Security Directory

T

Technické služby města Nového Jičína

tsnj.cz

61

Technické služby města Nového Jičína is a municipal service organization providing essential public services such as maintenance of local roads, public lighting, waste management, green area upkeep, and cemetery administration primarily for the city of Nový Jičín and its surroundings. Established in 2006, it operates as a contributory organization serving both citizens and local businesses. The website reflects a well-structured digital presence with clear service descriptions and multiple contact channels, targeting local residents and public entities. The company maintains a consistent brand identity and provides relevant certifications and legal documents to enhance trust.

K

Knihovna

knihovnanj.cz

52

The website www.knihovnanj.cz is the official online presence of a Czech public library, providing information and services to the general public. It is positioned as a regional government-operated library, offering library services, information access, and public events. The site uses WordPress CMS with common plugins for cookie consent and analytics, reflecting a moderate level of digital maturity. Technically, the site employs HTTPS with good security headers and integrates Google Analytics and Meta Pixel for user behavior tracking and marketing purposes. The security posture is solid with no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, with a clear cookie consent mechanism and privacy policy hosted on a related domain. The lack of public WHOIS data is consistent with privacy protection practices and does not detract from the site's legitimacy.

M

Městské kulturní středisko Nový Jičín

mksnj.cz

50

Městské kulturní středisko Nový Jičín is a municipal cultural center serving the Nový Jičín region in the Czech Republic. The website acts as the official portal for cultural events, venue rentals, and community programs, targeting local residents and visitors interested in cultural activities. The institution holds a stable market position as a government-operated cultural entity, providing essential cultural services to the community. Technically, the website is built on WordPress with integration of modern analytics and marketing tools such as Google Analytics and Meta Pixel, ensuring good digital maturity and user engagement tracking. The site is well-optimized for mobile devices and follows standard SEO and accessibility practices, though accessibility could be improved further. Security-wise, the site enforces HTTPS, employs standard security headers, and uses a comprehensive cookie consent mechanism compliant with GDPR. However, it lacks a publicly available security policy and incident response information, which are recommended for enhanced transparency and preparedness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security documentation and accessibility.

B

Beskydské divadlo Nový Jičín, příspěvková organizace

beskydskedivadlo.cz

62

Beskydské divadlo Nový Jičín is a regional cultural institution in the Czech Republic specializing in theatrical performances, including operas, operettas, and experimental projects. Founded in 2014, it operates as a contributory organization offering a variety of services such as ticket sales, subscriptions, venue rentals, educational programs, and podcasts. The website reflects a well-structured and professionally maintained digital presence with clear branding and consistent content quality aimed at a general audience interested in cultural events. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Knockout.js, and integrates Google services such as Analytics, Tag Manager, and reCAPTCHA for security and tracking. The CMS appears to be Umbraco, supporting dynamic content and form submissions. The site is mobile-optimized and incorporates accessibility and SEO best practices, although some improvements in accessibility could be made. From a security perspective, the site uses HTTPS with good SSL configuration and integrates reCAPTCHA to protect forms from abuse. Cookie consent mechanisms are comprehensive and GDPR compliant, with granular user control over tracking preferences. However, some security headers are not explicitly detected and could be enhanced. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website demonstrates a strong security posture, good privacy compliance, and a credible business presence. It serves its audience effectively with relevant content and clear contact information. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and publishing a formal security policy to further strengthen trust and compliance.

P

ProSenior | Nový Jičín

psnj.cz

44

ProSenior | Nový Jičín is a Czech non-profit organization focused on providing senior care and social support services including home care, day care, and respite care. The organization serves the local community of Nový Jičín, targeting seniors and their caregivers with personalized and community-oriented services. The website reflects a well-established entity with a domain age since 2010, consistent with its operational history. Technically, the site is built on WordPress, leveraging modern web technologies and third-party integrations such as Google Analytics and social media platforms, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear GDPR policies and cookie declarations. Overall, the site is professional, trustworthy, and well-aligned with its business mission.

A

Aquapark Rakovník

aquaprak.cz

60

Aquapark Rakovník is a family-oriented leisure and hospitality business based in the Czech Republic, offering aquapark facilities, swimming pools, saunas, swimming school, and gymnasiums. The website is well-structured and provides clear information about services, opening hours, and contact details, targeting local families and visitors. The business appears to be small-sized and founded around 2019, consistent with the domain registration data. Technically, the website uses modern JavaScript libraries and the Nette framework, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are absent. Privacy compliance is supported by GDPR and cookie policy pages. Overall, the site is trustworthy and professionally maintained with no critical security or content safety issues detected.

K

Kulturní centrum Rakovník

kulturnicentrum.cz

47

Kulturní centrum Rakovník is a local cultural institution in the Czech Republic focused on organizing and hosting cultural events including theater performances, cinema screenings, and concerts. The website serves as an official portal providing event calendars, ticket sales links, and contact information for the community and visitors. The site is well-structured with good mobile optimization and accessibility features, reflecting a moderate level of digital maturity. The technical stack includes common libraries such as jQuery, Bootstrap, and Swiper.js, indicating a standard but effective implementation. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and a privacy policy page are notable gaps. The WHOIS data is missing, which reduces domain trustworthiness, but the presence of official contact details and social media presence supports legitimacy. Overall, the website is functional and professional but would benefit from enhanced security and privacy compliance measures.

M

Městské informační centrum Rakovník

infocentrum-rakovnik.cz

49

Městské informační centrum Rakovník operates as the official municipal information center for the city of Rakovník, Czech Republic. The website serves residents and tourists by providing comprehensive information about local events, cultural heritage, services, and tourism opportunities. The site is well-structured with clear navigation and multilingual support, reflecting a focus on accessibility and user experience. The business model is public service-oriented, emphasizing community engagement and tourism promotion.

O

Organizace pro pomoc uprchlíkům

opu.cz

44

Organizace pro pomoc uprchlíkům (OPU) is a Czech non-profit organization dedicated to assisting refugees and migrants who have lost their homeland. The organization provides social, legal, and psychological support to clients, operates educational programs and awareness campaigns, and engages volunteers to support its mission. The website reflects a well-established entity with a clear focus on humanitarian aid and community education within the Czech Republic. The presence of partner logos and active social media channels further supports its credibility and outreach. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. The site is mobile-optimized, uses HTTPS with good SSL configuration, and integrates Google Analytics for visitor insights. However, some security headers are missing, and there is no visible cookie consent mechanism, which could be improved for better GDPR compliance. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible sensitive data exposure. The absence of WHOIS data for the domain is a concern and reduces trustworthiness, though the website content and social presence suggest legitimacy. There is no published security policy or incident response information, which could be added to enhance transparency and readiness. Overall, OPU.cz is a professional and trustworthy non-profit website with strong content and community focus. Strategic improvements in privacy compliance, security headers, and domain registration transparency would further strengthen its security posture and trustworthiness.

I

iDeal

ideal.lv

59

iDeal is a retail business specializing in Apple products and services, targeting consumers in Latvia. The website is built on the Magento e-commerce platform and integrates multiple third-party services for analytics, marketing, and customer support. The site demonstrates a good level of digital maturity with modern technologies and a comprehensive cookie consent mechanism via Cookiebot. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though some security headers are missing. Privacy compliance is partially met with cookie consent but lacks an explicit privacy policy page. Overall, the site is professional, trustworthy, and safe for general audiences.

J

Jiří Prskavec

jiriprskavec.cz

41

The website www.jiriprskavec.cz is a professionally designed personal site dedicated to Jiří Prskavec, an Olympic gold medalist in canoe slalom. It serves as a platform to showcase his biography, career achievements, photo and video galleries, and partnerships with various sponsors. The site targets fans, media, and sponsors, focusing on personal branding and promotion. Technically, the site uses modern web technologies including JavaScript libraries, Google Analytics, and social media SDKs, with a responsive design optimized for mobile devices. However, the site lacks explicit privacy and cookie policies, and no WHOIS data is available for the domain, which limits trust verification. Security headers are not detected, indicating room for improvement in security posture. Overall, the site is content-rich, trustworthy, and professionally maintained but would benefit from enhanced compliance and security measures.

M

Město Chodov

mestochodov.cz

55

Město Chodov operates an official municipal website serving the residents and visitors of the town of Chodov in the Czech Republic. The site provides comprehensive information about local government activities, social and cultural services, practical information, and contact details. The website is clearly targeted at local citizens and stakeholders interested in municipal affairs. The business model is that of a government entity providing public services and information. The site maintains a consistent brand identity with the municipal crest and official contact information prominently displayed. Technically, the website uses a modern technology stack including jQuery, Bootstrap, Swiper.js, and Mmenu.js, likely built on the Galileo CMS platform. The site is mobile-optimized, accessible, and structured with good SEO practices. Cookie consent and GDPR compliance are implemented, reflecting awareness of privacy regulations. However, no advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms but lacks visible security headers in the HTML source. No vulnerabilities or exposed sensitive data were identified in the provided content. The absence of WHOIS data reduces trust slightly, but the official nature of the site and clear contact information support legitimacy. Overall, the security posture is moderate with room for improvement in security headers and formal security policies. The overall risk assessment is low, with the site serving as a trustworthy source of municipal information. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and publishing explicit security and incident response policies to strengthen trust and compliance.

C

Clearyst°

clearyst.com

63

Clearyst° is a sustainability software and consulting company focused on delivering ESG expertise and data-driven solutions to businesses aiming to improve their sustainability performance and impact. The company offers a SaaS platform combined with advisory services targeting multiple industries including technology, manufacturing, retail, and consumer goods. Their market position is supported by professional branding, client testimonials, and partnerships with industry leaders. Technically, the website is built on Webflow with modern JavaScript libraries and analytics tools such as Google Tag Manager and LinkedIn Insight, indicating a mature digital infrastructure. However, the absence of WHOIS data and lack of explicit privacy and cookie policies highlight areas for improvement in transparency and compliance. Security posture is moderate with no detected security headers and unknown SSL configuration, though Webflow hosting suggests HTTPS is enabled. Overall, the website is professional and trustworthy in content but would benefit from enhanced privacy disclosures and domain registration transparency.

W

WomenCount

womencount.org

70

WomenCount is a mission-driven non-profit organization focused on empowering women donors to support Democratic women candidates through a curated crowdfunding platform. The website offers a user-friendly interface to find and fund candidate slates, emphasizing early and direct support without intermediaries. The organization partners with the Electing Women Alliance and other groups to amplify its impact. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience and SEO optimization. Security posture is adequate with HTTPS and domain protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is partial, lacking cookie consent mechanisms despite tracking scripts. Overall, the platform is credible, professional, and well-positioned in its niche, with a strong focus on women’s political empowerment.

I

International Brotherhood of Teamsters

teamster.org

67

The International Brotherhood of Teamsters website serves as the official online presence of one of North America's largest and most diverse labor unions. The site provides information on union campaigns, benefits, divisions, and news updates, targeting union members and the general public interested in labor issues. The organization's market position is strong, supported by a long-established domain and consistent branding. Technically, the site is built on WordPress with modern analytics and marketing tools integrated, including Google Tag Manager, Hotjar, and Facebook Pixel. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but could improve in privacy transparency and security hardening.

C

CFI Group

cfigroup.com

58

CFI Group is a well-established company specializing in customer, citizen, and employee satisfaction measurement, leveraging proprietary methodologies such as the American Customer Satisfaction Index (ACSI®). They serve both government agencies and private businesses, positioning themselves as a trusted leader with over three decades of experience. Their website reflects a professional and content-rich platform that supports their consulting and research services. Technically, the site is built on WordPress with modern plugins and uses Cloudflare DNS, providing a moderate to good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is evident with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site demonstrates high business credibility and trustworthiness.

I

Infotech

infotechinc.com

62

Infotech is a well-established technology company specializing in software solutions for the construction industry, including construction administration, inspection, secure online bidding, and paperless contracting. The company targets construction professionals and government agencies, positioning itself as a trusted provider with a domain history dating back to 1995. Their website reflects a professional B2B business model with a focus on engineering connections from bid to build. Technically, the website is built on WordPress using the Divi theme framework, hosted on Amazon AWS infrastructure. It employs modern web technologies including jQuery, Google Analytics, Microsoft Clarity, LinkedIn Insight, and HubSpot forms, indicating a mature digital marketing and analytics setup. The site is mobile optimized with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS with a good SSL configuration and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and there is a lack of visible security policies or incident response contacts. Cookie consent is implemented, but no explicit privacy policy or terms of service were found on the homepage, which is a compliance gap. Overall, the website presents a low-risk profile with high business credibility and good technical implementation. Strategic improvements include enabling DNSSEC, publishing comprehensive privacy and security policies, and adding incident response information to enhance trust and compliance.

H

Hype Kit, Inc.

pico.tools

68

Hype Kit, Inc. operates the website hype.co, providing a comprehensive marketing platform tailored primarily for gyms and small to medium businesses. Their service offering includes link-in-bio websites, lead generation tools such as QR codes and NFC tags, CRM capabilities with SMS and email messaging, and subscription payment processing. Positioned as an all-in-one marketing co-pilot, Hype aims to replace multiple marketing tools with a unified SaaS solution. The company has a solid market presence with press mentions and a clear tiered subscription model.

C

CloudEngage

cloudengage.com

58

CloudEngage is a technology company specializing in no-code website personalization and AI-powered customer self-service solutions. Their offerings include the Personalize ecosystem and AnswerDash product, targeting businesses seeking to enhance customer engagement and conversion through personalized digital experiences. The company has a solid market position with global brand clients and a mature domain established in 2011. Technically, the website is built on WordPress using Divi and Elementor, leveraging modern web technologies and hosted on AWS infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

U

Userpilot

userpilot.com

69

Userpilot is a mature SaaS company founded in 2011, specializing in product growth platforms that enable product teams to deliver personalized in-app experiences. Their market position is strong with over 1,000 companies using their solutions, which include user onboarding, product analytics, user feedback, session replay, and mobile engagement. The website reflects a professional and consistent brand with excellent content quality and user experience. Technically, the site is built on WordPress with modern tools and integrations, optimized for performance and mobile use. Security posture is good with HTTPS, domain protections, and use of security plugins, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the domain registration data supports the legitimacy and longevity of the business.

K

Kocham Koszalin - Program Karta Mieszkańca Koszalina

kochamkoszalin.pl

49

Kocham Koszalin is a community social program focused on strengthening the sense of community among residents of Koszalin, Poland, and encouraging settlement in the city. The program offers an electronic resident card system providing benefits, discounts, and access to local events, targeting both residents and local business partners. The website reflects a well-structured digital presence with clear navigation, accessibility features, and active social media engagement. Technically, the site uses modern JavaScript libraries and frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and a Content Security Policy, though additional headers and DNSSEC could enhance security further. Privacy compliance is well addressed with comprehensive cookie consent mechanisms and a detailed privacy policy. Overall, the site demonstrates a professional and trustworthy digital platform for a government/community initiative.

N

nazwa.pl sp. z o.o.

przyjazne-deklaracje.pl

56

Przyjazne Deklaracje is a Polish online platform specializing in simplifying local tax declarations and information submissions for residents and local governments. The service leverages algorithms to automate tax rate selection and calculations, enabling users to prepare and submit tax documents efficiently from home. The platform positions itself as an innovative and user-friendly solution in the niche market of local tax services in Poland. Technically, the website is built on modern frameworks such as Next.js and React, supplemented by analytics and user experience tools like Google Analytics and Hotjar. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks some advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR, though it could benefit from enhanced security policies and incident response disclosures.

P

PROMEDIO Sp. z o.o.

qcloud.pl

37

PROMEDIO Sp. z o.o., operating under the brand Qcloud, specializes in innovative queue management systems designed to optimize customer flow in various service environments such as banks, hospitals, government offices, and retail points. The company offers a range of solutions including physical and virtual ticketing systems, appointment scheduling calendars, informational displays, and API licenses. Established in 2017 and based in Poland, Qcloud has completed over 350 projects and installed thousands of devices, positioning itself as a trusted niche provider in the queue management technology sector. Technically, the website is built on WordPress with common plugins like Yoast SEO and Contact Form 7, enhanced by Google Tag Manager and Google reCAPTCHA for analytics and security. The site is mobile-optimized and uses modern web fonts and scripts, although hosting details are not explicitly disclosed. Cookie consent is managed via CookieYes, indicating a basic level of privacy compliance. From a security perspective, the site enforces HTTPS and DNSSEC, integrates reCAPTCHA on forms, and implements cookie consent mechanisms. However, it lacks explicit security headers such as CSP or HSTS and does not publish a security policy or incident response contacts. No vulnerabilities or malicious content were detected, but improvements in security headers and transparency are recommended. Overall, the website presents a professional and trustworthy image with good content quality and business credibility. The absence of a privacy policy and security disclosures slightly lowers privacy compliance scores. The domain registration is consistent and legitimate, supporting the business claims. Strategic enhancements in security posture and privacy transparency would further strengthen the company's digital trustworthiness.

G

General Services Administration

performance.gov

67

Performance.gov is an official U.S. government website managed by the General Services Administration (GSA) that provides data-driven updates on the progress of federal agencies in achieving strategic government goals. The platform serves as a transparency and accountability tool for government performance, targeting policymakers, government officials, researchers, and the general public interested in federal strategy execution. The site offers archival data from multiple presidential administrations, enhancing its value as a historical and analytical resource. Technically, the website employs modern web technologies including the US Web Design System (USWDS), Google Tag Manager, jQuery, and Lottie animations, ensuring a responsive, accessible, and user-friendly experience. The site is well-optimized for mobile devices and demonstrates good SEO practices. However, explicit security headers are not visibly configured, and there is no public incident response or vulnerability disclosure information, which are areas for improvement. From a security perspective, the site benefits from HTTPS enforcement and the inherent trust of a .gov domain, which is tightly regulated. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is moderate; while a comprehensive privacy policy is present, there is no visible cookie consent mechanism. Contact information is limited but includes a verified government support email. Overall, Performance.gov is a credible, authoritative government resource with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, implementing a cookie consent mechanism, and publishing incident response and vulnerability disclosure policies to further strengthen trust and compliance.

O

Office of the Comptroller of the Currency

occ.gov

81

The Office of the Comptroller of the Currency (OCC) is a U.S. federal government agency responsible for ensuring a safe, sound, and fair federal banking system. The website serves as the official digital presence of the OCC, providing regulatory information, news, publications, and tools for bankers, consumers, and other stakeholders. It holds a strong market position as a key regulator within the U.S. banking sector, operating under the Department of the Treasury. The site targets a broad audience including banking professionals, federal institutions, and the general public seeking regulatory guidance and banking information. Technically, the website is built on the Percussion Content Management System and leverages modern web technologies including jQuery, Google Analytics, Crazy Egg, and the U.S. Web Design System (USWDS) to ensure accessibility, responsiveness, and usability. The site demonstrates good performance and SEO practices, with comprehensive metadata and structured navigation. Mobile optimization and accessibility features are well implemented, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs domain transfer protections, indicating a secure baseline. However, DNSSEC is not enabled, representing a minor security gap. The presence of a vulnerability disclosure policy is a positive indicator of security awareness, though explicit incident response contacts and security headers are not evident. Privacy compliance is moderate, with a comprehensive privacy policy but lacking a cookie consent mechanism despite the use of tracking scripts. Overall, the OCC website is a professional, trustworthy, and authoritative government resource with strong content quality and business credibility. Minor improvements in security headers, DNSSEC implementation, and privacy consent mechanisms would enhance its security posture and compliance. The site is safe for general audiences and aligns well with its role as a federal regulatory agency.

The Centre for Foreigners JMK is a government-supported non-profit organization based in the South Moravian Region of the Czech Republic. It provides a broad range of integration services including Czech language courses, legal and social counselling, adaptation and integration courses, and multicultural activities. The organization targets foreigners, institutions, municipalities, companies, and the general public, offering free events and support to facilitate integration into Czech society. The website is professionally designed, multilingual, and well-structured, reflecting a mature digital presence. Technically, the website is built on WordPress with modern libraries such as React, Leaflet.js, and Google reCAPTCHA for security. It employs SEO best practices with Yoast SEO and includes analytics via Google Analytics and Tag Manager. The site is mobile-optimized and accessible, though accessibility could be improved further. Security posture is strong with HTTPS and form protections, but lacks some advanced security headers and published security policies. The WHOIS data is unavailable, which slightly reduces trustworthiness, but the presence of official partner logos and consistent branding supports legitimacy. Privacy and cookie policies are present and GDPR compliant, with clear consent mechanisms. No signs of malicious content or adult material were found, making the site safe for general audiences. Overall, the Centre for Foreigners JMK website demonstrates a solid business and technical foundation with good security and privacy practices. The main risk is the lack of publicly available WHOIS data and absence of explicit security incident response information. Strategic improvements in security headers, incident response transparency, and accessibility would enhance trust and compliance.

N

Nový Jičín - Město Klobouků

novyjicin.cz

46

Nový Jičín's official municipal website serves as a comprehensive digital portal for residents and visitors, offering city news, public service information, event calendars, and administrative contacts. The site is well-branded and positioned as the authoritative source for city-related information in the Czech Republic. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and various plugins enhancing user experience and content management. The site is mobile-optimized and accessible, with good SEO practices and structured data implemented. Security posture is strong with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies, including user consent mechanisms. Overall, the website presents a trustworthy and professional digital presence for the city government, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing transparency around security policies and incident response, and considering a vulnerability disclosure program to further strengthen security culture.

M

Město Rakovník

mesto-rakovnik.cz

46

Město Rakovník operates an official municipal website serving the residents and visitors of the city of Rakovník in the Czech Republic. The site provides comprehensive information about city administration, urban planning, social services, cultural events, and citizen resources. It functions as a key communication channel for the local government, offering access to official documents, news updates, and contact information. The website targets local citizens, government employees, and visitors seeking municipal services or information. Technically, the website employs a modern technology stack including jQuery, Bootstrap 4, and jQuery.mmenu for responsive navigation. The site is mobile-optimized and uses HTTPS to secure communications. Cookie consent mechanisms are implemented, reflecting awareness of privacy regulations. However, no advanced analytics or tracking services are detected, indicating minimal user tracking. From a security perspective, the site enforces HTTPS but lacks visible security headers such as Content-Security-Policy or X-Frame-Options, which could enhance protection against common web attacks. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No signs of WAF or content blocking were found, and no vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a professional and trustworthy front for the city government, with good content quality and user experience. The main risk lies in the missing WHOIS data and lack of some security best practices. Strategic improvements in security headers and domain registration transparency are recommended to strengthen trust and compliance.

MAS Podbrněnsko, spolek is a regional non-profit organization focused on supporting the development of the Pohořelicko and Židlochovicko regions in the Czech Republic. The organization provides services such as grant and subsidy information, project support, promotion of local producers, and shared office facilities. Their target audience includes local communities, small and medium enterprises, and non-profit organizations. The website reflects a professional and community-oriented business model with a clear regional focus. Technically, the website uses a modern tech stack including jQuery, Foundation framework, bxSlider, and Google Analytics. It is built on the Nette Framework CMS and shows good mobile optimization and basic accessibility. The site includes cookie consent mechanisms and privacy policies, indicating awareness of GDPR compliance. However, some security best practices such as security headers are not visibly implemented. From a security perspective, the website uses HTTPS and has implemented cookie consent banners, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which introduces moderate risk. Overall, the site is functional, professional, and safe for general audiences. Strategically, MAS Podbrněnsko should enhance its security posture by adding security headers, publishing incident response and vulnerability disclosure policies, and ensuring regular updates of third-party libraries. Improving accessibility and SEO would also benefit user experience and reach.

C

Czech Founders

czechfounders.org

47

Czech Founders is a Czech non-profit organization and community dedicated to empowering startup founders and innovators in Czechia. The organization provides networking opportunities, advocacy with policymakers, research, and events to support the growth and scaling of startups. It has a strong presence in the Czech startup ecosystem with over 1000 members and partnerships with key organizations. The website is professionally designed, content-rich, and well-structured, targeting founders, investors, and ecosystem supporters. Technically, it is built on WordPress with modern UI libraries and is mobile optimized. Security posture is good with HTTPS and domain transfer protection, though DNSSEC is not enabled and security policies are not explicitly published. Privacy compliance is mostly met with a GDPR policy but lacks a cookie consent mechanism. Overall, the website is trustworthy and credible with transparent WHOIS data matching the business leadership.

M

MAVERICKS advokáti s.r.o.

mavericks.legal

46

MAVERICKS advokáti s.r.o. is a boutique law firm based in Prague specializing in legal services for the digital and technology sectors, including startups, venture capital, M&A, IP, and IT law. The firm positions itself as a premium provider with a strong reputation in the Czech and Slovak markets, serving tech companies, investors, and public sector clients. Their business model includes hourly rates, fixed prices, and subscription packages, emphasizing fast and technologically advanced service delivery. Technically, the website is built on WordPress with modern frameworks like Bootstrap and Elementor, featuring good mobile optimization and professional design. Security posture is solid with HTTPS and some security best practices, though explicit security headers and vulnerability disclosure mechanisms are absent. The WHOIS data is unavailable or malformed, limiting domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the site is safe, well-structured, and trustworthy, though improvements in privacy compliance and security headers are recommended.

A

Air Ventures

airventures.eu

54

Air Ventures is an early-stage venture capital firm based in Prague, focusing on startups primarily in the CEE, Baltics, DACH, and UK regions. The company targets ambitious entrepreneurs and startups with proven market traction, offering investment tickets ranging from 200k to 2 million EUR. Backed by MiddleCap Group, Air Ventures emphasizes agility, strong entrepreneurial experience, and marketing expertise to support its portfolio companies. The website reflects a professional and consistent brand image with clear business focus and team presentation. Technically, the website is built on WordPress using Elementor and incorporates modern technologies such as Google Analytics and Smart Slider 3. The site is hosted by WebSupport s.r.o., a reputable hosting provider. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks important security headers and published security or incident response policies. Privacy and cookie policies are missing, indicating compliance gaps with GDPR and related regulations. No WAF or blocking mechanisms were detected, and the domain registration is consistent with the business claims. Overall, Air Ventures presents a credible and professional online presence suitable for its venture capital business, but it should improve privacy compliance and security best practices to enhance trust and regulatory adherence.

D

Democracy Engine

democracyengine.com

59

Democracy Engine is a specialized donation processing platform that empowers donors to support political candidates, PACs, parties, charities, and nonprofits across multiple jurisdictions and parties. Founded in 2003, it offers a unique service that simplifies complex multi-recipient donations with compliance and reporting automation. The company positions itself as a niche player with a focus on political and charitable giving, leveraging technology and legal expertise to ensure regulatory adherence. Technically, the website is built on WordPress with modern themes and plugins, hosted on AWS infrastructure, and optimized for mobile and SEO. Security posture is solid with HTTPS, PCI compliance claims, and encryption, though some improvements like DNSSEC and security headers are recommended. Privacy compliance is good with clear policies, but cookie consent mechanisms are lacking. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

P

PAR University of Applied Sciences

par.hr

47

PAR University of Applied Sciences is a Croatian higher education institution established in 2007, offering applied sciences degree programs and lifelong learning courses. The institution emphasizes practical experience, mentoring, and international cooperation, notably through Erasmus+. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks some security headers and explicit privacy and security policies. Social media presence is strong, enhancing trust and engagement. Overall, the site reflects a credible educational institution with room for improvement in compliance and security transparency.

Mondragon Unibertsitatea is a cooperative university based in Spain, offering a broad range of educational programs including undergraduate, master's, doctoral, and professional training. The institution emphasizes applied learning, entrepreneurship, and innovation, positioning itself as a medium-sized educational entity with a strong regional and international presence. The website reflects a professional and modern digital infrastructure built on the Liferay platform, incorporating contemporary web technologies and privacy compliance mechanisms such as Cookiebot and GDPR-aligned policies. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers and formal security policies could be improved. Contact information and social media presence are comprehensive, supporting trust and engagement. Overall, the site is well-designed, content-rich, and accessible, serving its target audience effectively.

L

LUKAS-ERZETT GmbH & Co. KG

lukas-erzett.com

50

LUKAS-ERZETT GmbH & Co. KG is a well-established German manufacturer specializing in system solutions for milling, grinding, polishing, and cutting tools, with a strong global presence and over 85 years of experience. The company targets industrial sectors such as automotive, aerospace, energy, environment, construction, and craft industries, offering high-quality products and consulting services. Their website reflects a mature digital presence with comprehensive product information, multilingual support, and active marketing channels including newsletters and webinars. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good performance and mobile optimization. Security measures include HTTPS, Content-Security-Policy headers, reCAPTCHA on forms, and a consent management platform, although DNSSEC is not enabled and no explicit security policy is published. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

L

Lumos Foundation

wearelumos.org

58

Lumos Foundation is a well-established non-profit organization founded in 2005 by author J.K. Rowling, dedicated to realizing every child's right to a family by transforming care systems globally. The organization operates internationally with a medium-sized team and focuses on advocacy, care system reform, fundraising, and support for vulnerable children. The website reflects a professional and consistent brand image, with comprehensive content targeting donors, partners, and the general public interested in child welfare. Technically, the website is built on WordPress with modern technologies including Bootstrap, jQuery, Stripe for payments, and Google Tag Manager for analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. Security measures include HTTPS, Google reCAPTCHA on forms, and secure payment integration, although explicit security headers could be improved. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The WHOIS data is unavailable due to query failure or privacy protection, but other legitimacy indicators such as certifications and consistent business information support trustworthiness. Overall, Lumos Foundation's website is a secure, professional, and trustworthy platform that effectively supports its mission and stakeholder engagement.

D

Dobrá rodina o.p.s.

dobrarodina.cz

50

Dobrá rodina o.p.s. is a well-established Czech non-profit organization specializing in supporting foster and adoptive families as well as other stakeholders in the substitute family care system. The organization holds a leading market position in the Czech Republic, providing a broad range of educational activities, preparation for substitute parenting, and ongoing support to approximately 1200 families nationwide. Their digital presence is professional, with a well-structured website built on WordPress, leveraging modern SEO practices and social media integration to engage their target audience effectively. Technically, the website employs a modern technology stack including WordPress CMS, Yoast SEO, jQuery, and tracking tools such as Google Analytics and Facebook Pixel, all implemented with user consent mechanisms. The site is mobile-optimized and accessible, with good performance and SEO optimization. However, there is room for improvement in security headers and publishing formal security policies. From a security perspective, the site enforces HTTPS and uses cookie consent banners, indicating a good baseline for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the organization's claims, showing a domain age consistent with the business history and no privacy protection, enhancing trustworthiness. Overall, Dobrá rodina demonstrates a strong digital maturity and security posture for a non-profit entity, with comprehensive content and good privacy practices. Strategic improvements in security policy transparency and technical security headers could further enhance their security and compliance stance.

Dětský úsvit z.s. is a Czech non-profit organization dedicated to supporting children, particularly those in foster care and with special needs such as autism. The organization provides a range of social services, educational programs, therapeutic support, and community projects aimed at improving the lives of children and families in distress. Their website reflects a well-structured presentation of their services, projects, and stories, targeting foster families, social workers, and the general public interested in child welfare. The organization appears to be established since 2018, with a consistent domain registration and hosting setup.

V

Vysoká škola finanční a správní, a.s.

campusvsfs.cz

40

The website campusvsfs.cz represents Vysoká škola finanční a správní, a.s., offering student accommodation services primarily for its own students and others in Prague. The site provides detailed information about multiple housing locations, pricing, and amenities, targeting students seeking affordable and comfortable housing options. The business model revolves around long-term and short-term student housing rentals, with a clear focus on the education sector. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern web technologies including Bootstrap 5, jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA for form security. The site is mobile-optimized and uses HTTPS, ensuring secure data transmission. However, some security best practices such as security headers are missing, and no explicit privacy or cookie policies are present, which could impact compliance and user trust. From a security perspective, the site demonstrates good posture with HTTPS and CAPTCHA protection on forms, but lacks published security policies or incident response contacts. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details align with a legitimate educational institution. No vulnerabilities or malicious content were detected. Overall, the website is a credible and professional platform for student housing services affiliated with VŠFS. Strategic improvements in privacy compliance, security headers, and transparency around data protection would enhance trust and compliance. The domain WHOIS data gap should be investigated to ensure full legitimacy and reduce risk.

E

eType Services

etypeservices.com

55

eType Services is a specialized digital publishing company focused on providing community newspapers with integrated digital solutions including e-Edition, websites, mobile apps, and production services. Their market position is niche, targeting community newspapers and publishers seeking to modernize and grow their digital presence. The website is built on Drupal 10, leveraging modern web technologies and analytics tools such as Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by implementing security headers and publishing privacy and cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trust. Overall, the website presents a professional and trustworthy front with clear contact information and partner affiliations.

S

Southern New Hampshire Health

snhhealth.org

50

Southern New Hampshire Health is a well-established non-profit healthcare system serving southern New Hampshire and northern Massachusetts. The organization offers a broad range of healthcare services including acute care, primary and specialty care, immediate care, and women's and children's services. With over 130 years of history, it maintains a strong regional presence supported by accreditations such as Magnet Certification and AAAHC. The website reflects a patient-focused approach with comprehensive information and digital tools like MyChart for appointment scheduling and medical records access. Technically, the site is built on Concrete CMS and leverages modern JavaScript libraries and analytics tools, providing a responsive and user-friendly experience. Security posture is good with HTTPS and cookie consent mechanisms in place, though some security headers and explicit incident response contacts are missing. The absence of WHOIS data limits domain registration trust verification, but the professional presentation and trust indicators support legitimacy. Overall, the site is a reliable digital front for a reputable healthcare provider.

A

Aristotle

aristotle.com

68

Aristotle is a well-established company specializing in political data, consulting, and software solutions, serving campaigns, PACs, and advocacy groups primarily in the United States. Founded in 1983, it positions itself as a leader in powering democracy through technology and data-driven strategies. The website reflects a mature digital presence with comprehensive service offerings and a clear target audience in the political and public affairs sectors. Technically, the site is built on WordPress with modern frameworks like Bootstrap and Elementor, ensuring a responsive and professional user experience. Security measures such as HTTPS, reCAPTCHA, and cookie consent mechanisms are implemented, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the overall business credibility remains high based on content and branding. Strategic recommendations include enhancing transparency around security and incident response, verifying domain registration details, and improving accessibility features.

D

Dotykačka

markeeta.cz

53

Dotykačka is a Czech-based technology company specializing in point-of-sale (POS) systems tailored for restaurants, retail stores, and service providers. The company has consolidated Markeeta into its brand, offering an integrated hardware and software solution with features such as mobile waiter apps, payment terminal integration, reservation and attendance systems, and remote management. The website reflects a mature business with a medium-sized market presence in the Czech Republic, targeting entrepreneurs and businesses seeking reliable POS solutions. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern marketing and analytics tools including Google Tag Manager, Hotjar, and Bing Ads. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are needed in publishing privacy policies and security headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

K

Karlovarská agentura rozvoje podnikání, p. o.

ris3kvk.cz

52

The website www.ris3kvk.cz represents the Regionální inovační strategie Karlovarského kraje, a regional innovation strategy initiative supported by the Karlovarská agentura rozvoje podnikání, p. o. The organization focuses on fostering research, development, and innovation activities within the Karlovarský region of the Czech Republic. The site serves as a strategic communication platform to promote the RIS3 strategy, related projects like Smart Akcelerátor, and collaboration between academia and regional businesses. The target audience includes regional government entities, research institutions, and local enterprises. Technically, the website employs a modern front-end stack including jQuery and Google Analytics, with responsive design and multilingual support. The presence of a cookie consent mechanism indicates awareness of privacy compliance, although no explicit privacy or terms of service pages were found. The site is accessible over HTTPS, but lacks visible security headers and detailed security policies. Performance and SEO are moderate to good, with room for improvement in accessibility and security hardening. From a security perspective, the site shows basic best practices such as HTTPS and cookie consent but lacks advanced security headers and incident response information. The absence of WHOIS data reduces domain transparency, though the website content and partner affiliations suggest legitimacy. No critical vulnerabilities or adult content were detected, and the site is safe for general audiences. Overall, the website is a professionally maintained regional government-related portal with good content quality and moderate technical maturity. Strategic improvements in security policies, privacy disclosures, and WHOIS transparency would enhance trust and compliance.

M

Müller Production s.r.o.

mproduction.cz

51

Müller Production s.r.o. is a Czech-based marketing and event management agency specializing in marketing for personalities and brands, as well as organizing cultural, social, and sports events. The company targets businesses and sports personalities seeking professional marketing and event services. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern web technologies including jQuery, Bootstrap, and the Nette Framework, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service pages were found. From a security perspective, the website lacks visible HTTP security headers and the SSL/TLS configuration status is unknown, which suggests room for improvement. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness despite the professional appearance of the site. No signs of WAF or content blocking were detected, and the content is safe for general audiences with no adult or explicit material. Overall, the site scores moderately well on content quality, technical implementation, and business credibility but falls short on privacy compliance and security posture. Strategic recommendations include implementing comprehensive privacy and terms policies, enhancing security headers and SSL configuration, and verifying domain registration details to improve trust and compliance. These steps will strengthen the company’s digital maturity and security posture while maintaining a positive user experience.

C

Czechinno | Podporujeme inovace

czechinno.cz

53

The website czechinno.cz is a Czech-language platform focused on supporting innovation, likely within the Czech Republic. It appears to be a small-scale operation founded around 2010, with a moderate level of digital maturity. The site is built on WordPress using the Divi theme and several plugins, including Divi Pixel and EventON, indicating a modern but standard technical infrastructure. The site employs Google Analytics and Google Tag Manager for user tracking, but lacks visible privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure information. Overall, the site is functional and professionally designed but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

P

Plavírna

plavirna.cz

56

Plavírna is a hospitality business operating a historic renovated factory venue in Karlovy Vary, Czech Republic, specializing in weddings, events, and accommodation. The website presents a professional and visually appealing platform with clear navigation and comprehensive service descriptions. The technical infrastructure leverages modern JavaScript libraries, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is hosted on a specialized platform (Previo) tailored for hospitality businesses. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks visible security headers and published privacy or terms policies. The absence of WHOIS data limits domain trust transparency but is common for privacy-protected domains. Overall, the website is credible, safe, and well-positioned for its market niche.

C

Crypto Kingdom s.r.o.

cryptokingdom.tech

48

Crypto Kingdom s.r.o. operates a Czech and Slovak focused cryptocurrency education and trading platform, offering services such as trading signals, educational courses, workshops, and community support. Established in 2017, it positions itself as a leading crypto community in the region, targeting a broad audience from beginners to advanced traders and investors. The website is professionally designed with good navigation and mobile optimization, leveraging modern technologies including Bootstrap, jQuery, and various tracking and marketing tools. Security posture is solid with HTTPS and reCAPTCHA implemented, though improvements in security headers and DNSSEC are recommended. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the business appears credible and trustworthy with active social media presence and partner affiliations.