Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,185001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
29,701–29,750 of 99,066
Vetropack Groupvetropack.cz
Manufacturing · Switzerland
65Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Vetropack Group is a well-established glass packaging manufacturer focused on providing elegant and responsible solutions for the food and beverage industry. The company maintains strong customer relationships and operates a professional, multilingual website powered by TYPO3 CMS. The digital infrastructure includes modern analytics and cookie consent tools, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the overall professional presentation and related domains support the business credibility. Strategic recommendations include enhancing transparency with published security policies and incident response contacts, and improving WHOIS data visibility.
PIVOVAR A RESTAURACE U FLEKŮ s.r.o.ufleku.cz
Hospitality · Czech Republic
54Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
PIVOVAR A RESTAURACE U FLEKŮ s.r.o. operates a historic brewery and restaurant located in Prague 1, Czech Republic. The business is well-established, dating back to 2001, and is recognized as a cultural landmark offering traditional Czech cuisine, event hosting, brewery tours, and souvenir sales. The website reflects this heritage with content primarily in Czech and multiple language options, targeting both local and international visitors interested in Czech culture and gastronomy. The business model focuses on hospitality and cultural tourism, leveraging its historic reputation and central location. Technically, the website is built on WordPress CMS using common libraries such as jQuery and Bootstrap. It employs Google Fonts and integrates Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, with basic accessibility and good SEO practices. Hosting and domain registration are consistent and stable, managed by REG-GRANSY since 2001. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating some compliance with privacy regulations. However, it lacks visible security headers, a published privacy policy, terms of service, or incident response contacts, which are important for GDPR compliance and overall security posture. No critical vulnerabilities or malicious content were detected, but improvements in security best practices and transparency are recommended. Overall, the website is professional and trustworthy, serving a mature audience interested in hospitality and cultural experiences. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving mobile optimization to strengthen compliance and user trust.
Manufacturing · Czech Republic
70Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
OTK printing & packaging a.s. is a well-established Czech printing and packaging company with a history dating back to 1879. The company specializes in manufacturing flexible packaging, paper labels, self-adhesive labels, and other labeling solutions serving diverse industries such as food, beverage, cosmetics, automotive, and healthcare. Their market position is strong within the Czech Republic, supported by multiple certifications including BRC, FSC, and ISO standards. The website reflects a professional and comprehensive digital presence with multilingual support and detailed product and contact information. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance. It uses Google Tag Manager, Google Analytics, Facebook Pixel, and reCAPTCHA v3 for security and marketing. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and form protection, though some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. However, the absence of WHOIS data limits domain trust assessment, and no explicit security or incident response policies are published. Overall, the website and business demonstrate a mature and trustworthy presence with room for improvement in security header implementation and domain registration transparency.
- KRAKONOŠ spol. s r.o.
pivovar-krakonos.cz
Hospitality · Czech Republic
59Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Pivovar Krakonoš is a historic brewery based in Trutnov, Czech Republic, with a tradition dating back over 400 years. The company produces a range of classic Czech beers using traditional bottom-fermentation methods and distributes primarily within the Czech Republic. The website reflects a medium-sized regional business with a focus on manufacturing and retail sales of beer products. The digital presence is built on a custom CMS (inPage) with modern JavaScript libraries and responsive design, providing a good user experience and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS data reduces domain trust, but the website content and business information appear legitimate and consistent with the brewery's profile. Overall, the site is professional and trustworthy for its business domain.
- Pivovar Strakonice 1649, a. s.
pivovar-strakonice.cz
Hospitality · Czech Republic
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pivovar Strakonice 1649, a. s. is a historic Czech brewery with a tradition dating back to 1649, currently operating since 2004 in its modern form. The company produces and sells beer products, targeting both retail customers and the hospitality sector. Their market position is that of a regional brewery with a strong local heritage and a diversified offering including regular beers, special brews, and brewery tours. The website reflects a professional and consistent brand image with comprehensive product and contact information. Technically, the site uses modern web technologies such as Google Fonts, Tiny Slider, Google Tag Manager, and Google Maps API, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. WHOIS data is unavailable, which slightly reduces trust but does not contradict the legitimacy of the business as evidenced by detailed contact information and social media presence. Overall, the website is mature, well-maintained, and compliant with GDPR, serving a mature audience due to its alcohol-related content.
- THERMOTECHNIKA BOHEMIA s.r.o.
tcbohemia.com
Manufacturing · Czech Republic
56Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
THERMOTECHNIKA BOHEMIA s.r.o. operates a professional website focused on the distribution and manufacturing of commercial refrigeration, freezing, and dispensing equipment primarily for the gastronomy sector in the Czech Republic and Central Europe. The company has a strong market presence with subsidiaries in multiple Central European countries and offers a wide range of products and services including custom manufacturing and extensive servicing capabilities. The website reflects a mature digital infrastructure with modern technologies such as Bootstrap, jQuery, Google Analytics, and a comprehensive cookie consent mechanism, indicating compliance with GDPR and privacy best practices. Security posture is solid with HTTPS enforced and anti-spam measures like Google reCAPTCHA, though additional security headers could enhance protection. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.
Rodinný pivovar BERNARD a.s.bernard.cz
Retail · Czech Republic
73Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Rodinný pivovar BERNARD a.s. is a traditional Czech family-owned brewery located in Humpolec, Czech Republic, specializing in the production and retail of premium Czech beer. The company maintains a strong market presence with a focus on quality and tradition, offering a range of beer products, hosting annual events such as Bernardfest, and distributing a company magazine. The website reflects a mature digital presence with good content quality, clear branding, and active social media engagement. Technically, the site uses modern JavaScript frameworks and Google Tag Manager for analytics and marketing, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit privacy policies are missing. Overall, the business appears legitimate and well-established, though WHOIS data is unavailable likely due to privacy protection.
Pivovary CZ Group a.s.pivovarygroup.cz
Manufacturing · Czech Republic
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pivovary CZ Group a.s. is a Czech brewery group established in 2023, operating multiple well-known beer brands such as Holba, Zubr, and Litovel. The company focuses on beer production, brand marketing, and e-commerce sales, positioning itself as a significant player in the Czech brewing industry. The website reflects a professional and modern digital presence with active news, events, and media sections targeting beer consumers, media, and partners. Technically, the site uses modern JavaScript frameworks (Vue.js), Google Tag Manager for analytics and marketing, and is hosted behind Cloudflare DNS, ensuring good performance and security. The site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism, although explicit security headers and detailed security policies are not present. Contact information is clearly provided, though phone numbers are absent. Overall, the website demonstrates a mature digital infrastructure with room for improvement in security transparency and compliance documentation.
Government · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website 'Řídím, piju nealko pivo' is a Czech Republic-based public awareness campaign focused on promoting road safety and responsible alcohol consumption, specifically encouraging the consumption of non-alcoholic beer when driving. It is affiliated with Czech road safety organizations such as BESIP and the Police of the Czech Republic, as indicated by partner logos. The site targets drivers and cyclists, emphasizing zero tolerance for alcohol behind the wheel and providing educational content. Technically, the website is built with standard HTML5 and CSS3, using Google Fonts for typography. It is mobile optimized with a clear navigation structure but lacks advanced frameworks or CMS. Security posture is basic, with no detected HTTPS enforcement or security headers, and no privacy or cookie policies present. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content appears genuine and aligned with public safety objectives. Overall, the site scores moderately on content quality and business credibility but requires improvements in security and privacy compliance to enhance trustworthiness and user protection.
Government · Czech Republic
59Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The Czech Accreditation Institute (CAI) is a government-established public service organization responsible for accreditation activities in the Czech Republic. Founded in 1993, CAI operates an accreditation system aligned with European and international standards, serving laboratories, certification bodies, and inspection entities. The organization is a recognized member of major international accreditation bodies such as EA, ILAC, and IAF, and is a signatory to key multilateral agreements, reinforcing its credibility and market position. Technically, the CAI website is built on WordPress with modern plugins for booking, GDPR compliance, and user interaction. The site is well-structured, mobile-optimized, and employs HTTPS with valid SSL certificates, ensuring secure user connections. Cookie consent mechanisms and GDPR compliance are actively implemented, reflecting a mature approach to privacy and data protection. From a security perspective, the site demonstrates good practices including HTTPS enforcement and use of Google reCAPTCHA. However, the absence of explicit security policies, incident response information, and missing WHOIS data for the domain introduce some concerns regarding transparency and trustworthiness. No vulnerabilities or malicious content were detected. Overall, CAI presents a professional and trustworthy digital presence consistent with its role as a national accreditation body. Strategic improvements in publishing security policies and resolving WHOIS data gaps would enhance trust and compliance posture.
Education · Czech Republic
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Česká společnost pro jakost is a Czech organization specializing in quality management systems, offering training, certification, and consultancy services across multiple sectors including automotive, environmental management, and public administration. The website is professionally designed using TYPO3 CMS with Bootstrap and FontAwesome, providing a good user experience and clear navigation. The presence of detailed privacy and terms policies indicates attention to compliance, although cookie consent mechanisms are missing. Security posture is strong with HTTPS and secure forms, but could be improved with additional security headers and incident response information. The absence of WHOIS data is a concern for domain legitimacy but the website content and certifications suggest a credible entity.
AuDePor s.r.o.audepor.cz
Other · Czech Republic
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
AuDePor s.r.o. is a newly established company (registered in 2023) with an online presence hosted on Active24 and built using the SiteBuilderHost platform. The website content is minimal and primarily in Czech, with limited business description or service details available. The site includes a cookie consent banner indicating some awareness of privacy requirements but lacks formal privacy or terms of service documentation. Technically, the site uses standard web technologies including JavaScript and CSS, with external resources loaded from trusted CDNs. Mobile optimization appears adequate, but overall content quality and SEO are basic. Security posture is weak due to absence of security headers and no visible incident response or security policies. The domain registration data is consistent and transparent, supporting legitimacy, but the newness of the domain suggests the business is in early stages. Strategic improvements in security, privacy compliance, and content depth are recommended to enhance trust and professionalism.
JUDr. David Karabec - advokátkarabec.cz
Other · Czech Republic
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
JUDr. David Karabec is a specialized legal professional and IP mediator operating a small law firm focused on intellectual property rights, licensing, know-how, trade secrets, unfair competition, franchising, and court representation including criminal defense. The website is professionally designed using the Wix platform, demonstrating a moderate level of digital maturity with modern JavaScript frameworks and polyfills. Security posture is adequate with HTTPS enabled and some JavaScript hardening, but lacks explicit security headers and privacy compliance mechanisms. Overall, the site is trustworthy and serves its niche audience effectively, though improvements in privacy policy visibility and security headers are recommended.
Retail · Czech Republic
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Nakladatelství Grada Publishing, a.s. operates the website www.grada.cz, a professional e-commerce platform specializing in the sale of books, e-books, and audiobooks primarily targeting the Czech market. The site offers a broad range of literature including stress-relief coloring books, fiction, children's literature, personal development, and healthcare literature. The business model is retail-focused with an emphasis on online sales and digital content distribution. The company appears to hold a strong market position as a leading Czech book publisher and retailer, supported by consistent branding and a well-structured website.
Residence Lipnoresidencelipno.cz
Hospitality · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Residence Lipno is a hospitality business offering modern, comfortable vacation homes near Lake Lipno in the Czech Republic. The website targets families, couples, and tourists seeking nature and active holidays. It provides online booking and highlights seasonal activities and special offers. The business appears to be a small local operator with a focus on quality accommodation and customer satisfaction. Technically, the website uses MotoCMS with AngularJS, integrates Google Analytics, Facebook Pixel, and Google Tag Manager for marketing and tracking. The site is mobile optimized and has good SEO practices but lacks visible privacy and cookie policies, which is a compliance concern. Security posture is moderate with HTTPS usage but missing security headers and incident response information. WHOIS data is unavailable, limiting domain trust assessment, but external trust signals like Booking.com badges and social media presence support legitimacy. Overall, the website is professional and trustworthy but should improve privacy compliance and security transparency.
Inovara Group s.r.o.inovaratrade.com
Other · Czech Republic
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Inovara Group s.r.o. operates as a Czech distributor specializing in ESG (Environmental, Social, and Governance) products, targeting businesses seeking sustainable and responsible solutions. The company positions itself as a meaningful provider of ESG-related products within the Czech market. The website is professionally designed using the Wix platform, featuring structured data that enhances search engine understanding and provides basic company information including address and legal name. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Technically, the site leverages Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. Overall, the site presents a credible business front but would benefit from enhanced transparency and compliance documentation.
Semantic Visionssemantic-visions.com
Technology · Czech Republic
74Medium
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Semantic Visions is a technology company specializing in transforming open-source data into actionable market intelligence and risk insights. Their platform, svEye™, leverages AI to monitor over 1.9 million global media sources in 12 languages, providing real-time risk detection, supply chain visibility, and compliance support for sectors including banking, manufacturing, government, and investment funds. The company positions itself as a provider of advanced OSINT solutions tailored for modern business needs. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as Google Tag Manager, Mux video streaming, and Cloudflare Turnstile captcha for bot protection. The site demonstrates good mobile optimization, accessibility, and SEO practices, though some security headers are missing. Analytics usage is moderate with multiple tracking services integrated. From a security perspective, the site uses HTTPS and employs bot mitigation techniques but lacks explicit privacy and cookie policies, incident response information, and vulnerability disclosure mechanisms. The WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the website content and structured data indicate a legitimate business. Overall, Semantic Visions presents a professional and trustworthy digital presence with room for improvement in privacy compliance and security best practices to enhance trust and regulatory adherence.
Balance 21, s.r.o.bala21.cz
Retail · Czech Republic
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Balance 21, s.r.o. operates the website bala21.cz, an e-commerce platform specializing in probiotic products including kombucha-based drinks and supplements. The company targets health-conscious consumers in the Czech Republic, offering a range of probiotic beverages and capsules designed to support digestion and immunity. The website presents a professional and consistent brand image with clear business and legal information, including GDPR-compliant privacy policies and terms of service. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Hosting is provided by WEDOS, consistent with the domain registration data. Security posture is adequate with HTTPS enforced and secure forms, though some security headers are missing and no incident response or vulnerability disclosure information is published. Overall, the site is trustworthy and well-positioned in its niche market.
- THIMM
thimm.com
Manufacturing · Germany
57Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
THIMM is a well-established German family-owned company founded in 1949, specializing in sustainable packaging and display solutions made from corrugated cardboard. The company positions itself as a leading provider in this niche, targeting businesses that require environmentally friendly packaging options. Their website reflects a mature digital presence with multi-language support and comprehensive content about their products and services. Technically, the site is built on TYPO3 CMS, integrates modern tools like Google Tag Manager and Cookiebot for analytics and privacy compliance, and demonstrates good performance and accessibility standards. Security-wise, the site enforces HTTPS and provides a detailed cookie consent mechanism, though it lacks explicit security policies or incident response contacts. The absence of WHOIS data limits domain legitimacy verification, but the professional website and business information suggest a credible entity. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security transparency and WHOIS data availability.
- LAMA servis s.r.o.
lamaservis.cz
Other · Czech Republic
70Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
LAMA servis s.r.o. is a small Czech company specializing in the processing of biodegradable waste primarily in the South Bohemian and Central Bohemian regions. Their services include composting, garden and park modifications, production of wood chips, and ESG reporting for businesses. The company positions itself as a regional ecological waste processor and gardening service provider with a focus on sustainability and closed-loop organic material cycles. Technically, the website is built on the Webnode CMS platform, hosted via AWS Cloudfront CDN, and uses modern web technologies including JavaScript and CSS. The site is mobile-optimized with good navigation and content quality. Security posture is moderate with HTTPS enabled and a cookie consent mechanism in place, but lacks security headers and privacy policy documentation. WHOIS data is unavailable, likely due to subdomain usage or privacy protection, which slightly reduces trustworthiness. Overall, the website is professional and safe, but could improve compliance and security practices.
- CSRD
csrd.cz
Finance · Czech Republic
63Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website 'Byznys a udržitelnost' is a Czech language platform focused on business sustainability, ESG, and CSRD regulatory topics. It serves as an information and advisory hub providing news, articles, event calendars, and support services primarily targeting businesses and sustainability professionals in the Czech Republic. The site is built on WordPress with modern plugins and technologies, featuring good SEO and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA, though explicit security headers and policies are absent. Privacy compliance is partial with a cookie consent mechanism but no visible privacy policy or terms of service. WHOIS data is suspicious due to a future domain creation date, which reduces trustworthiness but does not negate the professional appearance and content quality of the site.
VAFO PRAHA s.r.o.soutezbrit.cz
Retail · Czech Republic
70Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
The website soutezbrit.cz serves as a promotional contest platform for Brit PREMIUM BY NATURE pet food products, operated by VAFO PRAHA s.r.o. It targets Czech consumers shopping at Albert supermarkets, encouraging purchase and registration for a chance to win prizes. The site is well-structured with clear navigation, professional design, and localized content in Czech. Technically, it employs modern JavaScript libraries such as jQuery, Bootstrap, Flatpickr, and the Nette framework, hosted on Websupport infrastructure. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Privacy compliance is strong with clear cookie consent and comprehensive privacy policy documentation. The domain is newly registered in August 2025, consistent with the campaign timeline, but limited WHOIS data slightly reduces trust. Overall, the site is professional, functional, and compliant for its purpose.
FrostFood a. s.donpeppe.cz
Retail · Czech Republic
54Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
DonPeppe.cz is a well-established Czech brand specializing in frozen food products, particularly pizzas and traditional Czech knedlíky. The company operates under FrostFood a. s., with a domain registered since 2012, supporting its market presence and credibility. The website offers a clear presentation of product lines, including classic pizzas, specialty gluten-free options, and seasonal products, targeting general consumers seeking quality frozen meals. Technically, the site uses modern JavaScript libraries such as jQuery and Slick Carousel, with Google Tag Manager for analytics, hosted on Tele3 infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though it lacks explicit security policies and incident response contacts. Privacy compliance is strong with GDPR-aligned cookie management and a detailed privacy policy. Overall, the site is trustworthy and professionally maintained, with room for improvement in security transparency and formal policies.
- PHP7.Hosting
php7.hosting
Technology · Czech Republic
65Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
PHP7.Hosting is a small technology company specializing in PHP web hosting services, offering support for PHP versions 5.3 through 7.3 with real-time switching capabilities. The company also provides domain registration, automated SSL certificates via Let's Encrypt, email services, DNSSEC, and URL redirection. Their market position is niche, targeting developers and businesses requiring flexible PHP hosting solutions. The website is professionally designed with good navigation and mobile optimization, leveraging modern frontend technologies such as Bootstrap and jQuery. However, no CMS or hosting provider details are explicitly identified. Security-wise, the site supports HTTPS with automated SSL but lacks visible security headers and published security or incident response policies, indicating room for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and trustworthy but would benefit from enhanced compliance and security transparency.
Technology · Czech Republic
64Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website tlds.africa operates as a domain registration service specializing in African country code top-level domains (ccTLDs) and a broad range of other domain extensions. It targets individuals and businesses seeking to establish an African online identity through domain registrations. The business is relatively small, founded in 2017, and operates under a privacy-protected domain registration, which is common in this industry. The site provides clear domain pricing, a domain search function, and contact information, positioning itself as a niche regional registrar with a focus on African domains. Technically, the website employs a standard modern web technology stack including jQuery, Bootstrap, Popper.js, and FontAwesome, ensuring a responsive and user-friendly interface. The site is mobile optimized and has a moderate performance profile. However, it lacks advanced SEO and accessibility features, and no CMS is detected. Hosting is provided by Gransy s.r.o., a known registrar and hosting provider. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which are recommended to enhance domain and web security. There is no visible privacy or cookie policy, which is a compliance gap especially under GDPR. Incident response and vulnerability disclosure mechanisms are not present, indicating room for improvement in security posture and transparency. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance improvements, and better transparency to increase trustworthiness and regulatory adherence.
- Gransy s.r.o.
subreg.cz
Technology · Czech Republic
64Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Subreg.cz is a well-established domain registration and related services provider operating primarily in the Czech Republic and Slovakia. The company, Gransy s.r.o., founded in 2007, holds ICANN accreditation and offers a broad portfolio of domain extensions, SSL certificates, and hosting services. The website reflects a professional business model targeting individuals and companies seeking domain registration and internet presence solutions. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google reCAPTCHA, ensuring a secure and user-friendly experience. Security posture is solid with HTTPS and form protections, though improvements in security headers and explicit policies are recommended. Overall, the site is trustworthy, with clear contact information and consistent branding, supporting its legitimacy and market position.
- Gransy s.r.o.
regtons.com
Technology · Czech Republic
73Medium
NIS2 27 · GDPR 50
NIS2 27 · GDPR 50
Regtons.com is a domain registration platform operated by Gransy s.r.o., an ICANN accredited registrar based in the Czech Republic. The company offers a broad portfolio of domain services including gTLDs, ccTLDs, reseller programs, and API automation solutions targeting registrars, hosting providers, and domain owners. The website demonstrates a professional business presence with clear service offerings and partner programs. Technically, the site uses a traditional tech stack with jQuery, Bootstrap, and several plugins, but some components like jQuery are outdated, posing potential security risks. Security posture is moderate with HTTPS usage and abuse contact info, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing cookie consent and privacy policy indicators. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.
SIA Bio-Ventabioventa.lv
Energy · Latvia
53Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
SIA Bio-Venta operates as the largest biodiesel production complex in the Baltic states, specializing in the manufacture and supply of biodiesel fuels and related chemical products. The company is part of the VK Tranzits holding group, which includes several related companies in logistics and terminal services. The website reflects a professional corporate presence with clear business information, contact details, and a focus on compliance with privacy regulations through Cookiebot integration. The company targets business clients and suppliers within the energy sector, emphasizing its market leadership in the region. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, ensuring a responsive and user-friendly experience. Cookie consent and privacy policies are well implemented, demonstrating GDPR compliance. Security posture is adequate but could be improved with additional HTTP security headers and explicit security policy disclosures. Overall, the website presents a trustworthy and professional image consistent with a large energy sector enterprise.
HET spol. s r.o.het.cz
Manufacturing · Czech Republic
74Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
HET spol. s r.o. is a Czech manufacturing company specializing in the production of interior and facade paints, thin-layer plasters, penetration coatings, and protective oils for wood, metal, and concrete surfaces. The company targets both DIY enthusiasts and professional customers, offering a broad product range with a focus on quality and price balance. Their market position is that of an established local manufacturer with certifications such as ISO 9001, indicating quality management standards. Technically, the website employs modern front-end technologies including Google Tag Manager, Cookiebot for cookie consent, and jQuery, with good mobile optimization and accessibility features. Security posture is moderate; HTTPS is used, but no explicit security headers were detected in the HTML source, and no incident response or security policies are published. The absence of WHOIS data reduces domain trustworthiness, but the website content and certifications support legitimacy. Overall, the site is professional and trustworthy with room for improvement in transparency and security practices.
- Crocodille ČR, spol. s r.o.
crocodille.cz
Retail · Czech Republic
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Crocodille ČR, spol. s r.o. is a well-established company specializing in the production and distribution of packaged bakery products such as baguettes, sandwiches, paninis, and wraps. The company operates multiple brands including Bageterie Boulevard and 360pizza, positioning itself as a leader in the retail and food service sectors within the Czech Republic. Their business model integrates in-house ingredient production, bakery operations, and logistics with a large distribution network serving thousands of stores daily. The website reflects a professional and consistent brand image with detailed product information and corporate insights. From a technical perspective, the website employs modern JavaScript libraries including jQuery and Slick Carousel, integrates Google Fonts and Google Maps API, and uses HTTPS for secure communications. The site is mobile optimized and provides a good user experience with clear navigation and content relevance. However, there is no detected CMS or hosting provider information, and some accessibility features could be improved. Security-wise, the site uses HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy policy, cookie consent mechanism, or vulnerability disclosure information, which are important for compliance and user trust. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy and registration consistency, especially given the company's claimed long history. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance measures, and clarification of domain registration details to improve trust and reduce risk.
Other · Czech Republic
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website dwa.cz is a domain parking page currently offered for sale via the Sedo platform. It does not represent an active business or service provider but serves as a placeholder with advertising and domain resale information. The site is primarily targeted at general internet users interested in acquiring the domain. The technical infrastructure relies on Sedo's domain parking platform and Google Ads scripts for monetization and tracking. The content is minimal and primarily in Finnish, indicating a regional focus or default language setting. Security posture is minimal with no visible HTTPS enforcement or security headers, and no contact or security policies are provided. Overall, the site presents low business credibility and limited user engagement opportunities.
SYNOT Groupsynot.cz
Technology · Czech Republic
72Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
SYNOT Group is a well-established international gaming technology company founded in 1991, operating in over 45 countries. They provide a comprehensive portfolio of gaming solutions for both land-based casinos and online gaming platforms, including games, cabinets, jackpots, and casino management systems. The company maintains a strong market position with multiple certifications and licenses, reflecting their commitment to quality and compliance. Technically, the website is modern, fast, and mobile-optimized, leveraging contemporary JavaScript frameworks and analytics tools. Security posture is solid with HTTPS enforcement and privacy compliance, though some security headers and incident response details could be improved. The absence of WHOIS data is a minor concern but does not significantly detract from the overall legitimacy given the extensive business information and trust indicators present. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response contacts, and continuous monitoring of third-party scripts.
- Síť očních klinik Lexum
lexum.cz
Healthcare · Czech Republic
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Síť očních klinik Lexum is a leading private healthcare provider specializing in comprehensive eye care services in the Czech Republic and Slovakia. With over 30 years of experience and more than 650,000 successful procedures, Lexum offers a wide range of ophthalmological treatments including laser eye surgery, cataract treatment, glaucoma management, and cosmetic eyelid surgery. The company operates multiple clinics across major cities, providing accessible and specialized care to a broad patient base. Their market position as the largest private eye care provider in the region is supported by contracts with all health insurance companies and a strong reputation evidenced by patient testimonials and professional certifications. Technically, the website is built on WordPress with modern technologies such as jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel integrated for analytics and marketing. The site demonstrates good SEO practices with structured data (JSON-LD) and meta tags, and it is mobile-optimized with responsive design. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, although some security headers are not explicitly detected. Privacy compliance is basic with cookie consent mechanisms present but lacking a clearly accessible comprehensive privacy policy. Overall, the website presents a professional and trustworthy digital presence with clear contact information, detailed service descriptions, and multiple clinic locations. The absence of WHOIS data reduces transparency but is likely due to privacy protection, which is reasonable for a healthcare provider. There are no indications of security vulnerabilities or content blocking, and the site is safe for general audiences.
- Mýdlo s Jelenem
mydlosjelenem.cz
Retail · Czech Republic
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Mýdlo s Jelenem is a Czech e-commerce retailer specializing in traditional laundry and household cleaning products, with a brand heritage dating back to 1848. The website serves as the official online shop for the JELEN product line, offering a variety of detergents, soaps, fabric softeners, and related items. The company targets Czech and Slovak consumers who value ecological and traditional cleaning solutions. The business operates under the parent company Schicht and maintains a consistent brand presence with clear contact information and social media integration. Technically, the website is built on the Shoptet e-commerce platform, utilizing technologies such as jQuery, Google Analytics (UA and GA4), Facebook SDK and Pixel, and various marketing and retargeting tools. The site is mobile-optimized, accessible, and SEO-friendly, though it uses an outdated jQuery version which poses some security risks. The site enforces HTTPS and employs CSRF tokens on forms, with a comprehensive cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site demonstrates good practices including HTTPS enforcement and privacy compliance, but lacks some advanced security headers and uses an older JavaScript library version. No WAF or blocking mechanisms are detected, and no sensitive data exposure is apparent. However, the absence of WHOIS data for the domain reduces transparency and trustworthiness, although the website content and branding appear legitimate. Overall, the site presents a professional and trustworthy e-commerce platform for a traditional Czech brand, with room for technical and security improvements. Strategic recommendations include updating JavaScript libraries, enhancing security headers, and improving domain registration transparency to bolster trust and security posture.
- AAccess to this page has been denied
damejidlo.cz
Other
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.damejidlo.cz is currently inaccessible due to a bot mitigation challenge page implemented using PerimeterX and Google reCAPTCHA Enterprise. This prevents access to any meaningful content, business information, or contact details. The WHOIS lookup returned no registration data, indicating either privacy protection or an unregistered domain, which further limits trust and legitimacy assessment. The technical infrastructure shows use of advanced bot protection technologies but lacks visible security headers or compliance policies. Overall, the site’s security posture is limited to bot mitigation, with no accessible content to evaluate further. The risk assessment is high due to lack of transparency and accessibility, and strategic recommendations include enabling access for legitimate users and publishing essential compliance and contact information.
- CIOtrends
businessworld.cz
Technology · Czech Republic
67Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.ciotrends.cz serves as a Czech language media portal focused on IT strategy and business management topics such as CRM, ERP, BI, and BPM. It targets IT managers and business professionals seeking insights into enterprise information systems and corporate governance. The site demonstrates a professional design with good content relevance and navigation, optimized for mobile devices. Technically, it employs modern JavaScript libraries, Google Analytics, Google Tag Manager, Gemius tracking, and a consent management platform, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and error monitoring via Sentry, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent implemented but no clear privacy or terms of service pages found. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness. Overall, the site is a credible niche media outlet with room for improvement in transparency and security best practices.
Studio DR, sp. z o.o.studiodr.pl
Media · Poland
52Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Studio DR is a Polish media and technology company specializing in professional audio recording, mastering, dubbing, post-production, web solutions, creative media production, and distribution of pro audio equipment. Established in 2009, it holds a significant market position as the main distributor of the popular series The Chosen in Poland. The company targets media professionals, musicians, creative agencies, and audio equipment customers within Poland. Their business model combines service provision with product distribution, supported by a clear brand presence and consistent content quality. Technically, the website is built on WordPress with modern JavaScript libraries and modules, integrating Matomo and Google Analytics for user tracking with privacy considerations. The site is hosted likely by OVH SAS, a reputable provider, and shows moderate performance with good mobile optimization. However, accessibility and SEO optimizations are basic and could be improved. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA on forms, alongside a cookie consent mechanism, indicating awareness of privacy and security best practices. Nonetheless, the absence of DNSSEC, security headers, and a formal security or incident response policy suggests room for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website and business present a trustworthy and professional image with a solid foundation. Strategic enhancements in security policies, technical SEO, and accessibility would further strengthen their digital maturity and compliance posture.
- Aftermarket.pl Limited
shops24h.pl
Technology · Poland
73Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Aftermarket.pl Limited operates the largest domain marketplace in Poland, providing a platform for buying, selling, and auctioning internet domains. The company also offers complementary services such as hosting, mail, website creation, and SSL certificates, targeting businesses and individuals seeking domain names. The website is professionally designed with multilingual support and clear navigation, catering primarily to the Polish market but also accessible in English. The business model revolves around facilitating domain transactions and related services, positioning Aftermarket.pl as a key player in the regional domain marketplace sector. Technically, the website employs modern web technologies including JavaScript frameworks, service workers for progressive web app capabilities, and integrates third-party services like Google Analytics and HelpCrunch for analytics and customer support. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be enhanced. Performance is moderate, with efficient use of external assets and fonts. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating a baseline security posture. However, the absence of explicit security headers and a dedicated security policy page suggests room for improvement. Privacy compliance is strong, with comprehensive GDPR-aligned privacy and cookie policies, including user consent mechanisms. The lack of WHOIS data for the domain reduces trust slightly but does not negate the legitimacy of the business, which is supported by transparent contact options and social media presence. Overall, Aftermarket.pl presents a trustworthy and professional online marketplace with solid technical infrastructure and privacy compliance. Strategic enhancements in security headers, incident response visibility, and WHOIS transparency would further strengthen its security posture and business credibility.
- ZooControl s.r.o.
gosms.cz
Technology · Czech Republic
68Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
GoSMS, operated by ZooControl s.r.o., is a Czech Republic-based SMS gateway service provider targeting businesses seeking to reach customers via SMS marketing. The website presents a professional and consistent brand image with a clear focus on SMS communication services. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Visual Website Optimizer, indicating a mature digital marketing approach. Cookie consent and privacy compliance mechanisms are robust and GDPR-aligned, enhancing user trust and regulatory adherence. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit incident response information, suggesting room for improvement. Overall, the website is accessible with no blocking or WAF challenges, and the domain WHOIS data is privacy protected, which is typical for European domains. The business appears legitimate and well-positioned in its market niche.
Seyforaltus.cz
Technology · Czech Republic
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Vario.cz is a Czech-based ERP software provider offering a modular economic and CRM system tailored for small and medium-sized businesses. The company, operated by Seyfor, a.s., has over 30 years of development experience and a strong market presence with more than 1700 successful implementations and 8000 users. Their ERP system covers a wide range of business functions including finance, supply chain, manufacturing, service, HR, and sales, available both on-premise and in the cloud with mobile applications. The website is professionally designed, well-structured, and optimized for SEO, providing comprehensive information, customer testimonials, and multiple contact channels. Technically, the site runs on WordPress with modern libraries and integrates Google Analytics, Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance. Security posture is good with HTTPS and anti-spam measures, though additional HTTP security headers could enhance protection. WHOIS data is unavailable, limiting domain trust analysis, but the overall business credibility and digital maturity are high. The site complies with GDPR and provides clear privacy and cookie policies. Overall, Vario.cz represents a mature, trustworthy business with a solid technical foundation and good security hygiene.
- Special Hobby
specialhobby.eu
Retail · Czech Republic
65Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Special Hobby operates as a specialized e-commerce retailer and producer of plastic and resin model kits and accessories, targeting hobbyists and modelers primarily in the Czech Republic and surrounding regions. The website presents a professional and content-rich platform with a broad catalog of products, including their own production and other well-known brands. The business model focuses on direct online sales supported by newsletters and a club membership system. Technically, the website uses modern web technologies such as Bootstrap, FontAwesome, and Google Tag Manager, ensuring a responsive and user-friendly experience. However, there is room for improvement in accessibility and SEO optimization. Security posture is adequate with HTTPS enforced and secure login forms, but lacks some advanced security headers and visible privacy compliance mechanisms. The absence of publicly available WHOIS data is due to EURid privacy policies, which is typical for .eu domains and does not detract from the site's legitimacy. Overall, the website is trustworthy and well-positioned in its niche market but should enhance privacy transparency and security best practices.
Education · Czech Republic
52Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Zvidalkove.cz is a small educational business specializing in interactive and playful learning programs for preschool children and kindergartens. The company offers programs focused on first aid basics, healthy lifestyle education, and environmental awareness. The website is professionally designed using WordPress with the OceanWP theme and Elementor page builder, providing a good user experience and clear navigation. The business targets Czech kindergartens and parents interested in early childhood education. Social media presence is established on Facebook and Instagram, enhancing community engagement. Technically, the website employs modern web technologies including HTTPS, cookie consent management via CookieYes, and Google Fonts. While Google Analytics is included, it is not fully configured, indicating room for improvement in analytics deployment. The site is mobile optimized and SEO friendly with comprehensive metadata and structured data. Hosting and domain registration are consistent with the business profile, with the domain registered recently in 2024. From a security perspective, the site uses HTTPS and implements GDPR-compliant cookie consent with granular user controls. However, security headers are not detected, and no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is good, with a clear privacy policy page available. Business credibility is supported by testimonials and clear contact information via email and contact form. Overall, Zvidalkove.cz presents a trustworthy and professional online presence for a new educational business. Strategic improvements in security headers, incident response transparency, and analytics configuration would enhance the security posture and operational insights. The website content is safe for general audiences, focusing on educational material for children.
- MMade in Verden
madeinverden.de
Manufacturing · Germany
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Made in Verden is a regional platform dedicated to promoting products and companies from the Verden district in Germany. The website highlights the economic strengths of the region, focusing on sectors such as manufacturing, logistics, and animal breeding. It serves as an informational and promotional resource for local businesses, emphasizing the region's infrastructure and market presence. Technically, the site is built on WordPress using the Neve theme and Otter blocks plugin, hosted with Cloudflare DNS services. The site is mobile-optimized and uses HTTPS, but lacks advanced security headers and cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities, but improvements in security policies and compliance are recommended. Overall, the website is professional and trustworthy, though it could enhance privacy compliance and user contact options.
Josko windows and doors GmbHjosko.com
Manufacturing · Austria
56Medium
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Josko windows and doors GmbH is an innovative manufacturer specializing in windows, front doors, and interior doors, targeting a general audience primarily in Austria. The company positions itself as a medium-sized manufacturer with a focus on quality and design innovation. The website is powered by TYPO3 CMS and employs modern web technologies including JavaScript and jQuery, with a moderate performance profile and good mobile optimization. The site includes comprehensive privacy and cookie policies with GDPR compliance and a robust cookie consent mechanism, reflecting a mature approach to privacy compliance. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers were detected, and no visible incident response or security policy information is provided. The absence of WHOIS data for the domain is a notable anomaly that impacts trust and business credibility scores. Overall, the website is professional, content-rich, and trustworthy, but could improve transparency and security practices.
SIM2 Multimedia s.r.l.sim2.com
Technology · Italy
57Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
SIM2 Multimedia s.r.l. is an established Italian electronics company specializing in the design, manufacture, and supply of video projection and HDR products for residential and commercial applications. With a domain registered since 1999 and a company history dating back to 1995, SIM2 holds a reputable position in the home theater industry, offering a range of high-performance products and maintaining active engagement through news updates and social media channels. The website reflects a professional digital presence with good content quality and user experience, targeting home theater enthusiasts and commercial clients. Technically, the site leverages WordPress with modern plugins and frameworks, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, though improvements are needed in DNSSEC implementation and HTTP security headers. Privacy compliance is partial, with cookie consent mechanisms in place but lacking explicit privacy and terms of service pages. Overall, SIM2 demonstrates credible business operations with room for enhanced security and compliance maturity.
- GGastro Holding Group a.s.
bodeguita.cz
Hospitality · Czech Republic
55Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
La Bodeguita del Medio Praha is a Cuban restaurant and bar located in Prague, offering authentic Cuban cuisine, cocktails, live music, and a cigar club experience. Established since 2002, it is part of the Gastro Holding Group a.s., serving both tourists and locals seeking a cultural and culinary Cuban experience. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It integrates multiple tracking and advertising technologies with user consent mechanisms, reflecting a mature digital marketing approach. However, the absence of WHOIS data and explicit security policies slightly reduces trustworthiness. The site uses HTTPS and cookie consent banners, but lacks visible security headers and incident response information. Overall, the business appears legitimate and well-positioned in the hospitality sector in Prague.
- KK.V.P. Gastro, a.s.
cafemozart.cz
Hospitality · Czech Republic
54Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Café Mozart is a hospitality business located in Prague's Old Town, offering a unique cafe experience with home-made cakes, coffee, piano concerts, and event hosting. The business leverages its prime location opposite the Prague Astronomical Clock to attract tourists and locals seeking cultural and culinary experiences. The website reflects a professional and consistent brand image with clear contact information and multilingual support. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Maps API, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is generally good with HTTPS and cookie consent mechanisms, though some improvements are recommended in security headers and error handling. The absence of WHOIS data slightly reduces trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, fixing minor code errors, and maintaining GDPR compliance.
- GGrand Hotel Praha
grandhotelpraha.cz
Hospitality · Czech Republic
57Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Grand Hotel Praha is a historic 4-star hotel located in the heart of Prague's Old Town Square, offering a blend of history and modern comfort. The website presents a comprehensive overview of their accommodation options, including rooms, residences, dining at Café Mozart, special offers, concierge services, and event hosting. The business targets tourists and business travelers seeking premium lodging in Prague's city center. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages and featuring integrated Google Maps and social media links. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Google Maps API. It features cookie consent mechanisms compliant with GDPR and uses various marketing and retargeting tools. Performance is moderate with good mobile optimization. However, minor PHP notice errors and lack of explicit security headers indicate areas for improvement in security hardening. Security posture is adequate with HTTPS implied and no exposed sensitive data, but the absence of WHOIS data for the domain raises concerns about domain registration transparency. Cookie and privacy policies are present and comprehensive, supporting GDPR compliance. Overall, the site is trustworthy and professional but would benefit from enhanced security headers and domain registration clarity. Recommendations include fixing PHP errors, implementing security headers, verifying domain registration details, and continuous monitoring of third-party scripts to maintain security and compliance.
Hotel Salvatorsalvatorhotel.cz
Hospitality · Czech Republic
65Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Hotel Salvator is a well-established four-star family wellness hotel located in the spa zone of Karlovy Vary, Czech Republic. The hotel focuses on providing personalized care and comfort to its guests, offering luxury accommodation and wellness services including Chinese medicine. The website supports multiple languages and provides direct booking capabilities through a trusted partner platform. Technically, the site is built on Joomla CMS with modern plugins and frameworks, delivering a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit policies. Overall, the site presents a professional and trustworthy online presence consistent with its business claims.
- virtual-zoom s.r.o.
cigarclub.cz
Hospitality · Czech Republic
50Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Cohiba Atmosphere Bar is a niche hospitality business operating a private cigar club and cocktail bar located in Prague, Czechia. It targets mature adults interested in premium cigars and cocktails, positioning itself as an upscale venue with a membership model. The website content is well-structured and professionally presented, featuring integration with TripAdvisor and social media platforms to enhance trust and customer engagement. However, the business lacks publicly available detailed company registration information and WHOIS data, which slightly reduces overall credibility. Technically, the website employs legacy JavaScript libraries such as jQuery 1.7.2 and jQuery UI 1.8.9, which are outdated and pose security risks. The site uses Google Analytics and Google reCAPTCHA for analytics and bot protection, respectively, and implements a cookie consent banner indicating some privacy awareness. Mobile optimization and accessibility are basic but functional. Security headers are not evident from the provided data, and no advanced security policies or incident response information is published. The security posture is moderate with HTTPS enabled and some security best practices observed, but the use of outdated libraries and missing security headers are notable vulnerabilities. Privacy compliance is basic with a privacy policy and cookie banner present but lacking comprehensive GDPR indicators. Business credibility is supported by clear contact information, social media presence, and partner affiliations, though the absence of WHOIS data and domain registration details is a concern. Overall, the website scores moderately in content quality, technical implementation, security, privacy compliance, and business credibility. Strategic improvements in updating technical components, enhancing security headers, and publishing detailed compliance and incident response policies would significantly improve trust and security posture.