Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,185001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
29,851–29,900 of 99,066
- WWEB4U s.r.o.
web4u.cz
Technology · Czech Republic
71Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
WEB4U s.r.o. is a Czech-based technology company specializing in web hosting, domain registration, server hosting, and VPN services. The company targets individuals and businesses seeking reliable online presence solutions, offering a range of hosting tariffs, dedicated and virtual servers, and VPN plans. The website demonstrates a mature digital infrastructure with integrated marketing and analytics tools, including Google Tag Manager, Google Ads, Intercom, and Salesmanago. The site is well-structured, professionally designed, and optimized for user experience and SEO, primarily serving the Czech market. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data is a notable gap, raising questions about domain registration transparency. Overall, the website is trustworthy and professional, with room for improvement in security transparency and registrant information clarity.
Innovamento, s.r.o.kolinger.sk
Retail · Slovakia
51Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
KOLINGER is a small Slovak family-owned business specializing in the manufacture and sale of custom-made fold-out sofas since 1982. The company emphasizes quality, functionality, and elegance, targeting both individual consumers and hospitality businesses such as hotels and pensions. Their product range includes various sofa models with customizable fabrics and components, supported by a strong after-sales service including repairs and parts replacement. The website is professionally designed with good mobile optimization and clear navigation, supporting Slovak and Czech languages. Technically, the site uses modern JavaScript libraries and privacy-focused analytics (Fathom), but lacks some security headers and explicit privacy policies. Contact information is clearly provided, enhancing business credibility.
HOTdesign | Webové stránky a grafikahotdesign.eu
Technology · Czech Republic
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
HOTdesign is a Czech Republic based small web and graphic design studio specializing in creating modern, responsive websites, e-shops, and graphic design services including logos and internet banners. The company targets businesses and organizations seeking professional digital presence and marketing support. The website is built on WordPress with modern plugins and technologies, showing good digital maturity and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers could be improved. The site is professional, trustworthy, and compliant with GDPR, with clear contact information and customer testimonials reinforcing credibility.
- VVespera Design, s.r.o.
vesperadesign.cz
Manufacturing · Czech Republic
54Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Vespera Design, s.r.o. is a specialized Czech company offering bespoke upholstery services, collaborating with renowned designers and architects. Their market position is strong within the Czech Republic and neighboring countries, focusing on high-quality craftsmanship and custom furniture upholstery. The website reflects a professional digital presence with clear service descriptions and client engagement features. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and analytics tools such as Google Analytics and New Relic for performance monitoring. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. The absence of WHOIS data due to privacy protection is common and does not detract from the site's legitimacy given the professional content and contact transparency. Overall, the site is well-structured, GDPR compliant, and trustworthy for its business domain.
Iconfindericonfinder.com
Technology
75Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Iconfinder operates as a leading global marketplace specializing in vector icons, illustrations, and 3D illustrations, offering over 9 million assets in various formats such as SVG, AI, and PNG. The platform targets designers, developers, and creative professionals seeking high-quality graphic assets, providing flexible purchasing options including subscriptions and pay-as-you-go models. The website demonstrates a strong market position with a professional and user-friendly interface, supported by a consistent brand presence and positive trust indicators like G2 and Trustpilot reviews. From a technical perspective, Iconfinder employs a modern technology stack including Google Tag Manager, Google Analytics, Sentry for error monitoring, and Cloudflare for CDN and security. The site is well-optimized for performance, mobile responsiveness, and accessibility, leveraging Bootstrap and Google Fonts. Security best practices are observed with HTTPS enforcement, cookie consent mechanisms, and secure form implementations, although explicit security headers and dedicated security policies are not clearly documented. The security posture is solid but could be enhanced by publishing formal security and incident response policies, implementing vulnerability disclosure mechanisms, and ensuring comprehensive security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration transparency, which should be investigated further. Overall, Iconfinder presents a trustworthy and professional digital asset marketplace with strong technical and privacy foundations. Strategic improvements in domain registration transparency and security policy disclosures would further strengthen its security posture and business credibility.
VK Idraulicovkidraulico.lv
Other · Latvia
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
VK Idraulico is a small, local plumbing service provider based in Riga, Latvia, offering a wide range of professional plumbing and heating services including emergency repairs, water supply and sewage system installation and maintenance, sanitary equipment installation, and heating system services. The company emphasizes reliability, professionalism, and customer satisfaction, supported by over 20 years of experience and numerous positive customer testimonials. Their market position is that of a trusted local expert serving both residential and business clients. Technically, the website is built on modern frameworks like Bootstrap and jQuery, is mobile-optimized, and uses HTTPS for secure communication. However, it lacks some security headers and formal privacy and cookie policies, which are areas for improvement. The security posture is generally good with secure forms and no visible vulnerabilities, but the absence of security headers and privacy compliance reduces the overall security score. Overall, the website is professional, trustworthy, and well-structured, but could enhance compliance and security transparency to further build trust.
Košík.czkosik.cz
Retail · Czech Republic
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Košík.cz is a prominent Czech online grocery retailer offering a wide range of food products with bulk discounts, free delivery on large orders, and loyalty programs. The website targets Czech consumers looking for convenient online grocery shopping solutions. The business model focuses on e-commerce retail with promotional incentives to attract and retain customers. The company appears to hold a strong market position within the Czech Republic's online grocery sector. Technically, the website leverages modern frontend technologies such as Vue.js and integrates Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with a clean and professional design that supports a positive user experience. From a security perspective, the site enforces HTTPS and includes several important security headers, indicating a good baseline security posture. However, the absence of visible privacy and cookie policies, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement in compliance and transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, but the lack of WHOIS data and privacy-related disclosures slightly reduce the confidence level. Strategic recommendations include publishing comprehensive privacy and cookie policies, establishing a vulnerability disclosure process, and enhancing accessibility and security transparency to strengthen user trust and compliance.
- KKaufland Marketplace GmbH
kaufland.cz
Retail · Germany
74Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Kaufland Marketplace GmbH operates an online retail marketplace platform serving customers primarily in the Czech Republic via the www.kaufland.cz domain. The company is a large retail entity based in Germany with official registration and VAT details provided. The website is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page requiring CAPTCHA verification, which blocks direct content access and limits detailed analysis. Technically, the site uses Cloudflare for security and CDN services, with standard web technologies such as HTML5, CSS3, and JavaScript. However, no CMS or advanced frameworks are detectable due to the blocking. The lack of visible privacy, cookie, or terms of service policies on the accessible page indicates incomplete compliance transparency. From a security perspective, the use of Cloudflare WAF is a positive control to mitigate attacks, but the absence of WHOIS registration data and lack of visible security headers reduce trustworthiness. No vulnerabilities or malware are detected, but the blocking prevents full security posture assessment. Overall, the site is rated low in AI scoring due to content inaccessibility and missing compliance documentation. The business information is clear and legitimate, but the technical and security details require improvement and transparency for better trust and compliance.
BILLAbilla.cz
Retail · Czech Republic
71Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
BILLA is a well-known supermarket chain operating in the Czech Republic, offering a broad range of grocery and household products. The website serves as an online presence for the brand, targeting general consumers seeking retail shopping options. The site is professionally branded and uses modern web technologies, likely including Vue.js, and is optimized for mobile devices with moderate performance. However, the content quality is basic, with limited visible business contact information or detailed policies in the provided HTML snippet. From a technical perspective, the website employs HTTPS, ensuring secure communication, but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data reduces transparency about domain ownership and registration details, which slightly impacts trustworthiness. No signs of WAF or security challenges were detected, indicating the site is fully accessible. Security posture is moderate, with room for improvement in implementing security headers, vulnerability disclosure policies, and incident response contacts. Privacy compliance is weak due to missing or undisclosed privacy and cookie policies. Overall, the site appears legitimate and safe for general audiences, but enhancing transparency and security practices would strengthen its credibility and compliance stance.
Gransy s.r.o.gransy.cz
Technology · Czech Republic
54Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Gransy s.r.o. is a Czech Republic-based ICANN Accredited domain registrar established in 2002, offering a comprehensive suite of domain registration, hosting, and registry management services. The company targets registrars, resellers, and end-users primarily in Europe and Africa, positioning itself as a reliable and professional technology provider with a strong focus on domain and hosting solutions. Their business model includes B2B and B2C services with reseller and whitelabel options, supported by multiple projects and partnerships. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Carousel, integrates Google Analytics and reCAPTCHA for tracking and security, and demonstrates moderate performance and good mobile optimization. However, there is room for improvement in accessibility and SEO optimization. Security-wise, the site uses HTTPS and reCAPTCHA but lacks DNSSEC, security headers, and published security policies, which are recommended for enhanced protection. The WHOIS data is consistent and trustworthy, reflecting a long-standing domain registration aligned with the company's history. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and security practices.
- TTZÚ, s. p.
furnituretesting.eu
Manufacturing · Czech Republic
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website furnituretesting.eu represents a professional furniture testing laboratory operating under TZÚ, s. p., a Czech entity providing comprehensive testing services for the furniture and textile industries. The site highlights key services such as furniture testing, flammability testing, microbiology, and surface treatment testing, positioning itself as a trusted and accredited testing provider with certifications like BIFMA Compliant®. The target audience includes manufacturers and industry professionals seeking quality assurance and certification services. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with a responsive design and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy/cookie policies indicates room for improvement. WHOIS data is privacy protected, which is common for EU domains, and no suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices.
- VVaše IT
vaseit.cz
Technology · Czech Republic
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Vaše IT is a small Czech Republic-based IT service provider specializing in web design, application development for web and Windows, and internet marketing including advertising campaign and social media management. The company has been established since 2008, indicating a stable presence in the local market. The website content is minimal but clearly communicates the core business offerings and contact details. Technically, the site uses Bootstrap 4 and Google Analytics, hosted likely by WEDOS, a Czech hosting provider. The site is mobile responsive at a basic level but lacks advanced accessibility and SEO optimizations. Security posture is weak with no detected security headers or published policies, and the SSL status is unknown, which is a concern. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.
Retail in Detailretailindetail.cz
Other
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.retailindetail.cz is currently inaccessible or blocked, with no WHOIS data available to verify domain registration details. The site appears to be related to retail business, but the lack of accessible content and metadata prevents a thorough understanding of its business operations or market position. The technical infrastructure shows usage of common analytics and font libraries such as Google Tag Manager and LinkedIn Insight, but no further technical or CMS details are discernible. Security posture cannot be assessed due to missing security headers and SSL information. Overall, the site presents a high risk due to lack of transparency and accessibility, and no privacy or compliance policies are detected.
Retail Summitretailsummit.cz
Retail · Czech Republic
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.retailsummit.cz appears to be dedicated to retail industry events, likely a conference or summit based in the Czech Republic. The site uses modern web technologies such as Google Tag Manager for analytics and Font Awesome for icons, indicating a basic level of digital maturity. However, the lack of WHOIS data and absence of privacy, cookie, or terms of service policies suggest limited compliance and transparency. Security posture is weak with no detected security headers or advanced protections. Overall, the site is accessible and safe for general audiences but lacks critical business and security information, which impacts trust and credibility.
Studio Jochjoch.cz
Other · Czech Republic
72Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Studio Joch is a small Czech graphic design studio specializing in creating comprehensive visual identities for businesses and their products. Their services include logo design, print materials, website design, and commercial space branding, targeting local businesses seeking cohesive branding solutions. The website is professionally designed, mobile-optimized, and uses modern web technologies including Google Analytics and Solidpixels CMS. Privacy and cookie policies are implemented with user consent mechanisms, reflecting good privacy compliance. However, the absence of WHOIS registration data and lack of explicit contact information on the site reduce overall business credibility and trustworthiness. Security posture is solid with HTTPS and no exposed sensitive data, but could be improved by adding security headers and incident response information. Overall, the site is functional, secure, and professional but would benefit from enhanced transparency and domain legitimacy verification.
Retail · Czech Republic
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Místoprodeje.cz is a specialized Czech media platform focused on in-store marketing, POP media, and retail industry news. It provides comprehensive content including news, interviews, market data, and organizes industry competitions such as the VISA Czech Top Shop. The website demonstrates a mature digital presence with regular content updates, structured data implementation, and integration of multiple analytics and marketing tools. Technically, it is built on WordPress with modern plugins and tracking technologies, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, cookie consent, and anti-bot measures, though some security headers could be enhanced. The absence of WHOIS data is a notable gap in domain legitimacy verification but does not detract from the professional appearance and trust signals on the site. Overall, the site serves its niche audience effectively with high-quality content and a professional user experience.
Independent Retail Europeindependentretaileurope.eu
Retail · Belgium
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Independent Retail Europe is a well-established European association representing groups of independent retailers across food and non-food sectors. Founded in 1963 and headquartered in Brussels, Belgium, it serves as an umbrella organization advocating for over 462,000 retailers and more than 737,000 shops in the EU and UK. The website clearly communicates its mission, membership benefits, and sustainability initiatives, targeting groups of independent retailers and related associations. Technically, the website employs modern web technologies including jQuery, Google Analytics, and Laravel framework components, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. The WHOIS data aligns well with the business claims, showing no privacy protection or suspicious registration patterns, indicating high legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve by publishing dedicated security and incident response policies.
- SST. NICOLAUS – trade, a.s.
nicolaus.cz
Retail · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ST. NICOLAUS – trade, a.s. is a well-established Czech company specializing in the production and distribution of alcoholic and non-alcoholic beverages. The company positions itself as a significant player in the Czech market with a long tradition dating back to 1867. Their website targets mature audiences with an age verification mechanism to ensure compliance with legal drinking age requirements. The business model appears to focus on both B2B and B2C sales channels, offering a wide range of beverage products. The branding is consistent and professional, supporting a trustworthy market presence. Technically, the website is built on WordPress with a modern set of plugins including Yoast SEO, Contact Form 7, GDPR compliance tools, and Google reCAPTCHA for security. The site is mobile-optimized and uses HTTPS with good SSL configuration. However, some security best practices such as security headers are missing, and no explicit privacy policy or terms of service pages were found in the provided content. Analytics and marketing tools like Google Analytics and Facebook Pixel are used, indicating moderate user tracking. From a security perspective, the site demonstrates a reasonable posture with HTTPS, CAPTCHA protection, and GDPR cookie consent mechanisms. The absence of WHOIS data due to privacy protection limits the ability to fully verify domain registration legitimacy, but the website content and branding suggest a legitimate business. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were identified in the analyzed content. Overall, the website is professionally presented with good technical implementation and moderate privacy compliance. Strategic improvements include publishing clear privacy and terms policies, enhancing security headers, and providing explicit contact information for security and business inquiries.
Radegast Pivovarradegast.cz
Other · Czech Republic
53Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Radegast Pivovar is a Czech brewery brand specializing in producing beer with a strong regional presence in Moravia and Silesia and recognition across the Czech Republic. The website emphasizes the brand's heritage dating back to 1970 and targets adult consumers with an age verification gate. The digital infrastructure is built on WordPress with common plugins for SEO, forms, and cookie consent, reflecting a moderate level of digital maturity. The site employs modern tracking and marketing tools such as Google Analytics and Facebook Pixel, with a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is generally good with HTTPS enforced and reCAPTCHA on forms, though the absence of explicit security headers and WHOIS data transparency are areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving as an effective digital presence for the brewery.
- P.V.A. systems s.r.o.
pvasystems.cz
Retail · Czech Republic
54Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
P.V.A. systems s.r.o. is a Czech software company specializing in retail and warehouse management systems, notably the B.O.S.S. Enterprise system, which is widely deployed across retail chains in the Czech Republic. The company offers a comprehensive suite of products including automated 24/7 stores, self-checkout solutions, electronic shelf labels, and business intelligence tools. Their market position is strong, with over 11,000 POS terminals in operation and a client base that includes major retail groups and municipalities. The company emphasizes innovation, stability, and customer support with a 7-day hotline service. Technically, the website employs a Java-based backend with front-end technologies including jQuery, jQuery UI, Google Analytics, and Google Tag Manager. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security measures include HTTPS enforcement and reCAPTCHA integration for forms, though there is room for improvement in security headers and updating legacy JavaScript libraries. The security posture is solid with no evident vulnerabilities or exposed sensitive data, but the absence of a published security policy or incident response contacts is a gap. The WHOIS data is unavailable, which slightly reduces transparency and trust but does not detract significantly from the overall legitimacy given the detailed business information and client references. Overall, the website and company present a professional and trustworthy front with good technical and security practices. Strategic recommendations include enhancing security headers, updating JavaScript libraries, publishing security policies, and improving accessibility features to further strengthen their digital maturity and compliance.
PENAM, a.s.penam.cz
Manufacturing · Czech Republic
65Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
PENAM, a.s. is a leading bakery and milling manufacturer in Central Europe with a strong market presence since 1992. The company operates under the AGROFERT group and offers a wide range of bakery products, including premium and classic lines, supported by an e-commerce platform. Their website reflects a professional brand image with consistent messaging and clear navigation aimed at general consumers and business clients. Technically, the site is built on WordPress with modern technologies such as Google Tag Manager and Rank Math SEO, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though the absence of a public security policy and incident response information suggests room for improvement. The missing WHOIS data is a notable gap in transparency but does not significantly detract from the overall legitimacy given the comprehensive business information and certifications presented. Strategic recommendations include publishing formal security and incident response policies and enhancing domain registration transparency.
NaturFarmnaturfarm.sk
Retail · Slovakia
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
NaturFarm is a Slovak-based company specializing in the retail and distribution of natural food products including syrups, juices, fruits, vegetables, seafood, and other related items. The company targets consumers and businesses interested in quality natural foods within Slovakia and potentially neighboring markets. Their website serves as an e-commerce platform with a product catalog and customer support features. Technically, the site is built on WordPress with WooCommerce, utilizing modern plugins and frameworks such as WPBakery and jQuery. The site is mobile-optimized and employs structured data for SEO benefits. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies and advanced security headers. Overall, the site demonstrates a good security posture with room for improvement in privacy compliance and incident response transparency.
MAKRO Cash & Carry ČR s.r.o.mujobchod.cz
Retail · Czech Republic
73Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Mujobchod.cz is a Czech retail alliance website operated by MAKRO Cash & Carry ČR s.r.o., supporting a network of over 600 independent retail stores across the Czech Republic since 2012. The platform provides promotional offers, store locators, and a mobile application to enhance retailer and customer engagement. The website is professionally designed with good content quality and consistent branding, targeting retail customers and small business retailers in the Czech market. Technically, the site uses modern web standards including responsive design and WebP images, though no specific CMS or hosting details are evident. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks explicit security headers and incident response information. WHOIS data is unavailable, which reduces transparency and trustworthiness, but the affiliation with MAKRO and presence of privacy and cookie policies indicate a legitimate business. Overall, the site scores well on content quality and privacy compliance but could improve in security best practices and direct contact information availability.
Mattonimattoni.cz
Other · Czech Republic
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Mattoni.cz is a professionally designed website representing a well-established mineral water brand in the Czech Republic. The company offers a range of natural mineral water and flavored beverages, emphasizing health benefits and sustainability. The website is built on modern web technologies including Webflow CMS, Google Analytics, Hotjar, and Usercentrics for cookie consent management, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent implemented, but lacks visible security headers and explicit privacy and terms policies, which are important for compliance and trust. The absence of WHOIS data limits domain trust analysis, but the website content and branding suggest a legitimate business. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and providing clear contact information for security incidents to enhance trust and compliance.
Kubík, akciová společnostkubik.cz
Retail · Czech Republic
54Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Kubík a.s. is a well-established Czech company with a diversified portfolio spanning retail and wholesale food, textile sales, engineering construction, quick service food, travel services, art gallery operations, real estate development, and property rental. The company targets a broad audience including general consumers and business clients within the Czech Republic. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the site employs a modern technology stack including Bootstrap, jQuery, Google Analytics, and reCAPTCHA, hosted via WEDOS, a reputable Czech hosting provider. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent with an opt-in mechanism, indicating GDPR compliance awareness. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. Overall, the domain age and WHOIS data support the legitimacy and trustworthiness of the business.
- MP Krásno, a.s.
krasno.cz
Manufacturing · Czech Republic
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
MP Krásno, a.s. is a medium-sized Czech family-owned company specializing in the manufacturing and retail of traditional meat products such as hams, salamis, and sausages. The company emphasizes its deep-rooted family tradition spanning six generations and combines this heritage with modern production technologies. The website reflects a well-established regional brand with a clear focus on quality and customer engagement through recipes and newsletters. Technically, the site uses modern tracking and advertising technologies including Google Tag Manager, Facebook Pixel, and Adform, and is built on a custom or Nette-based CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and rich multimedia content. Security-wise, the site enforces HTTPS and cookie consent but lacks visible security headers, suggesting room for improvement in security hardening. The absence of WHOIS data due to privacy protection is common and justified for this business type. Overall, the website is professional, trustworthy, and compliant with GDPR regulations.
Kofola ČeskoSlovensko a.s.kofola.cz
Retail · Czech Republic
70Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Kofola ČeskoSlovensko a.s. is a well-established beverage manufacturer and retailer operating primarily in the Czech Republic and Slovakia. The company focuses on producing beverages with a strong emphasis on quality, tradition, and innovation, targeting a broad consumer base interested in healthy and enjoyable drinks. Their market position is solid with a recognizable brand and active engagement through multiple social media platforms. Technically, the website employs modern web technologies including jQuery, Google Analytics, and Facebook Pixel, and implements cookie consent mechanisms to comply with privacy regulations. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and includes CSRF tokens, but lacks some advanced security headers and explicit security or incident response policies. The absence of WHOIS data reduces trust slightly, but the presence of official contact information and social media links supports legitimacy. Overall, the website is professional and trustworthy with room for improvement in transparency and security documentation.
- Družstvo ESO MARKET
esomarket.cz
Retail · Czech Republic
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Družstvo ESO MARKET is a Czech retail cooperative network specializing in food sales through member stores. The website serves as an information portal for members and customers, offering store location maps, price lists, and membership information. The business targets retail food store operators and consumers within the Czech Republic, positioning itself as a regional cooperative with a moderate market presence. Technically, the website is built on WordPress 4.4.18 with common JavaScript libraries such as jQuery and bxSlider, and integrates Google Analytics for visitor tracking. The site is mobile responsive and has a professional design, but lacks modern security headers and up-to-date CMS versions, which may expose it to vulnerabilities. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy, though the website content and business presence suggest a legitimate cooperative. Overall, the site demonstrates moderate digital maturity but requires improvements in security and privacy compliance to enhance trust and reduce risk.
Retail · Czech Republic
52Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
ČEPOS - Česká potravinářská obchodní a.s. is a well-established Czech food wholesale alliance and company founded in 1996, providing nationwide supply services to retail and gastronomy sectors. The company operates private label products under the brand Česká cena, franchise retail networks such as BALA and RAPO, and offers IT solutions for wholesalers and retailers. The website is professionally designed, mobile-optimized, and provides clear business and contact information. Technically, it uses modern frameworks including Bootstrap and jQuery, with a moderate performance profile. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks advanced security headers and published security policies. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.
Budějovický Budvar, n. p.budejovickybudvar.cz
Other · Czech Republic
69Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Budějovický Budvar, n. p. is a national brewery based in the Czech Republic, with a long-standing history dating back to 1895. The company specializes in the production and distribution of beer, serving both domestic and international markets with exports to over 70 countries. The website reflects a mature and professional digital presence, showcasing their product range, collaborations, and company news. The brand maintains consistent and strong visual identity and engages users with rich content including blogs and media. Technically, the website is built on Webflow with modern JavaScript libraries and integrates advanced analytics and cookie consent mechanisms, ensuring compliance with privacy regulations. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is well-optimized for performance, mobile responsiveness, and accessibility, targeting an adult audience with appropriate age verification for alcohol-related content.
- bluesign®FINDER
bluesignfinder.com
Other
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website bluesignfinder.com currently presents minimal content with no visible business information, contact details, or policies. The site uses modern frontend technologies such as Vue.js and Vuetify but lacks substantive content and SEO optimization. The WHOIS query indicates the domain is not registered or the data is unavailable, raising significant concerns about legitimacy. Security posture is weak with no evident HTTPS or security headers, and privacy compliance is absent. Overall, the site appears to be either under development or abandoned, with very limited digital maturity and business credibility.
- The Apparel Alliance
apparelalliance.org
Other
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Apparel Alliance website represents a collaborative initiative uniting four prominent organizations in the sustainable apparel and footwear industry: Apparel Impact Institute, Cascale, Textile Exchange, and ZDHC. Their collective mission is to accelerate decarbonization efforts and achieve a 45% reduction in greenhouse gas emissions by 2030. The website content is professionally presented, focusing on sustainability, joint initiatives, and industry impact. Technically, the site is built on Webflow with modern JavaScript libraries and uses Matomo and Google Tag Manager for analytics. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies suggests room for improvement. Contact information is limited to a single verified email address, with no phone or physical address provided. Overall, the site is credible and trustworthy, reflecting a serious industry alliance with a clear sustainability focus.
Stichting ZDHC Foundationimplementation-hub.org
Manufacturing · Netherlands
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Implementation Hub website represents a non-profit organization, Stichting ZDHC Foundation, dedicated to advancing sustainable chemical management in the fashion, apparel, and leather industries. The site serves as a central platform offering training, approved providers, and digital tools to support the Roadmap to Zero program. It targets industry stakeholders seeking to improve chemical safety and environmental impact. Technically, the site is built on Webflow CMS with modern JavaScript libraries and integrates analytics tools such as Matomo and Google Analytics. The website is mobile-optimized and presents a professional design with clear navigation. Security posture is strong with HTTPS enforced and secure forms, though it lacks some security headers and explicit cookie consent mechanisms. WHOIS data is privacy protected, but domain expiry and content consistency support legitimacy. Overall, the site is trustworthy and well-positioned in its niche.
ZDHC Foundationzdhc-gateway.com
Manufacturing
64Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The ZDHC Gateway is a globally recognized platform dedicated to enabling safer chemical management within the textile, apparel, and footwear industries. It operates as a comprehensive database and reporting tool, offering modules for chemical product verification and wastewater data management. The platform supports brands, suppliers, and chemical formulators by providing transparency and tools to implement safer chemical alternatives, positioning itself as a leader in sustainable manufacturing practices. The website demonstrates a mature digital presence with professional design and clear navigation, leveraging modern technologies such as Webflow and Google Tag Manager for analytics. Security posture is generally good with HTTPS enforced, but lacks some advanced security headers and explicit privacy and cookie policies, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly that reduces trust slightly, though the extensive partnerships and industry integration support the platform's legitimacy. Overall, the ZDHC Gateway presents a credible and valuable resource for its target audience, with recommendations to enhance security and compliance transparency.
Magistrát mesta Košicekosice.sk
Government · Slovakia
73Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.kosice.sk serves as the official digital presence of the city of Košice, Slovakia. It provides comprehensive municipal information, including city news, public services, urban planning, and electronic service portals. The site targets residents, visitors, investors, and local businesses, positioning itself as the authoritative source for city-related information and services. The business model is that of a government municipal portal, supporting transparency and citizen engagement. The site also links to multiple municipal subsidiaries and partner organizations, enhancing its ecosystem.
Auswärtiges Amtdiplo.de
Government · Germany
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Auswärtiges Amt website serves as the official digital presence of the German Federal Foreign Office, providing authoritative information on German foreign policy, consular services, travel safety, and career opportunities within the diplomatic service. The site targets German citizens, travelers, and stakeholders interested in Germany's international relations. It holds a strong market position as a government entity with comprehensive, well-structured content and consistent branding. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and privacy-conscious analytics (Matomo), with a strict Content-Security-Policy enhancing security. The site is mobile-optimized and accessible, offering a professional user experience.
Government · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The Ministry of Foreign Affairs of the Czech Republic operates an official government website providing comprehensive information on foreign relations, diplomatic missions, press releases, and travel advisories. The site targets a broad audience including citizens, diplomats, and international stakeholders. It maintains a strong market position as the authoritative source for Czech foreign affairs. Technically, the website employs a moderate tech stack including jQuery and Algolia search, with Google Analytics for tracking. The site is served over HTTPS with good security practices but lacks some advanced security headers and explicit incident response information. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and content-rich, though WHOIS data is unavailable, which slightly reduces transparency.
Hlavné mesto SR Bratislavabratislava.sk
Government · Slovakia
64Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website bratislava.sk serves as the official digital portal for the city government of Bratislava, Slovakia. It provides comprehensive information about city operations, public services, cultural events, transportation, social services, and education. The site targets residents and visitors, offering a centralized platform for accessing municipal resources and updates. The business model is that of a public sector government service, focusing on transparency and citizen engagement. Technically, the site is built on modern web technologies including Next.js and React, leveraging Cloudflare for DNS and CDN services to ensure performance and security. Cookie consent is managed via Cookiebot, and Google Tag Manager is used for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses Cloudflare's infrastructure, which provides a strong baseline security posture. However, explicit security headers and public security policies are not clearly published. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partial, with cookie consent implemented but no explicit privacy policy or terms of service found. Overall, the website is trustworthy and professional, with a high legitimacy score based on domain age and WHOIS data. Strategic recommendations include publishing privacy and security policies, adding incident response contacts, and enhancing transparency around data protection to improve compliance and user trust.
- Nitriansky samosprávny kraj
unsk.sk
Government · Slovakia
72Medium
NIS2 22 · GDPR 40
NIS2 22 · GDPR 40
Nitriansky samosprávny kraj operates as a regional government authority in Slovakia, providing governance, public administration, and various electronic services to its residents. The website serves as an official portal offering information about the region, its governance structure, public notices, and access to services. The site targets residents, local government officials, and stakeholders interested in regional affairs. Technically, the website employs a traditional web stack with jQuery, Bootstrap, and other common JavaScript libraries, delivering a responsive and navigable user experience. Security-wise, the site uses HTTPS and implements cookie consent, but lacks visible advanced security headers and formal incident response or vulnerability disclosure policies. Overall, the website is legitimate, well-branded, and trustworthy, with room for improvement in security and compliance documentation.
UPJŠ Košiceupjs.sk
Education · Slovakia
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
UPJŠ Košice is a prominent Slovak university offering a wide range of higher education programs, research activities, and lifelong learning opportunities. The website reflects a mature digital presence with multilingual support and comprehensive information tailored to students, staff, and the public. The institution maintains a strong market position as a research university with international collaborations and a clear focus on academic excellence. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, supported by Google Tag Manager for analytics and marketing. The site demonstrates good performance and mobile optimization, though accessibility could be further enhanced. Security measures include HTTPS enforcement and cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with appropriate headers and no visible vulnerabilities, but the absence of a dedicated security policy or incident response page suggests room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its educational mission effectively.
Education · Slovakia
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Univerzita Konštantína Filozofa v Nitre is a public university based in Slovakia, providing higher education and research services primarily to students and the academic community. The website reflects a well-structured institution with a clear focus on education, research, and international cooperation. It serves as a portal for students, faculty, and the public, offering access to academic programs, research projects, and university news. The university maintains partnerships with regional and international institutions, enhancing its academic reach and collaboration. Technically, the website is built on Joomla CMS and utilizes modern web technologies such as jQuery and Bootstrap, ensuring a responsive and user-friendly experience. The site includes standard SEO and accessibility features, although some improvements in accessibility could be made. Performance is moderate, with a good balance of content and media. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. Email addresses are protected against spam via cloaking techniques. However, additional security headers could be implemented to enhance protection. No critical vulnerabilities or security issues were detected in the analysis. Overall, the website demonstrates a solid digital presence for an educational institution, with good privacy compliance and business credibility. Strategic recommendations include enhancing security headers, publishing incident response policies, and maintaining up-to-date software to mitigate potential vulnerabilities.
Education · Slovakia
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Slovenská rektorská konferencia (SRK) is a Slovak non-profit organization representing university rectors and higher education institutions. It serves as a coordinating body for academic activities, ethics, research integrity, and quality assurance in Slovakia's higher education sector. The website provides news, event information, official documents, and media resources targeted at academic professionals, students, and policymakers. The organization is well-established with a domain age since 2003 and maintains a consistent brand presence online. Technically, the website is built on Joomla CMS with modern frameworks like Gantry 5 and UIkit, incorporating jQuery and Font Awesome for UI elements. It uses HTTPS with DNSSEC enabled, ensuring secure and trustworthy connections. The site includes a comprehensive cookie consent mechanism compliant with GDPR, and integrates Google Analytics for visitor insights. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, DNSSEC, and WebAuthn support for passwordless login. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a detailed privacy policy and cookie consent, though terms of service and vulnerability disclosure pages are absent. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. It effectively serves its audience with relevant content and maintains a solid security posture. Strategic improvements could include adding explicit security headers, publishing a security policy, and enhancing accessibility features.
KONSTRUKCE Media, s.r.o.portalsvetlo.cz
Media · Czech Republic
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website portalsvetlo.cz represents a specialized Czech media company KONSTRUKCE Media, s.r.o., publishing the quarterly magazine Světlo focused on lighting technology and related fields. The site targets professionals, enthusiasts, and students in lighting, architecture, and research sectors, offering articles, podcasts, event calendars, and subscription services. The business model centers on content publication, advertising, and subscriptions, positioning itself as a niche industry leader in the Czech Republic. Technically, the website employs modern web technologies including jQuery, Google Fonts, and Google Analytics, with content delivered over HTTPS and some use of CDN services. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Security posture is moderate with no visible security headers and no explicit incident response or vulnerability disclosure information. The security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of WHOIS data and security headers suggests room for improvement. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism aligned with GDPR requirements. Contact information is professional and complete, enhancing business credibility. Overall, the website is a well-maintained professional media platform with moderate technical maturity and security posture. The lack of WHOIS data is a concern but does not outweigh the positive trust signals from content and contact transparency. Strategic improvements in security headers, incident response visibility, and WHOIS transparency would enhance trust and compliance.
- Hotel U Růže
hoteluruze.cz
Hospitality · Czech Republic
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Hotel U Růže is a small hospitality business located in the historic center of Slavonice, Czech Republic, offering accommodation, restaurant, wine cellar, and wellness services. The website is professionally designed with clear navigation and contact information, targeting couples, families, and leisure travelers seeking a quiet and comfortable stay. The business appears well-established with a domain age of over a decade, consistent with its market presence. Technically, the site uses common web technologies including jQuery, Bootstrap, and Google Analytics, managed via Insite CMS. While the site is mobile optimized and performs moderately well, there is room for improvement in SEO and accessibility. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is basic but present, with GDPR-related pages available. Overall, the website is trustworthy and suitable for its business purpose.
- Penzion Bejčkův mlýn
bejckuvmlyn.cz
Hospitality · Czech Republic
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Penzion Bejčkův mlýn is a small hospitality business located in the Česká Kanada natural park near Slavonice, Czech Republic. The company offers accommodation, a restaurant serving Czech cuisine, a wine cellar experience, and a domestic zoo, targeting tourists and visitors seeking nature and leisure. The website is professionally designed with good navigation and mobile optimization, leveraging modern JavaScript libraries and Google Analytics for minimal user tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. The domain is well-established since 2003, consistent with the business history, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional online presence for a local hospitality provider.
Congress Hotel Centrum Košicehotel-centrum.sk
Hospitality · Slovakia
72Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Congress Hotel Centrum Košice is a hospitality business located in Košice, Slovakia, offering accommodation, restaurant services, and event hosting including weddings, conferences, and exhibitions. It positions itself as the largest congress center in Košice, targeting a general audience including business and leisure travelers. The website content is professionally presented with clear navigation and relevant service descriptions. Technically, the site uses common web technologies such as jQuery, Cookiebot for cookie consent, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. From a security perspective, the website implements cookie consent mechanisms and uses HTTPS, although explicit security headers are not detected. There is no published privacy policy or terms of service, which are important for compliance and user trust. No incident response or vulnerability disclosure information is provided. The domain registration is privacy protected, which is typical for this business type and does not raise immediate concerns. Overall, the security posture is moderate with room for improvement in transparency and technical security controls. The overall risk assessment is low to moderate. Strategic recommendations include publishing comprehensive privacy and terms of service pages, enhancing security headers, and providing incident response contacts. These steps will improve compliance, user trust, and security maturity. The website is suitable for its hospitality business purpose but should address compliance gaps to align with GDPR and best practices.
Inversinvers.cz
Retail · Czech Republic
68Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Invers is a Czech Republic-based fashion brand specializing in stylish, original clothing and accessories that emphasize comfort, uniqueness, and self-expression. The company operates primarily through an e-commerce platform built on WordPress and WooCommerce, targeting fashion-conscious women seeking timeless and versatile wardrobe pieces. The website demonstrates a mature digital presence with modern design, SEO optimization, and mobile responsiveness. Security posture is solid with HTTPS enforcement and standard security headers, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with comprehensive GDPR-aligned policies and cookie consent mechanisms. Overall, Invers presents a professional and trustworthy online retail experience with room for improvement in transparency around security and vulnerability disclosures.
Eclectic Sourcingecsl-bd.com
Manufacturing · Bangladesh
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Eclectic Sourcing is a newly established (2023) B2B company specializing in connecting global buyers with manufacturers in Bangladesh. Their core services include global sourcing, custom product development, quality assurance, and export assistance. The company positions itself as a comprehensive sourcing partner with a focus on quality and efficiency. The website is built on WordPress using the Blocksy theme and Stackable blocks, hosted with Cloudflare DNS and registrar services. The site is mobile optimized and presents professional content with clear navigation. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is clearly provided, including a company domain email and phone number. No advertising or analytics scripts were detected, suggesting minimal user tracking. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.
- BENNON Group a. s.
bennongroup.cz
Manufacturing · Czech Republic
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
BENNON Group a. s. is a Czech-based company specializing in the development and distribution of professional work, safety, and outdoor footwear and clothing under the BENNON and PROMACHER brands. The company targets business partners and professional users requiring certified safety and workwear products. Their market position is that of an established regional leader in the manufacturing and wholesale distribution of these specialized products. The website provides comprehensive product catalogs, partner discounts, and detailed certification information, reflecting a mature B2B business model. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Slick Carousel, and various analytics and marketing tools such as Google Analytics, Google Tag Manager, and Smartlook. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies with consent mechanisms. However, some security best practices like HTTP security headers are not visibly implemented, and WHOIS data for the domain is missing, which slightly impacts trust. From a security perspective, the site uses HTTPS and secure login forms, with no exposed sensitive data detected in the HTML. The presence of cookie consent and privacy policies indicates good compliance with data protection regulations. The absence of a security.txt file and incident response contact details suggests room for improvement in vulnerability disclosure and incident management readiness. Overall, the website is professional, trustworthy, and well-suited for its B2B audience, but the lack of WHOIS data and some security headers slightly reduce its security posture. Strategic recommendations include implementing security headers, publishing vulnerability disclosure information, and verifying domain registration details to enhance trust and compliance.
- Gruzie Restaurant
gruzierestaurant.cz
Hospitality · Czech Republic
63Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Gruzie Restaurant is a small hospitality business specializing in authentic Georgian cuisine located in the heart of Prague, Czech Republic. The website presents a professional and visually appealing digital presence with clear navigation and multilingual support. Key services include dine-in, food delivery, and hosting live music and dance events, targeting a general audience interested in Georgian culinary experiences. The business has been established since 2018, consistent with the domain registration data.