is professional and trustworthy but could improve privacy compliance and security hardening.

A

CVCA & SLOVCA AWARDS 2023 – CVCA & SLOVCA Awards 2023

awards2023.eu

54

The website www.awards2023.eu represents the CVCA & SLOVCA Awards 2023, an event likely focused on recognizing achievements in the venture capital and private equity sectors within the Czech and Slovak regions. The site provides information about the awards, nominees, and event details, targeting professionals and organizations in these industries. The business model centers on event organization and promotion, with a small-scale digital presence. Technically, the website is built on WordPress using popular plugins such as Elementor for page building and Yoast SEO for search engine optimization. The site loads Google Fonts and uses FooGallery for image galleries. The performance and mobile optimization are moderate to good, but accessibility features are basic. No advanced frameworks or hosting details are evident from the content. From a security perspective, the site uses HTTPS (implied by resource loading over HTTPS), but no explicit security headers were detected in the provided content. There is no visible privacy policy, cookie consent mechanism, or contact information for security or incident response, which are areas for improvement. The WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious patterns were found. Overall, the website is functional and professional for its purpose but lacks comprehensive privacy, security, and contact transparency. Strategic improvements in these areas would enhance trust and compliance.

C

CVCA

awards2024.eu

48

The website www.awards2024.eu represents the CVCA & SLOVCA Awards 2024, an initiative jointly organized by CVCA and SLOVCA to promote and support the venture capital and private equity sectors. The site targets industry professionals and stakeholders interested in these awards and the broader finance sector. The business model centers on organizing and publicizing industry awards, positioning itself as a niche player within the Czech and Slovak venture capital ecosystem. Technically, the website is built on WordPress using the GeneratePress theme and Elementor page builder, with SEO enhancements via Yoast SEO. It employs modern web technologies including Google Fonts, jQuery, and FooBox for image lightbox functionality. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and uses standard WordPress security practices but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a cookie consent mechanism, but no clear privacy policy or terms of service pages were found. Overall, the website is professional and trustworthy with a good business credibility score. However, improvements in privacy policy transparency, security header implementation, and contact information disclosure would enhance its security posture and compliance standing.

C

CVCA Slovca Awards 2025

awards2025.eu

52

The CVCA Slovca Awards 2025 website serves as the official platform for the joint awards organized by the Slovak Venture Capital & Private Equity Association (SLOVCA) and the Czech Private Equity & Venture Capital Association (CVCA). The site provides detailed information about the awards, finalists, categories, and event timelines, targeting professionals and stakeholders in the private equity and venture capital sectors in Slovakia and the Czech Republic. The website is well-structured, professionally designed, and optimized for SEO and GDPR compliance, reflecting a mature digital presence for a regional industry event. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Elementor, Slider Revolution, and Complianz GDPR, indicating a modern and maintainable infrastructure. The site employs HTTPS with good SSL configuration and includes cookie consent mechanisms, demonstrating attention to privacy and security standards. However, some security headers are missing, and no explicit security or incident response policies are publicly available. From a security perspective, the site shows a good posture with no evident vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection is typical for such event sites and does not raise immediate concerns. The site lacks a vulnerability disclosure policy and security.txt file, which could enhance trust and transparency. Overall, the website presents a professional and trustworthy front for the CVCA Slovca Awards, with solid technical and privacy compliance foundations. Strategic improvements in security headers, incident response transparency, and accessibility could further strengthen its security posture and user trust.

P

Pixelgrade

pixelgrade.com

59

Pixelgrade is a specialized company focused on delivering premium WordPress themes tailored for creative professionals such as designers, photographers, and agencies. Established in 2010, the company has positioned itself as a niche leader in the creative WordPress theme market, offering high-quality, customizable themes with dedicated customer support. Their website reflects a strong brand identity and professional design, targeting a global audience of creatives seeking elegant and functional website solutions. Technically, Pixelgrade's website is built on WordPress with Elementor as a key framework, leveraging modern web technologies including HTML5, CSS3, and JavaScript. The site is hosted with Cloudflare providing DNS and CDN services, ensuring fast load times and good performance. Mobile optimization and accessibility are well addressed, contributing to an excellent user experience. SEO best practices are implemented with proper meta tags and structured data. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes essential security headers. The domain registration is transparent and consistent with the business profile, with no privacy protection masking ownership. While no explicit security policy or incident response information is published, the site follows good security hygiene. No vulnerabilities or suspicious activities were detected. Overall, Pixelgrade presents a low-risk profile with a mature digital presence, strong business credibility, and good privacy compliance. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy, and adding a security.txt file to enhance transparency and vulnerability management.

V

Volkshochschule Kaiserslautern e.V.

kochklasse-kaiserslautern.de

44

Kochklasse Kaiserslautern is a cooking school operated under the Volkshochschule Kaiserslautern e.V., offering a variety of culinary education services including in-person and online cooking courses, workshops on food and drink culture, and event-based cooking experiences. The website is professionally designed using WordPress and targets a general audience interested in culinary arts and cooking education within the Kaiserslautern region. Technically, the site uses standard WordPress technologies with jQuery and Modernizr, hosted on servers associated with rzone.de. The site is mobile-optimized and provides clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and serves its educational purpose effectively.

The website www.grafik-design-weibel.de currently displays a critical WordPress error page, indicating that the site is non-functional and inaccessible to users. Due to this, no business description, contact information, or service details are available. The domain is registered with GoDaddy's nameservers, suggesting legitimate registration, but the lack of accessible content severely limits the ability to assess the company's market position or offerings. Technically, the site uses WordPress CMS but suffers from a critical failure that must be resolved to restore functionality. Security posture is weak as no security headers or HTTPS status could be verified, and no privacy or cookie policies are present, indicating non-compliance with GDPR and other regulations. Overall, the site is currently not operational, posing a significant risk to business credibility and user trust.

M

Ministerium für Klimaschutz, Umwelt, Energie und Mobilität Rheinland-Pfalz

aktion-gruen.de

54

Aktion Grün is a government-backed environmental initiative by the Ministry for Climate Protection, Environment, Energy and Mobility of Rheinland-Pfalz, Germany. The website serves as a platform to promote biodiversity conservation, species protection projects, and public engagement across the region. It targets local citizens, municipalities, farmers, and educational institutions to participate in environmental protection efforts. The site is well-branded with official government logos and provides comprehensive information about projects, funding, and participation opportunities. Technically, the website is built on WordPress using the Yoast SEO plugin and Bootstrap framework, ensuring good SEO and mobile responsiveness. It integrates Google Maps for project visualization and uses modern web technologies. Performance is moderate with good accessibility features. However, some security best practices like security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS and secure forms but lacks explicit security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with a legitimate German government entity. Overall, the site demonstrates a solid security posture with room for improvement in privacy compliance and security transparency. The overall risk is low given the nature of the site and its government affiliation. Strategic recommendations include implementing cookie consent, adding security headers, and publishing a security.txt file to enhance trust and compliance.

Klett Vertrieb operates as a service and distribution portal for multiple Klett publishing brands, targeting the German book retail sector. The website provides current information, catalogs, and contact points primarily for book retailers and partners. The business model centers on representing Klett Verlag im Handel and facilitating orders and deliveries through the SVK GmbH logistics partner. Technically, the site is built on WordPress with common libraries such as jQuery and Bootstrap, offering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response details are lacking. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism present. Overall, the site is professional and trustworthy but could improve in transparency and security communication.

G

GLOBAL TRADE TECHNOLOGY s.r.o.

pronajemnamiru.cz

34

Pronájem na míru is a Czech Republic-based real estate rental service specializing in high-standard furnished apartments across major cities such as Prague and Ostrava. The website presents a professional and well-structured platform for users to browse and filter rental properties, targeting individuals seeking premium rental accommodations. The business is operated by GLOBAL TRADE TECHNOLOGY s.r.o., as indicated in the website footer and WHOIS data, although the domain registration date appears suspiciously set in the future, which warrants further verification. Technically, the website is built on WordPress using Bootstrap 4 and several plugins including Smart Slider 3. It employs modern web technologies such as jQuery and Google Fonts, and integrates Google Maps API for location services. The site is mobile optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate with no major issues detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, indicating potential GDPR compliance gaps. No incident response or vulnerability disclosure mechanisms are found. The site does not appear to use analytics or tracking services beyond standard WordPress scripts, suggesting minimal user tracking. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and verification of domain registration data to strengthen trustworthiness and security posture.

Sascha Rösner's website is a German-language personal blog focused on nature, photography, and ecological topics. The site serves a niche audience interested in environmental and wildlife content, with a small-scale business model centered on content publishing and photography. The website is built on WordPress, leveraging multiple plugins for SEO, galleries, and popups, hosted by SchlundTech in Germany. The technical infrastructure is modern and mobile-optimized, with good SEO practices and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal incident response mechanisms. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Contact is primarily via a contact form, with no explicit emails or phone numbers published. Overall, the site is trustworthy and professional, with no signs of suspicious or adult content.

Slezsko Ostravské Rezidence operates as a small real estate rental business focused on providing affordable, quality residential apartments in the Slezská Ostrava region of the Czech Republic. The website presents a professional and clear overview of their rental offerings, emphasizing security, comfort, and proximity to the city center. Their business model centers on leasing residential apartments with no hidden fees, targeting residents seeking calm and well-maintained living spaces. Technically, the website is built on WordPress using Elementor and JetEngine plugins, with modern features like Google reCAPTCHA v3 for form security and Google Analytics for visitor tracking. The site is hosted by Websupport, a Czech hosting provider, and uses HTTPS with a valid SSL certificate, ensuring secure communications. Security posture is good but could be improved by adding security headers and publishing formal security policies. Privacy compliance is lacking due to the absence of privacy and cookie policies, which is a notable gap given GDPR requirements. Contact information is clearly provided, including phone, email, and a contact form, supporting business credibility. Overall, the website is functional, secure, and professional but would benefit from enhanced privacy compliance and security best practices.

A

AM PNEU s.r.o.

ampneu.cz

46

AM PNEU s.r.o. is a small, family-run business operating in the Czech Republic, specializing in supplying tires and related services to tire service providers (pneuservisy). The company emphasizes supporting its clients with premium and mid-range tire brands such as Lassa and Sailun, both certified by TÜV, and offers additional benefits like warranty extensions, bonus programs, and marketing support. The website is built on a modern WordPress platform using Elementor and includes GDPR-compliant cookie consent mechanisms. The technical infrastructure is robust with fast performance and good mobile optimization. Security posture is solid with HTTPS and privacy compliance, though there is room for improvement in security headers and incident response transparency. Overall, the website presents a professional and trustworthy image aligned with the company's business goals.

P

Penzion Závada

penzionzavada.cz

47

Penzion Závada is a small hospitality business offering stylish and discreet accommodation near Opava, Czech Republic. The website presents the business professionally with clear contact information, reservation forms, and detailed descriptions of rooms, surroundings, and amenities. The business targets tourists and visitors seeking quality lodging and leisure activities such as golf. Technically, the website is built on WordPress with Elementor and uses modern plugins for SEO, GDPR compliance, and video embedding. Security posture is good with HTTPS and cookie consent mechanisms, though security headers could be enhanced. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the apparent professionalism of the site. Overall, the website is well-structured, user-friendly, and compliant with privacy regulations.

V

Výkup starožitností

vykupstarozitnosti.eu

41

Výkup starožitností is a Czech Republic based small family-owned antique dealer with over 30 years of experience. The company offers direct purchase of antiques, paintings, furniture, porcelain, and coins, as well as auction consignments and appraisal services. The website is professionally designed using WordPress and Elementor, providing clear navigation and relevant content targeted at individuals and collectors within the Czech Republic. Contact information including phone, email, and physical addresses are clearly presented, enhancing business credibility. Privacy and cookie policies are implemented with GDPR compliance. The site uses Google Analytics and Sklik for marketing and retargeting purposes. Hosting is provided by a reputable Czech provider, WEDOS Internet, a.s., consistent with the business location and language.

O

OderskýMed

oderskymed.cz

54

OderskýMed is a small family-owned beekeeping business based in the Czech Republic, specializing in the production and direct sale of high-quality natural honey products including floral and forest honey, mead, and propolis. The company emphasizes bio-quality and local production, sourcing from the Oderské vrchy natural park. Their website is built on WordPress using Elementor and Rank Math SEO, providing a professional and user-friendly experience with clear product information and contact details. Technically, the site uses HTTPS with valid SSL certificates and includes Google reCAPTCHA for form security, but lacks some security headers and formal privacy or cookie policies, which are compliance gaps. Overall, the business presents a trustworthy and authentic profile with a focus on natural, additive-free products.