Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,185001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
29,801–29,850 of 99,066
Prowebdesignprowebdesign.ro
Technology · Romania
75Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Prowebdesign is a full-service web design and development company based in Romania, specializing in custom WordPress websites, UI/UX design, digital product design, SEO, and branding services. Established since 2006, the company positions itself as a reliable outsourcing partner with over 15 years of experience and a strong portfolio of diverse projects ranging from small business websites to complex web applications. The website reflects a professional and consistent brand image, targeting businesses seeking quality web solutions at competitive pricing. Technically, the website is built on WordPress with modern technologies including Bootstrap, jQuery, and FontAwesome. It employs Google Tag Manager for analytics and has implemented cookie consent mechanisms to comply with GDPR. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security best practices such as HTTPS are in place, but additional security headers and explicit incident response policies are absent. From a security perspective, the site shows a good baseline with no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS transparency due to privacy protection limits domain trust verification. The website does not display direct contact emails or phone numbers, relying on a contact form instead. Privacy and cookie policies are present and appear compliant with GDPR requirements. Overall, the website is trustworthy, professional, and well-structured, suitable for its business purpose. The main risk lies in the absence of detailed WHOIS data and limited explicit security disclosures. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility features to strengthen compliance and trust.
- DDoména na prodej
mobiloviny.cz
Other · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website mobiloviny.cz currently serves as a domain sale placeholder page, indicating that the domain is available for purchase. It provides a contact email for offers and lists numerous other domains available for sale, each with brief descriptive text. The business model is focused on domain brokerage and sales, targeting potential buyers and investors interested in acquiring domains. The website is simple, with basic content and minimal interactive features. From a technical perspective, the site uses basic HTML and CSS with no detected CMS or advanced frameworks. Hosting appears to be provided by a Czech hosting provider, consistent with the domain's Czech origin. The site is mobile responsive with basic accessibility but lacks SEO optimization and modern technical enhancements. No analytics or tracking technologies are detected. Security posture is minimal; no HTTPS status is confirmed from the data, no security headers are present, and no privacy or cookie policies exist. Contact information is limited to a single email address with no phone or physical address. There are no forms or data collection mechanisms, reducing exposure to input-based vulnerabilities but also limiting user engagement. Overall, the site is low risk but also low trust and professionalism due to lack of policies, security features, and business information. The domain registration data is consistent and supports legitimacy. Strategic improvements in security, privacy compliance, and business transparency are recommended to enhance trust and potential buyer confidence.
- Vega TEAM
redaktori.cz
Media · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website redaktori.cz represents a small Czech copywriting and advertising text service business operating under the brand Vega TEAM. The company offers a range of text-related marketing services including web content, e-shop product descriptions, PR articles, and email newsletters. The site is professionally designed with clear navigation and targets businesses and individuals seeking quality copywriting services in the Czech Republic. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, and integrates Google Analytics and Google reCAPTCHA for tracking and security. Hosting is provided by Czech-based providers consistent with the business location. Security posture is moderate with basic protections but lacks visible security headers and explicit HTTPS confirmation in the provided data. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a company email address with no phone or physical address listed. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.
- Vega TEAM
reklamnistudio.cz
Other · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Vega TEAM operates as a full-service advertising and internet studio based in the Czech Republic, specializing in a broad range of services including graphic design, advertising production, online marketing, animation, web development, and mobile applications. Established since 1999, the company targets businesses and organizations seeking comprehensive marketing and digital solutions. Their market position is that of a small but established player with a consistent brand and a professional online presence. Technically, the website employs a traditional tech stack with jQuery, FlexSlider, Google Analytics, and a live chat service. While the site is functional and moderately optimized for mobile, it lacks modern security features such as HTTPS enforcement and updated libraries, which could impact user trust and security. SEO and content quality are good, but accessibility and performance could be improved. From a security perspective, the absence of HTTPS enforcement, security headers, and privacy/cookie policies indicates a low security maturity level. The lack of WHOIS data raises concerns about domain legitimacy, although the website content and business information suggest a legitimate operation. No incident response or security policies are published, and outdated JavaScript libraries present potential vulnerabilities. Overall, the website is professional and content-rich but requires significant improvements in security posture and privacy compliance to meet modern standards. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, updating libraries, and verifying domain registration details to enhance trust and compliance.
- CChristian Schmidt
christian-schmidt.org
Technology · Germany
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Christian Schmidt's website presents a professional profile of an experienced SEO consultant, data scientist, and software developer based in Germany. The business focuses on providing technical SEO consulting, data science services, and web/software development, targeting businesses and professionals seeking these services. The website is built on WordPress using modern themes and plugins, with good mobile optimization and SEO practices. However, the lack of visible contact emails or phone numbers on the homepage and absence of cookie consent mechanisms indicate areas for improvement in user engagement and privacy compliance. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for personal consultancy websites. Overall, the site is professional, secure with HTTPS, and provides clear business information and social media presence.
KeywordMonitorkeywordmonitor.de
Technology · Germany
64Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
KeywordMonitor is a German-based SEO keyword monitoring service that provides daily tracking of keyword rankings and SEO metrics for individuals and businesses ranging from solo SEO practitioners to large enterprises. The website is professionally designed, built on WordPress, and uses Cloudflare for DNS and hosting. It offers features such as keyword ranking development, SEO value tracking, project and keyword group management, data export, and an API for integration. The site is well-optimized for SEO and mobile devices, with clear navigation and consistent branding. Privacy and cookie policies are present, indicating GDPR compliance, although no explicit terms of service or security policies are published. No contact emails or phone numbers are directly visible on the homepage or footer, which may limit direct contact options.
- Zotabox
zotabox.com
E-commerce
71Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Zotabox operates as a SaaS platform providing over 20 marketing tools aimed at e-commerce businesses to increase sales and subscriber counts. The website info.zotabox.com serves as a marketing landing page showcasing features such as popups, header bars, notification boxes, contact form builders, and social media integrations. The company positions itself as trusted by over 10,000 e-commerce businesses with a strong customer review base. Technically, the site is built on WordPress with Bootstrap and integrates multiple modern JavaScript libraries and tracking services including Google Analytics, Facebook Pixel, Microsoft Clarity, and Crisp Chat. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. Privacy compliance is basic with privacy and cookie policies present and cookie consent mechanisms implemented. The WHOIS data for the subdomain is unavailable, which is typical, but the overall domain ecosystem and branding indicate legitimacy. Overall, the site is professional, well-structured, and targets e-commerce merchants seeking marketing enhancement tools.
- VVALBEK-EU, a.s.
valbek.com
Transportation · Czech Republic
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
VALBEK-EU, a.s. is a parent company of a group of 13 subsidiaries operating primarily in engineering, design, construction, and infrastructure management across the Czech Republic, Slovakia, Ukraine, and Sweden. The company offers a comprehensive portfolio of services including design, technical supervision, construction, geology, ecology, and software development tailored for the construction industry. Their market position is that of a large, established regional player with a broad service offering and multiple subsidiaries supporting diverse engineering disciplines. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information, including contact details and compliance policies. Technically, the site uses established JavaScript libraries and frameworks but lacks some modern security headers and a security.txt file. The security posture is good with HTTPS enforced and cookie consent mechanisms in place, though improvements are recommended in security headers and incident response transparency. The WHOIS data is missing or unavailable, which is unusual but the website content and business information appear legitimate. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, with a total AI score of 78 out of 100.
- Aallegro.cz
mall.cz
Other · Czech Republic
66Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website allegro.cz currently presents a security challenge page that blocks access to its full content, likely due to bot mitigation or WAF protections. As a result, no direct business information, policies, or contact details are accessible for analysis. The domain is registered since 2017 under REG-IPMIRROR with name servers linked to allegro.pl, consistent with Allegro Group's regional presence. The lack of accessible content limits the ability to assess the website's technical maturity, security posture, and compliance status. The visible infrastructure includes captcha-delivery.com scripts indicating active security measures to prevent automated access. Overall, the site appears legitimate but inaccessible for detailed evaluation.
- AF POWER agency a.s.
allforpower.cz
Energy · Czech Republic
53Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
AF POWER agency a.s. operates the website allforpower.cz, a specialized and professionally curated magazine and information platform focused on the energy sector in the Czech Republic. The company publishes a quarterly magazine and provides online news, articles, and event promotion related to energy engineering, legislation, cybersecurity, and critical infrastructure protection. The website targets professionals in the energy industry, public sector, academia, and related manufacturing and trading entities. The business model centers on publishing and advertising services within the energy sector, supported by a consistent brand presence and a medium-sized company footprint founded in 2007. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Tag Manager for analytics, and Google reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some security headers are missing, representing an opportunity for enhancement. Privacy compliance is strong, with clear GDPR policies and cookie consent mechanisms implemented. From a security perspective, the site benefits from HTTPS encryption and bot protection but lacks explicit security policies and incident response contact channels. No critical vulnerabilities or suspicious patterns were detected. The domain registration is consistent with the business profile, showing a long-standing presence since 2007, enhancing trustworthiness. Overall, the website presents a professional, secure, and compliant platform with good content quality and business credibility. Strategic improvements in security headers and incident response documentation could further strengthen its posture.
InnoTransinnotrans.com
Transportation · Germany
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
InnoTrans is a prominent international trade fair specializing in transport technology, offering a comprehensive platform for industry professionals, exhibitors, and visitors. The website reflects a mature digital presence built on modern technologies such as React and Next.js, with a content management system likely powered by Episerver. The site provides extensive information about the event, including exhibitor directories, programs, and press releases, although explicit privacy and terms of service pages are not detected in the provided content. Security measures include HTTPS enforcement and cookie consent via Usercentrics, but lack of visible security headers and incident response contacts suggest room for improvement. Overall, the website is professional and trustworthy, serving a large audience in the transportation sector primarily in Germany.
Česká Betonářská Společnost ČSSIcbsbeton.eu
Manufacturing · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Česká Betonářská Společnost ČSSI (ČBS) is a Czech professional society dedicated to concrete technology, education, and industry events. The organization provides conferences, seminars, competitions, and publications to support professionals and students in the concrete construction sector. The website reflects a well-established entity with a clear focus on knowledge dissemination and community engagement within the Czech Republic and internationally. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and integrates analytics tools such as Matomo and Google Analytics, alongside Google Tag Manager and reCAPTCHA for security and tracking. The security posture is solid with HTTPS enforced and bot protection, though it lacks some advanced security headers and explicit security policies. Privacy compliance is well addressed with GDPR consent and cookie management. Overall, the site is professional, trustworthy, and safe for general audiences, with no signs of malicious content or vulnerabilities.
Nadační fond Modrý hrochmodryhroch.cz
Non-profit · Czech Republic
52Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Nadační fond Modrý hroch is a Czech non-profit foundation established in 2005, dedicated to helping children who have suffered serious injuries or have severe physical handicaps. The foundation supports surgical and trauma departments in hospitals and focuses on the prevention of childhood injuries. Their business model relies on donations, volunteer engagement, and fundraising events, including an e-shop. The website is professionally designed, mobile-optimized, and provides clear navigation and calls to action for donations and volunteering. Technically, the site uses modern frameworks such as Uikit and is powered by the cPilot CMS, hosted by Active24. It integrates Google Analytics, Facebook Pixel, and Google Tag Manager for analytics and marketing purposes. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the domain registration data is consistent and supports the legitimacy of the organization.
- Retail Club CZ
retailclub.cz
Retail · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Retail Club CZ is a Czech-based interest group targeting owners, executives, and top management of retail stores and chains. The organization facilitates regular informal meetings to share business experiences and knowledge, aiming to support the effective development of its members' businesses. The website is professionally designed using WordPress and the Divi theme, with SEO and GDPR compliance plugins implemented. It provides clear information about the club's purpose and activities, targeting retail professionals in the Czech Republic. However, no direct contact emails or phone numbers are visible, relying on a contact form for communication. The domain WHOIS data is unavailable, which raises some concerns about domain legitimacy, but the website content and structure suggest a legitimate business presence.
POS Media Czech Republic, s.r.o.posmedia.cz
Media · Czech Republic
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
POS Media Czech Republic, s.r.o. is a European leader in shopper marketing and media agency services, specializing in in-store advertising, influencer marketing, and digital out-of-home campaigns. The company targets brands and retailers aiming to influence customer behavior at the point of sale. Their website reflects a professional and modern digital presence with comprehensive service descriptions and a strong brand identity. Technically, the site employs standard modern web technologies including Google Analytics and Google Tag Manager for tracking, and it is well optimized for mobile devices with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS data for the domain is a notable concern for domain legitimacy and trustworthiness, though the website content and social media presence support a credible business profile. Overall, the site is well designed and functional, but verification of domain registration and enhancement of security policies are recommended.
- Hamburg Messe und Congress GmbH
hamburg-messe.de
Hospitality · Germany
62Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Hamburg Messe und Congress GmbH is a prominent event organizer and venue operator based in Hamburg, Germany. The company manages a large exhibition and congress center hosting over 40 successful trade fairs and events annually, serving a diverse audience including business professionals and the general public. Their venue infrastructure includes 11 halls with extensive indoor and outdoor exhibition space, positioning them as a leading player in the hospitality and event management sector in Germany. The website reflects a mature digital presence with comprehensive event information, career opportunities, and corporate social responsibility content. Technically, the site is built on TYPO3 CMS, integrates modern tracking and consent management tools, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain and website content are consistent and trustworthy, supporting a high level of business credibility.
- VK Tranzits, SIA
vkekspedicija.lv
Transportation · Latvia
53Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
VK Ekspedīcija is a Latvian freight forwarding and logistics company specializing in the transportation of dangerous goods and wholesale of chemical products such as methanol. The company operates as part of a holding group with related subsidiaries focused on logistics, chemical production, and terminal services. Their market position is that of a regional logistics provider with a focus on specialized cargo handling. Technically, the website employs modern JavaScript libraries and frameworks including jQuery, Bootstrap, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and business information. Security posture is adequate with HTTPS usage and cookie consent but lacks explicit security headers and vulnerability disclosure mechanisms. Overall, the website is professional and trustworthy with good privacy compliance and business credibility.
PVA EXPO PRAHA / ABF, a.s.forinterior.cz
Retail · Czech Republic
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
FOR INTERIOR is a well-established Czech trade fair focused on furniture, interior design, and home decor, organized by ABF, a.s. The event attracts thousands of visitors and hundreds of exhibitors, positioning itself as a key industry platform in the region. The website reflects a mature digital presence with good content quality, clear navigation, and consistent branding. Technically, it is built on WordPress with modern libraries and SEO optimizations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or privacy issues were detected. Overall, the site supports the business goals effectively and maintains a trustworthy image.
Institut Interiérových designérůdesigninstitut.cz
Other · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Institut Interiérových designérů is a Czech professional institute dedicated to interior design professionals, providing resources such as ethical codes, events, and a B2B magazine. The website is well-structured, professionally designed, and targets interior designers and furniture manufacturers primarily in the Czech Republic. The business model appears to be non-profit or professional association focused on industry support and networking. Technically, the site is built on WordPress with common libraries like jQuery and Swiper.js, hosted likely with Czech providers, and shows moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are recommended for compliance and trust. Overall, the site is trustworthy and professional but could improve privacy compliance and security best practices.
MACHIN.CZ s.r.o.machin.cz
Technology · Czech Republic
60Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
MACHIN.CZ s.r.o. is a Czech Republic-based technology service provider specializing in web development, e-commerce solutions, graphic design, and digital marketing. With over 20 years of market presence and more than 650 clients served, the company offers a comprehensive suite of services including website creation, e-shop development, hosting, and marketing consultancy. The website reflects a professional and consistent brand image targeting businesses seeking digital transformation and online presence enhancement. Technically, the site employs modern frameworks such as Bootstrap, jQuery, and the Nette PHP framework, ensuring a responsive and user-friendly experience. The hosting and domain registration are consistent with the company's Czech origin and long-standing operation. Security-wise, the website enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and uses reputable analytics and advertising tools like Google Analytics and Facebook Pixel. No critical vulnerabilities or exposed sensitive data were detected, though security headers could be improved. Overall, the site demonstrates a mature digital infrastructure and a strong commitment to privacy and user experience.
- TTruhlářství Suchý
truhlarstvisuchy.cz
Other · Czech Republic
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Truhlářství Suchý is a small woodworking and carpentry business operating a basic WordPress website primarily targeting local customers in the Czech Republic. The website content is minimal, featuring a default blog post and limited business information. The technical infrastructure is standard for a small business, utilizing WordPress CMS with basic mobile optimization and moderate performance. Security posture is basic with HTTPS enabled but lacking important security headers and privacy compliance documentation. No contact or social media information is provided, limiting business credibility and user trust. Overall, the site is functional but lacks maturity in security, privacy, and business transparency.
Seonet Multimedia s.r.o.gigaserver.cz
Technology · Czech Republic
73Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
GIGASERVER.CZ, operated by Seonet Multimedia s.r.o., is a well-established Czech web hosting and domain registration provider targeting customers primarily in the Czech Republic. The company offers a range of services including domain registration, various web hosting plans, dedicated servers, SSL certificates, and 24/7 customer support. The website reflects a professional and consistent brand image with a focus on reliability and customer service, boasting a 99.99% uptime guarantee and a strong customer rating. Technically, the website employs modern JavaScript libraries and integrates multiple analytics and monitoring tools such as Google Analytics, Facebook Pixel, and Sentry for error tracking. The site is mobile-optimized and provides a good user experience with clear navigation and interactive features like domain availability checks and pricing calculators. However, some security best practices such as explicit security headers are not evident, and no privacy policy is directly found on the main page. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, indicating a baseline compliance with privacy regulations. The absence of WHOIS data due to registry or privacy protection limits domain age verification, but the business claims over 15 years of market presence. No critical vulnerabilities or suspicious content were detected, and the site maintains a safe content rating. Overall, GIGASERVER.CZ presents a credible and professional hosting service with moderate to good technical and security posture. Strategic improvements in privacy policy transparency and security header implementation would enhance compliance and trustworthiness.
Metatron Capitalmetatroncapital.eu
Finance · Slovakia
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Metatron Capital is a Slovak-based financial services company specializing in fund and portfolio management. The company offers several investment funds with distinct strategies, including long-term equity, event-driven, and AI sector funds. It maintains strong partnerships with reputable brokers, banks, auditors, and regulators, ensuring transparency and compliance. The website is built on WordPress using Elementor, featuring modern web technologies and a cookie consent mechanism compliant with GDPR principles. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and explicit policies could be improved. Contact information is available via professional emails and social media, but no phone numbers or physical addresses were found in the provided content.
AMISTA investiční společnost, a.s.amista.cz
Finance · Czech Republic
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
AMISTA investiční společnost, a.s. is a specialized Czech investment company focusing on funds for qualified investors. Established in 2007, it offers a comprehensive suite of fund-related services including structuring, founding, administration, management, and advisory. The company serves a significant portfolio with 29 billion CZK in assets and 25 funds under management, supported by a team of 15 experts. The website reflects a professional and trustworthy image, targeting qualified investors and financial professionals in the Czech Republic. Technically, the website is built on CMS Animato with modern JavaScript libraries such as jQuery and Photoswipe. It employs Google Analytics for visitor tracking with a clear cookie consent mechanism, indicating good privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are not explicitly detected and could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data transparency is a concern, slightly reducing trustworthiness. The company demonstrates compliance with GDPR and provides comprehensive privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, AMISTA presents a secure, professional, and compliant online presence suitable for its financial services business. Strategic improvements in security headers and WHOIS transparency would further strengthen its trust profile.
- Český fond půdy
fondpudy.cz
Real Estate · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Český fond půdy is a Czech investment fund specializing in agricultural land acquisition and management, targeting long-term sustainable growth and soil fertility preservation. The fund pools private and institutional investors to consolidate fragmented land parcels into larger, better-managed holdings, generating rental income and capital appreciation. The website is built on WordPress with Elementor and uses standard tracking tools like Google Analytics. Contact information is clearly provided, but privacy and cookie policies are missing, indicating compliance gaps. Security posture is moderate with HTTPS enabled but outdated JavaScript libraries and missing security headers. WHOIS data is unavailable, limiting domain trust verification. Overall, the site presents a professional investment opportunity with room for technical and compliance improvements.
Finance · Czech Republic
70Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Amundi Czech Republic Asset Management, a.s. operates a professional investment management website targeting Czech retail investors and financial advisors. The company is positioned as a leading European asset manager with a strong market presence and a comprehensive portfolio of investment products including funds, ETFs, and portfolio management services. The website demonstrates a mature digital infrastructure built on Drupal CMS with modern front-end frameworks and analytics tools, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are absent. The lack of WHOIS data reduces domain trustworthiness, but the overall site professionalism and branding consistency support legitimacy. Strategic recommendations include publishing security policies, incident response contacts, and improving domain registration transparency.
- Franklin Templeton
franklintempleton.cz
Finance · Czech Republic
71Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Franklin Templeton is a globally recognized investment management firm with a localized Czech Republic website targeting investors and financial professionals. The site presents information about investment products and services, reflecting a mature business model in the finance sector. The technical infrastructure leverages modern JavaScript frameworks and integrates standard compliance tools such as OneTrust for cookie consent and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit privacy and terms of service documentation. Overall, the website is professional and trustworthy but could improve transparency and compliance documentation to enhance user trust and regulatory adherence.
- BNP Paribas Asset Management
bnpparibas-am.com
Finance · France
75Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
BNP Paribas Asset Management is a leading global asset management firm providing a wide range of investment solutions to institutional and retail clients. As a subsidiary of BNP Paribas, it benefits from strong brand recognition and a robust market position in the finance sector. The website reflects a professional corporate presence with comprehensive information about their services and compliance policies. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although the absence of public WHOIS data slightly reduces domain trust. Overall, the site demonstrates a mature digital infrastructure suitable for an enterprise-level financial institution.
365.invest365invest.sk
Finance · Slovakia
72Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
365.invest is a well-established Slovak asset management company specializing in investment funds including real estate, bond, mixed, and equity funds. The company targets retail investors in Slovakia, offering accessible investment options starting from 20 euros, supported by a modern online and mobile app platform. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site uses Angular framework, integrates Google Tag Manager and LuigisBox for analytics, and is hosted on Websupport with DNSSEC and HTTPS enabled, indicating a secure and modern infrastructure. Security posture is strong with no visible vulnerabilities or exposed sensitive data, though explicit security policies and incident response details are not published. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high professionalism and trustworthiness with a strong market position in Slovak finance and real estate investment sectors.
- Magnus Art Galerie J&T Banky
galeriemagnusart.cz
Other · Czech Republic
66Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Galerie Magnus Art is a Czech art gallery supported by J&T Banka, focusing on contemporary art exhibitions and promoting young artists through curated collections such as the 'fivewords' project. The gallery targets art collectors and enthusiasts, providing free guided tours and fostering a community around art appreciation. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools with a consent management platform to comply with privacy regulations. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be improved. The domain registration is consistent with the business profile, enhancing trustworthiness.
Forbesforbes.sk
Media · Slovakia
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Forbes Slovakia operates as a leading Slovak business and success magazine, delivering high-quality content focused on business, economy, and wealth. The website offers subscription services, newsletters, and events, targeting professionals and business enthusiasts in Slovakia. The brand is well-established with consistent branding and a professional online presence. Technically, the site is built on WordPress with modern technologies including React components, Tailwind CSS, and integrates Google Tag Manager and Google Analytics for marketing and analytics. Cookie consent is managed via Cookiebot, supporting GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The site lacks explicit privacy policy and terms of service links in the provided content, which is a compliance gap. Overall, the website is professional, secure, and trustworthy with room for improvement in privacy transparency and security header implementation.
KKCGkkcg.com
Energy · Switzerland
75Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
KKCG is a well-established investment and innovation group headquartered in Switzerland, operating across multiple sectors including entertainment, energy, technology, real estate, and diversified ventures. With a presence in over 40 countries and a significant EBITDA exceeding €1.5 billion, KKCG positions itself as a major multinational player leveraging its own resources to transform industries. The company maintains a professional and modern digital presence, utilizing advanced web technologies and analytics tools to engage its audience effectively. Social media integration and multilingual support further enhance its global reach. Security-wise, KKCG employs HTTPS, security headers, and reputable hosting and DNS providers, reflecting a strong security posture. However, the absence of an explicit privacy policy and security incident response information suggests areas for improvement in compliance and transparency. Overall, KKCG demonstrates a high level of business credibility and digital maturity, with recommendations to enhance privacy disclosures and formalize security policies to align with best practices.
JTZEjtze.cz
Energy · Czech Republic
66Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
JTZE is a large agricultural group operating primarily in the Czech Republic and Slovakia, managing extensive land holdings and specializing in plant and animal primary production as well as renewable energy. The company emphasizes sustainable farming practices, modern technology adoption, and strong community engagement. The website is built on WordPress with modern plugins and shows good digital maturity with GDPR compliance and cookie consent mechanisms in place. Security posture is decent with HTTPS and anti-spam measures, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the professional website and detailed business information support legitimacy. Overall, JTZE presents a credible and well-structured online presence.
Media · Slovakia
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Tlačová agentúra Slovenskej republiky (TASR) is the official press agency of Slovakia, providing comprehensive news coverage including domestic, economic, foreign, sports, and cultural news. The agency operates multiple media services such as live video streaming (TASR TV), photo services, and PR services, targeting media professionals, government entities, and the general public. The website is professionally designed with consistent branding and clear navigation, reflecting its position as a trusted government news source. Technically, the website employs a legacy jQuery stack alongside modern analytics and advertising tools like Gemius and Google Tag Manager. The CMS used is Malina, a custom editorial system. While the site is served over HTTPS with cookie consent mechanisms in place, some technical aspects such as mobile optimization, accessibility, and security headers could be improved to enhance user experience and security posture. From a security perspective, the site enforces HTTPS and includes GDPR-compliant privacy and cookie policies. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms such as a security.txt file. The use of outdated JavaScript libraries poses potential security risks. No critical vulnerabilities or suspicious content were detected. Overall, TASR's website demonstrates a solid business and technical foundation appropriate for a government press agency, with room for security and technical enhancements to maintain trust and compliance in a rapidly evolving digital environment.
Finance · Czech Republic
75Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
J&T INVESTIČNÍ SPOLEČNOST, a.s. operates a professional investment portal focused on providing detailed information about various investment funds available to retail and qualified investors in the Czech Republic. The company positions itself as one of the largest and most respected investment firms in the domestic market, offering a wide range of fund products including bonds, equities, private equity, and mixed assets. The website features comprehensive fund data, investor guidance tools, and educational content to assist users in making informed investment decisions. Technically, the website employs modern web technologies including JavaScript, SVG graphics, and CSS with frameworks such as Nette and Swiper for interactive components. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Analytics and marketing tools like Google Analytics, Google Tag Manager, and Mautic are integrated for data collection and user engagement. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain is a notable gap, slightly impacting the overall trust score. Overall, the website demonstrates a strong business presence with professional design and content quality, good privacy compliance, and a solid technical foundation. Strategic improvements in security transparency and domain registration verification would further strengthen its security posture and credibility.
Typothequetypotheque.com
Technology
70Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Typotheque is a specialized type foundry offering unique, high-quality fonts for print and digital screens, including custom font design services supporting a wide range of global languages. The company has a niche market position focused on designers, publishers, and organizations requiring bespoke typography solutions. The website is built on modern web technologies such as Next.js and React, hosted on Vercel, and demonstrates excellent performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and hCaptcha integration, though explicit privacy and cookie policies are missing. WHOIS data is unavailable, which slightly reduces trust but the professional website and contact information mitigate concerns. Overall, Typotheque presents a credible and professional online presence with room for improvement in privacy compliance and domain transparency.
- Connecting Africa
connectingafrica.com
Technology
74Medium
NIS2 59 · GDPR 85
NIS2 59 · GDPR 85
Connecting Africa is a reputable online news portal focused on technology and telecommunications developments across Africa. It operates under the umbrella of Informa PLC, a well-established global information services company. The website provides daily news coverage on mobile innovations, fintech, startups, and business news relevant to the African digital landscape, targeting professionals, investors, and stakeholders in the tech and telecom sectors. The platform maintains a consistent brand identity and offers a user-friendly experience with good content relevance and navigation. Technically, the website leverages modern web technologies including React, New Relic monitoring, Google Tag Manager, and a consent management platform to ensure performance, analytics, and privacy compliance. The site is mobile-optimized and employs standard advertising and tracking services typical for media outlets. Privacy and cookie policies are clearly presented, reflecting GDPR compliance and user consent mechanisms. From a security perspective, the site uses HTTPS and integrates monitoring tools but lacks explicit published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS registration data reduces transparency but is offset by the clear association with Informa PLC, enhancing trustworthiness. Overall, Connecting Africa presents a solid digital presence with good content quality, technical implementation, and privacy compliance. Strategic improvements include publishing explicit security policies, incident response information, and vulnerability disclosure mechanisms to further enhance security posture and user trust.
Záhradný obchodzahradnyobchod.sk
Retail · Slovakia
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Záhradný obchod is a Slovak-based e-commerce retailer specializing in garden products such as decorative items, plant containers, gardening helpers, and gifts. The website targets gardening enthusiasts and home gardeners within Slovakia, offering a curated selection of products through a WooCommerce-powered platform. The business maintains a consistent brand presence and leverages social media channels to engage its audience. Technically, the website is built on WordPress with modern plugins and scripts, providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are absent. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.
Messe Düsseldorf GmbHeuroshop.de
Retail · Germany
63Medium
NIS2 47 · GDPR 85
NIS2 47 · GDPR 85
EuroShop is a globally recognized retail trade fair organized by Messe Düsseldorf GmbH, hosting a large-scale event in Düsseldorf, Germany. The website provides comprehensive information about the event, exhibitor services, visitor preparation, and media resources. The technical infrastructure leverages modern web technologies including Vue.js, Matomo analytics, and Usercentrics for consent management, indicating a mature digital presence. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. The site is free from blocking mechanisms and adult content, targeting retail professionals worldwide.
- KKaltura
kaltura.com
Technology
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Kaltura is a leading enterprise video platform provider specializing in AI-infused video solutions for webinars, events, training, virtual classrooms, and streaming. The company is well-positioned in the technology sector with a strong market presence, recognized by Gartner and trusted by top global organizations. Their business model focuses on delivering scalable, secure, and personalized video experiences powered by AI to enhance engagement and ROI. Technically, the website is built on WordPress with modern SEO and performance optimizations, integrating marketing tools like Marketo and Google Tag Manager. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts could be improved. Overall, the site reflects a mature digital infrastructure and professional business credibility.
- 亿亿百媒会展(上海)有限公司
imconlinereg.com
Other · China
63Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.imconlinereg.com serves as an online registration platform for Informa Markets China, a division of the global event organizer Informa PLC. It facilitates audience registration for various events in China and Asia, targeting event attendees and exhibitors. The business operates in the event management sector and leverages a WordPress-based infrastructure with Elementor for content management and presentation. The website content is primarily in Simplified Chinese, reflecting its regional focus. The site links to official Informa Markets privacy and terms policies, reinforcing its corporate affiliation. Technically, the website uses modern web technologies including jQuery and Elementor on WordPress CMS. The site is mobile optimized with moderate performance and basic SEO and accessibility features. No significant security headers were detected, but HTTPS is enforced, ensuring encrypted communications. The absence of explicit contact information and security policies on the site suggests room for improvement in transparency and compliance. No WAF or blocking mechanisms were detected, indicating full accessibility. From a security perspective, the site demonstrates a basic but adequate posture with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the lack of security headers and incident response contacts indicates potential gaps. The WHOIS data is unavailable or not published, which is inconsistent with the active website presence and may warrant further investigation. Overall, the site appears legitimate and professionally maintained but could enhance security and compliance disclosures. Strategically, the site supports Informa Markets’ event business in China, providing a digital channel for audience engagement. Enhancing security policies, contact transparency, and compliance mechanisms would strengthen trust and regulatory adherence. Regular security audits and improved accessibility would further improve the user experience and risk posture.
- GUARANT International spol. s r. o.
iigann2025.com
Healthcare · Czech Republic
58Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
The website www.iigann2025.com serves as the official platform for the 18th International Symposium on IgA Nephropathy, scheduled for September 2025 in Prague. It provides comprehensive event-related information including scientific programmes, registration details, important dates, and social activities. The site targets healthcare professionals and researchers specializing in nephrology, positioning itself as a niche but reputable event within the medical community. The business behind the site is GUARANT International spol. s r. o., a small entity focused on event organization within the healthcare sector. Technically, the website is built on the Webnode CMS platform and leverages modern web technologies including JavaScript, CSS, and AWS Cloudfront CDN for hosting. Google Analytics is integrated with IP anonymization to track visitor metrics, and a cookie consent mechanism is implemented to comply with privacy regulations. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. From a security perspective, the site uses HTTPS URLs but lacks visible HTTP security headers and does not provide a privacy policy or terms of service pages. No contact information for security incidents or data protection officers is available. The WHOIS data is missing or inaccessible, raising concerns about domain registration legitimacy. However, the professional nature of the content and compliance with recognized ethical codes provide some trust signals. Overall, the website is functional and professional but would benefit from enhanced security practices, transparent privacy documentation, and verified domain registration to improve trustworthiness and compliance.
- GUARANT International spol. s r. o.
spondylo-dm2025.cz
Healthcare · Czech Republic
66Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website www.spondylo-dm2025.cz serves as the official platform for the XXIII Congress of the Czech Spondylochirurgical Society, organized by the Neurochirurgical Clinic in Hradec Králové and managed by GUARANT International spol. s r. o. It targets medical professionals specializing in neurosurgery and related fields, providing detailed event information, schedules, registration, and contact details. The business model revolves around event organization and professional congress hosting within the healthcare sector in the Czech Republic. The site positions itself as a niche, professional medical event organizer with a clear focus on quality and specialist audience engagement. Technically, the website is built on the Webnode CMS platform, leveraging Cloudfront CDN for content delivery and integrating Google Analytics with IP anonymization to monitor traffic. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are present but could be enhanced. The cookie consent mechanism is implemented with an opt-in model, reflecting awareness of privacy compliance, although a dedicated privacy policy page is absent. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a concern, reducing trustworthiness and suggesting the need for further verification. No incident response or security policy information is published, indicating room for improvement in transparency and readiness. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced security practices, clearer privacy documentation, and domain registration transparency to strengthen its risk posture and compliance standing.
Other
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website wscts.net currently serves a 403 Forbidden error page, indicating that access to the content is restricted or blocked. There is no accessible business information, contact details, or policies available on the site. The domain is registered since 2012 with NameCheap and hosted on SiteGround, but the lack of content and contact information limits the ability to assess the business or its market position. Technically, the site uses basic HTML and CSS with Google Fonts, but lacks security headers and DNSSEC, which are recommended for improved security. The security posture is minimal due to the absence of these protections and the blocked content. Overall, the site appears inactive or restricted, resulting in a low trust and credibility score.
CircleCelljsonlint.com
Technology
67Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
JSONLint.com is a well-established online tool founded in 2008 and maintained by CircleCell. It provides free JSON validation, formatting, and compression services targeted primarily at developers and programmers working with JSON data. The website is positioned as a niche utility with a strong reputation, supported by advertising revenue and a small but focused user base. The site uses modern web technologies including React and Next.js, hosted behind Cloudflare DNS and CDN services, ensuring good performance and availability. The content is rich, relevant, and professionally presented with clear navigation and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections in place, though some security headers and policies could be improved. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service. No contact emails or phone numbers are published, limiting direct user support channels. Overall, JSONLint.com is a trustworthy and professional service with room for enhancement in privacy and security transparency.
- 500px
500px.com
Media
69Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
500px is a well-established online photography community platform founded in 2004, offering photo sharing, inspiration galleries, licensing, and memberships. It targets photographers and creative enthusiasts globally, positioning itself as a prominent media platform in the photography sector. The website demonstrates a professional design with consistent branding and good content relevance, supporting a large user base. Technically, the site uses modern technologies including React, Google Tag Manager, Facebook Pixel, and Hotjar, hosted on AWS infrastructure, indicating a mature digital presence. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS and domain protections, but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and extensive tracking scripts without clear consent mechanisms. Overall, the site is trustworthy and professional but should improve privacy transparency and security disclosures.
Authentic Jobsauthenticjobs.com
Technology · United States
71Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Authentic Jobs operates as a specialized online job board targeting designers, developers, and creative professionals. Established in 2006, it has positioned itself as a niche platform within the technology and creative employment sectors. The website offers job listings and employer posting services, catering to a medium-sized audience primarily in the United States. The platform leverages modern analytics and marketing technologies such as Google Analytics, Hotjar, and Mailchimp, indicating a mature digital infrastructure. Hosting and DNS services are managed via Cloudflare, enhancing performance and security. Security posture is solid with HTTPS enabled and domain transfer protections in place, though improvements are recommended in DNSSEC implementation and security policy disclosures. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-established, but would benefit from enhanced transparency in privacy and security practices.
Authentic Creatives, LLCclipart.com
Media
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Clipart.com, operated by Authentic Creatives, LLC, is a well-established digital media platform specializing in royalty-free clipart images, vectors, and creative assets. Founded in 1998, it offers a large catalog of over 21 million items targeting general audiences including educators, designers, and hobbyists. The business model combines subscription and pay-per-download services, supported by an e-commerce store and related partner sites such as a school edition and animation content providers. The website demonstrates consistent branding and professional content presentation, positioning it as a reputable player in the digital clipart market. Technically, the site uses a custom CMS with a technology stack including jQuery, Google Analytics, Hotjar, and Cloudflare DNS services. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. Security posture is solid with HTTPS enforced and domain transfer protections, but DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Security evaluation shows no blocking or WAF challenges, no exposed sensitive data, and no visible vulnerabilities in the HTML content. However, the absence of a vulnerability disclosure policy and incident response information indicates room for improvement in security transparency. Overall, the site is trustworthy and professionally managed but could enhance compliance and security practices. Strategic recommendations include enabling DNSSEC, implementing a cookie consent banner for GDPR compliance, publishing a security.txt or vulnerability disclosure policy, improving accessibility, and adding advanced security headers. These steps will strengthen the security posture, compliance, and user trust, supporting sustainable growth and risk mitigation.
- FFine Art America
fineartamerica.com
E-commerce · United States
69Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Fine Art America operates as a leading global e-commerce platform specializing in wall art and related products, connecting hundreds of thousands of independent artists and iconic brands with consumers worldwide. Established in 2006, the company boasts a large marketplace with millions of curated images and a print-on-demand manufacturing network spanning 16 facilities across five countries. The website demonstrates a mature digital presence with professional design, clear navigation, and mobile optimization. However, privacy compliance is limited due to the absence of explicit privacy and cookie policies in the analyzed content. The platform extensively uses third-party tracking technologies including Google Tag Manager, Facebook Pixel, and Pinterest Pixel, indicating a high level of user tracking.
- IIndyNET.cz
indynet.cz
Technology · Czech Republic
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
IndyNET.cz is a small Czech IT services provider offering server and network management, computer servicing, web programming, domain registration, and web hosting. The website content is minimal but relevant, targeting businesses and individuals seeking IT support. The domain is well-established since 2000, consistent with the business history. Technically, the site uses Bootstrap and jQuery but lacks modern security practices such as HTTPS enforcement and security headers. No privacy or cookie policies are present, and contact information is limited to a single phone number. Overall, the digital maturity is basic with room for improvement in security and compliance.