Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,185001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
30,101–30,150 of 99,066
Other
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website at whales.org is currently inaccessible to the public, serving a 403 Forbidden error page protected by Cloudflare's security mechanisms. Due to this restriction, no business content, contact information, or policies are available for analysis. The domain itself is longstanding, registered since 1996 with a reputable registrar, indicating legitimacy at the domain registration level. However, the lack of accessible content and absence of privacy or security policies on the site limits the ability to assess the company's business model, services, or compliance posture. Technically, the site uses Cloudflare for hosting and security, and Google Fonts for typography, but no CMS or frameworks are detected. The security posture is limited by missing DNSSEC and lack of security headers, though HTTPS is implied by Cloudflare usage. Overall, the site appears professionally protected but currently blocked from public access, resulting in a low AI score and limited insights.
- RootyRUG E-Shop
rootyrug.com
E-commerce
65Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
RootyRUG E-Shop is an e-commerce business specializing in orthopedic sensory rugs designed to promote healthy foot development and overall body wellness. The company targets children, families, and adults who are health-conscious and interested in natural foot care solutions. The website is professionally designed, featuring clear navigation, product details, and educational content to support its niche market position. Technically, the website is built on the Shoptet e-commerce platform, utilizing jQuery and Google Fonts, with embedded multimedia content such as YouTube videos. The site is mobile-optimized and employs HTTPS with a valid SSL certificate, ensuring secure data transmission. However, some technical improvements are recommended, including updating outdated libraries and enhancing security headers. From a security perspective, the site demonstrates good practices such as CSRF protection and secure forms but lacks comprehensive security headers and a cookie consent mechanism, which impacts GDPR compliance. The absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness, although the website itself appears functional and professional. Overall, RootyRUG presents a moderate risk profile with strengths in business presentation and technical security but weaknesses in domain transparency and privacy compliance. Strategic improvements in these areas will enhance trust and regulatory adherence.
Media · Czech Republic
54Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Šumava.eu is a regional media website focused on the Šumava region in the Czech Republic, providing news, weather updates, webcams, and cultural content. The site targets a general audience interested in local events, nature, and community activities. The business operates as a small media portal with a content-driven model supported by partnerships and advertising. Technically, the website is built on WordPress using Elementor and several plugins for enhanced user experience and content management. The site is moderately optimized for performance and mobile devices, with good SEO practices evident through meta tags and structured data. Security posture is adequate with HTTPS usage but lacks explicit security headers and privacy policies, which are recommended for compliance and trust. No blocking or WAF mechanisms interfere with content access. WHOIS data is privacy protected by EURid, which is common for European domains. Overall, the site is legitimate, professional, and serves its regional audience well, though improvements in privacy compliance and security hardening are advised.
Travelcontravelcon.cz
Hospitality · Czech Republic
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Travelcon is a specialized conference organizer focused on the tourism industry in the Czech Republic, hosting the largest tourism conference in the country. The website presents a professional and content-rich platform promoting upcoming events, past conference summaries, and partner organizations. The technical infrastructure leverages modern JavaScript libraries and tracking tools, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Security posture is adequate with HTTPS but lacks advanced security headers. Overall, the site is trustworthy and well-positioned within its niche but would benefit from enhanced privacy and security practices.
- Perfect System, s.r.o.
cbsystem.cz
Other · Czech Republic
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
CBSystem.cz is an established online ticketing platform primarily serving the Czech Republic market, specializing in the pre-sale and reservation of tickets for cultural and entertainment events such as theater, music, festivals, and sports. The company behind the site is Perfect System, s.r.o., founded in 2004, indicating a mature presence in the regional event ticketing industry. The website offers a multilingual interface and integrates with a dedicated ticket sales subdomain, providing a comprehensive event browsing and purchasing experience for general audiences interested in cultural activities. Technically, the website is built on Joomla CMS and leverages a variety of frontend technologies including jQuery, Bootstrap, and several JavaScript libraries for UI components and date handling. It employs Google Analytics, Google Tag Manager, Facebook SDK, and Adform for tracking and marketing purposes. The site is served over HTTPS, ensuring encrypted communication, but lacks some advanced security headers and explicit privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates a moderate security posture with HTTPS enabled and no visible sensitive data exposure. However, the absence of security headers, vulnerability disclosure mechanisms, and privacy/cookie policies indicates areas for improvement. The domain registration data is consistent with the business claims, showing a long-standing domain age and no privacy protection, which supports legitimacy. Overall, CBSystem.cz is a functional and professional ticketing platform with good content quality and user experience. To enhance trust and compliance, it should implement comprehensive privacy and cookie policies, improve security headers, and provide clear incident response contacts. These steps will strengthen its security posture and regulatory compliance, benefiting both the business and its customers.
- VVOATT s.r.o.
voatt.cz
Technology · Czech Republic
65Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
VOATT s.r.o. is a Czech-based digital agency specializing in Drupal web development, maintenance, and migration services. Established in 2008, the company has built a strong market position with over 12 years of experience and a portfolio of more than 150 projects, including reputable clients such as Prague Airport and government portals. Their website reflects a professional and modern approach, targeting businesses and organizations seeking scalable Drupal solutions. The company emphasizes quality, client satisfaction, and technical expertise in Drupal platforms. Technically, the website employs modern web technologies including ES modules, Tailwind CSS, and Drupal CMS. The site is well optimized for mobile devices, accessibility, and SEO, with fast performance and a clean user experience. Hosting is provided by Wedos, a known Czech hosting provider. Analytics are implemented via a custom script, with no major third-party trackers or advertising networks detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers, incident response information, and vulnerability disclosure mechanisms. Privacy compliance is partial, with privacy and cookie policies linked but no active consent mechanism. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is low, with a trustworthy domain registration history consistent with the business claims. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to strengthen compliance and trust. The website quality and business credibility are high, supporting VOATT's position as a reliable Drupal specialist agency.
Budweis European Capital of Culture 2028 Associationbudejovice2028.eu
Non-profit · Czech Republic
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.budejovice2028.eu serves as the official platform for České Budějovice's candidacy as the European Capital of Culture 2028. It provides comprehensive information about the candidacy, cultural activities, projects, and community engagement initiatives. The site targets local residents, cultural organizations, volunteers, and the broader European cultural community. It is supported by local government and cultural institutions, positioning itself as a key cultural promotion and community engagement entity in the South Bohemia region. Technically, the website is built on the Solidpixels CMS platform, utilizing modern web technologies including JavaScript, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and performs moderately well. It employs HTTPS with good SSL configuration and secure forms with anti-spam measures, though some security headers could be improved. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible sensitive data exposure. Cookie consent mechanisms and GDPR compliance indicators are present, reflecting a strong privacy posture. No critical vulnerabilities or security incidents were detected. The WHOIS data is unavailable due to EURid privacy policies, but the domain appears legitimate and consistent with the website's cultural and regional focus. Overall, the website is professional, trustworthy, and well-maintained, with strong business credibility and compliance. Strategic recommendations include enhancing security headers and continuing regular security audits to maintain a robust security posture.
Mikroregion Horní Vltava-Boubínskohornivltava.cz
Government · Czech Republic
61Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Mikroregion Horní Vltava-Boubínsko is a regional non-profit interest association focused on the development and cooperation of municipalities located in the Šumava National Park and Protected Landscape Area. The organization supports local development projects, cultural heritage preservation, and tourism promotion within its member municipalities. The website reflects a well-structured regional portal with clear navigation and relevant content for residents and visitors. Technically, the site uses common JavaScript libraries such as jQuery, Flexslider, and Fancybox, providing a moderate level of interactivity and responsiveness. Privacy compliance is well addressed with a detailed cookie consent mechanism and a comprehensive privacy policy. Security posture is moderate, with HTTPS implied but lacking explicit security headers and incident response information. Overall, the site presents a trustworthy and professional image consistent with a small regional government or non-profit entity.
Seznam.cz, a.s.sklik.cz
Media · Czech Republic
61Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Seznam.cz, a.s. operates Sklik, a leading Czech online advertising platform that enables advertisers to reach over 97% of the Czech internet population through search and display ads across Seznam.cz and affiliated popular Czech websites. The platform offers a variety of ad formats including text, graphic, product, and video ads, with advanced targeting and retargeting capabilities. The website is professionally designed, mobile-optimized, and provides comprehensive information about advertising services, supported by strong branding and trust indicators.
UNIWEB s.r.o.regionolomouc.cz
Media · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
REGIONOLOMOUC.CZ is a well-established regional news and information portal serving the Olomoucký kraj region in the Czech Republic. Operated by UNIWEB s.r.o., the portal offers daily news, business directories, event calendars, job listings, and regional advertising opportunities. The website targets local residents and businesses, positioning itself as a trusted source of regional information with a consistent brand presence and a network of sister regional portals. Technically, the site employs modern front-end technologies including Bootstrap, jQuery, and various UI libraries, hosted likely by Active24, with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and Google Analytics but lacks visible security headers and an explicit cookie consent mechanism, indicating room for improvement in compliance and security posture. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the site is professional, content-rich, and trustworthy, with moderate technical and security maturity.
UNIWEB s.r.o.regionostrava.cz
Media · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
REGIONOSTRAVA.CZ is a well-established regional news and information portal focused on the Moravskoslezský kraj region in the Czech Republic. Operated by UNIWEB s.r.o., the portal offers daily news, business directories, event calendars, job listings, and regional advertising services. The website targets local residents and businesses, providing relevant and timely content to maintain strong regional engagement. The portal is part of a larger network of regional sites under the REGION24.CZ media group, enhancing its market position and reach. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, FontAwesome, and various UI enhancement libraries. It uses structured data (JSON-LD) for SEO and is hosted with Active24, a reputable Czech hosting provider. The site is mobile-optimized and features good navigation and content organization, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No direct contact emails or phone numbers are visible, and there is no published security policy or incident response contact. GDPR compliance is partially addressed with a privacy policy page, but no cookie consent mechanism is detected. Overall, the security posture is adequate but could be improved with additional headers and transparency. The website content is safe for general audiences, containing no adult or explicit material. The domain registration data is consistent and legitimate, with a domain age appropriate for the business history. The site demonstrates good business credibility and trust indicators, including social media presence and structured data. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving contact transparency to strengthen compliance and trust.
UNIWEB s.r.o.regionzapad.cz
Media · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
REGIONZAPAD.CZ is a well-established regional news and information portal serving the Karlovarský kraj region in the Czech Republic. Operated by UNIWEB s.r.o., the site offers daily news, a business directory, event calendars, job listings, and regional advertising opportunities. The portal targets local residents and businesses, positioning itself as a key media source in the region. The website demonstrates consistent branding and good content quality with frequent updates and a professional design.
UNIWEB s.r.o.regionvysocina.cz
Media · Czech Republic
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
REGIONVYSOCINA.CZ is a well-established regional news and information portal serving the Vysočina region in the Czech Republic. Operated by UNIWEB s.r.o., the portal offers daily news, business directories, event calendars, job listings, and regional advertising services. The website targets local residents and businesses, positioning itself as a key media source in the region. The content is professionally curated with a consistent brand presence and good quality design and navigation.
UNIWEB s.r.o.regionbrno.cz
Media · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
REGIONBRNO.CZ is a well-established regional news and information portal serving the Jihomoravský kraj region in the Czech Republic. Operated by UNIWEB s.r.o., the website offers daily news, business directories, event calendars, job listings, and regional advertising services. The portal positions itself as a leading media source for local news and community information, targeting residents and businesses within the region. The content is professionally curated and regularly updated, reflecting a mature digital presence.
UNIWEB s.r.o.regionpraha.cz
Media · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
REGIONPRAHA.CZ is a well-established regional news and information portal serving Prague and the Central Bohemian Region. Operated by UNIWEB s.r.o., it offers daily news, a business directory, event calendars, job listings, and regional advertising opportunities. The portal targets local residents and businesses, positioning itself as a trusted source of regional information with a medium-sized operation and consistent branding. Technically, the site employs modern web technologies including Bootstrap, jQuery, and various UI libraries, hosted via Active24, and integrates Google Tag Manager for analytics. The website is mobile-optimized with good SEO practices and a professional design. Security-wise, HTTPS is enforced, and standard security headers are present, though explicit security policies and incident response contacts are absent. Privacy compliance is partially met with a comprehensive GDPR policy but lacks a visible cookie consent mechanism. Overall, the site is safe, trustworthy, and professionally maintained, with room for improvement in privacy and security transparency.
SEATseat.cz
Transportation · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SEAT Czech Republic operates as the official online presence for the SEAT automotive brand within the Czech market, offering a comprehensive range of new and used vehicles, financing options, servicing, and accessories. The website targets both individual consumers and corporate customers, providing detailed model information, configurators, and dealer stock availability. The site reflects a strong market position as part of the Volkswagen Group, with consistent branding and professional content tailored to the Czech audience. Technically, the website leverages modern web technologies including React and Next.js frameworks, ensuring a responsive and accessible user experience across devices. Integration with Google Tag Manager and OneTrust indicates a mature approach to analytics and privacy compliance. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers, demonstrating adherence to best practices. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear cookie consent mechanisms and a comprehensive privacy policy in Czech language. However, explicit security policies and incident response contacts are not publicly disclosed. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The absence of WHOIS data limits domain registration trust analysis, but the official brand presence and professional implementation support legitimacy. Strategic recommendations include enhancing transparency around security policies and vulnerability disclosures to further strengthen trust.
HYALIT spol. s r.o.hotelkasperk.cz
Hospitality · Czech Republic
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Hotel Kašperk is a four-star hospitality business located in the Šumava region of the Czech Republic, offering accommodation, dining, wellness, and event services. The website presents a professional and consistent brand image targeting tourists and visitors interested in regional attractions and leisure activities. The business operates under the company HYALIT spol. s r.o., with clear contact details and active social media presence enhancing its market credibility. Technically, the website employs a mix of legacy and modern JavaScript libraries, integrates third-party booking and analytics services, and uses HTTPS to secure communications. However, some outdated libraries and missing security headers suggest room for improvement in technical security. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information indicate a legitimate operation. Privacy compliance is partially addressed with a privacy policy and terms of service, though cookie consent mechanisms are lacking. Overall, the site is well-structured, user-friendly, and safe for general audiences.
Ski & bike Špičákspicak.cz
Hospitality · Czech Republic
66Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Ski & bike Špičák is a well-established recreational and hospitality business located in the Šumava region of the Czech Republic. The company operates a popular bikepark, offers tourism activities such as hiking and sightseeing, and provides accommodation and hospitality services. Their digital presence includes online ticket sales and service reservations, targeting outdoor enthusiasts and tourists. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the website uses a mix of legacy and modern web technologies including jQuery 1.11.2, Bootstrap CSS, and various marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and uses HTTPS, but lacks some modern security headers and uses an outdated jQuery version, which could pose security risks. The cookie consent mechanism is implemented, but a dedicated privacy policy and terms of service pages are missing. From a security perspective, the site enforces HTTPS and does not expose sensitive data in the HTML. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. No security.txt or vulnerability disclosure information is present, and security headers are missing. The site collects user data via forms and tracking scripts, with moderate user tracking levels. Overall, the website is functional, professional, and safe for general audiences, but improvements in security practices, privacy compliance, and domain registration transparency are recommended to enhance trust and reduce risk.
AdminIT s.r.o.a-hotel.com
Hospitality · Czech Republic
72Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
A-HOTEL.com is an established online travel agency specializing in worldwide accommodation bookings, offering over 3 million hotels, apartments, and other lodging options across more than 150,000 destinations globally. The platform targets travelers seeking convenient and instant online booking with competitive pricing and a broad selection. The business operates primarily from the Czech Republic under the company AdminIT s.r.o., providing additional services such as car rentals, flights, and group reservations. The website supports multiple languages and currencies, enhancing its global reach. Technically, the website employs a modern JavaScript-based stack with integrations including Google Analytics, Google Tag Manager, and a live chat service (Livechatoo). It supports mobile platforms with dedicated iOS and Android apps. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features. Performance is moderate with room for improvement in loading speed and additional accessibility enhancements. From a security perspective, the site enforces HTTPS with HSTS headers, uses cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options, and does not publish a security policy or vulnerability disclosure information. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy verification. Overall, A-HOTEL.com presents a professional and trustworthy platform for accommodation booking with solid technical and privacy compliance foundations. Strategic improvements in security headers, transparency in domain registration, and formal security policies would enhance its security posture and business credibility.
Finance · Czech Republic
63Medium
NIS2 22 · GDPR 10
NIS2 22 · GDPR 10
CFOtrends.cz is a Czech information service website targeted at financial directors, providing up-to-date news on financial trends, legislative changes, and market analyses. The site positions itself as a niche media outlet serving professionals in the finance sector within the Czech Republic. The business model revolves around content provision and advertising revenue, supported by multiple ad networks and tracking technologies. The website demonstrates a professional design and consistent branding, with content quality rated as good. However, explicit business contact details and privacy policies are not prominently available, which slightly impacts trust and compliance perception. From a technical perspective, the site employs modern tracking and advertising technologies including Google Tag Manager, Google Analytics, Gemius, and Didomi for consent management. The site is mobile optimized and shows good SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and consent mechanisms in place, but lacks advanced security headers and visible security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, indicating privacy protection which is common for media websites but reduces transparency. No signs of WAF or content blocking were found, allowing full content access. Overall, the site is moderately trustworthy and professionally maintained but could improve transparency and compliance documentation. Strategic recommendations include adding clear privacy and terms of service pages, publishing contact information including security incident contacts, enhancing security headers, and improving accessibility features to strengthen compliance and user trust.
- CIOtrends
cio.cz
Technology · Czech Republic
67Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.ciotrends.cz serves as an IT strategy and business management information portal targeting IT managers and business professionals primarily in the Czech Republic. It provides content focused on enterprise information systems, CRM, ERP, BI, and BPM. The site demonstrates a professional design with good content quality and user experience, supported by modern web technologies and analytics tools. However, the absence of WHOIS registrant data and explicit privacy and security policies limits the transparency and trustworthiness assessment. The site uses HTTPS and standard advertising and tracking technologies, but lacks some security best practices such as security headers and vulnerability disclosure information. Overall, the website is functional and relevant for its target audience but could improve in compliance and security transparency.
- Channeltrends
channelworld.cz
Technology · Czech Republic
67Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Channeltrends.cz is a Czech technology-focused website serving resellers and VARs (Value Added Resellers). The site provides industry news and content tailored to this niche audience. The website demonstrates a moderate level of digital maturity, utilizing common analytics and advertising technologies such as Google Analytics, Google Tag Manager, Gemius, and Google Adsense. The site is accessible without any WAF or security challenge blocking content. However, the absence of WHOIS registrant data and lack of visible privacy or cookie policies indicate gaps in transparency and privacy compliance. Security posture is weak due to missing security headers and no explicit security policies. Overall, the site appears professional and well-designed but would benefit from improved compliance and security practices.
- Computertrends
computerworld.cz
Technology · Czech Republic
67Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Computertrends.cz is a Czech online news portal focused on IT professionals, providing daily updates on security, hardware, software, technology, and internet news. The site appears to be a reputable source within the Czech IT media landscape, offering relevant and professional content tailored to its target audience. Technically, the website employs modern tracking and advertising technologies including Google Analytics, Google Tag Manager, Gemius, and DoubleClick, alongside a consent management platform to comply with privacy regulations. The site is served over HTTPS with a good SSL configuration, though some security headers are not explicitly detected in the HTML source. The absence of publicly available WHOIS data suggests domain privacy protection, which is common for media websites but reduces transparency. Overall, the website demonstrates a moderate to good security posture with room for improvement in privacy policy transparency and security best practices. No signs of WAF or content blocking were detected, allowing full content accessibility.
Mladá fronta, a.s.cochces.cz
E-commerce · Czech Republic
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
CoChces.cz is a Czech price comparison website operated by Mladá fronta, a.s., offering consumers a platform to search and compare prices for a wide range of products including electronics, home goods, and lifestyle items. The site positions itself as one of the fastest growing price comparison services in the Czech Republic, targeting local consumers seeking the best deals. The business model is primarily based on affiliate marketing and advertising revenue, leveraging partnerships with online shops. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Google Adsense, ensuring a responsive and user-friendly experience optimized for mobile devices. The site uses HTTPS with good SSL configuration, but lacks some security headers and explicit privacy and terms of service pages, which are areas for improvement. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of clear contact information for security incidents and vulnerability disclosure reduces transparency. Overall, the website is professional and trustworthy, but could enhance compliance and security practices to strengthen user trust and regulatory adherence.
Technology · Czech Republic
71Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
SW.CZ is a well-established Czech e-commerce platform specializing in software sales, offering a broad portfolio including Microsoft products, antivirus solutions, graphic design, and educational software. The company targets Czech-speaking consumers and businesses, providing instant electronic license delivery and personalized customer support. Their market position is solid, supported by over 10 years of operation and recognized certifications such as ShopRoku and Heuréka verified reviews. Technically, the website employs modern analytics, marketing, and security technologies, including Google Tag Manager, reCAPTCHA v3, and security headers, ensuring a secure and user-friendly experience. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. However, the absence of WHOIS data and lack of a published security policy or incident response information are areas for improvement. Overall, the site demonstrates a strong security posture, professional design, and trustworthy business practices, making it a reliable platform for software purchases.
Internet Info, s.r.o.mujsoubor.cz
Technology · Czech Republic
53Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Mujsoubor.cz is a Czech-based software and game download portal operated by Internet Info, s.r.o., established in 2011. The website offers a broad range of downloadable programs and games, complemented by articles and guides targeting Czech-speaking technology and gaming enthusiasts. The business model relies primarily on advertising revenue, supported by Google Adsense and other ad networks, with user consent managed via a Didomi consent platform. The site demonstrates a moderate level of digital maturity with a modern tech stack including Bootstrap and jQuery, though some components like jQuery are outdated. Mobile optimization and user experience are good, with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks explicit security headers and published security policies. Privacy compliance is partial, as no dedicated privacy policy or terms of service pages were found in the provided content. WHOIS data confirms the domain's legitimacy and consistent registration details. Overall, the site is functional, safe, and moderately trustworthy but could improve transparency and security practices.
Internet Info, s.r.o.stahnu.cz
Technology · Czech Republic
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Stahnu.cz is a Czech-based software download portal specializing in freeware and shareware applications primarily for Windows users. Established in 2012 and operated by Internet Info, s.r.o., it offers a large catalog of software and games, supported by advertising revenue. The website targets Czech-speaking users seeking free or trial software downloads and provides additional content such as technology articles and user forums. Technically, the site uses a mix of older JavaScript libraries alongside modern tracking and consent management tools, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but is weakened by outdated libraries and lack of explicit security headers or vulnerability disclosure information. Privacy compliance is partial, with a cookie consent banner present but no dedicated privacy policy or terms of service pages detected. Overall, the site is legitimate, accessible, and moderately professional but would benefit from technical and compliance improvements.
- CCnews.cz
cnews.cz
Media · Czech Republic
68Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Cnews.cz is a Czech language technology news website focused on writing about technologies and the internet. The site targets a general audience interested in technology news and information. The website uses common web technologies including Google Analytics, Google Tag Manager, Google Adsense, and Gemius for analytics and advertising. The design is professional and mobile optimized, providing a good user experience with clear navigation and relevant content. However, the website lacks visible privacy, cookie, and terms of service policies, which impacts its privacy compliance score. Security posture is limited due to missing security headers and lack of visible security policies. WHOIS data is unavailable or privacy protected, limiting transparency and trust assessment. Overall, the website is functional and content-rich but would benefit from improved privacy and security disclosures to enhance trust and compliance.
Internet Infostahuj.cz
Technology · Czech Republic
72Medium
NIS2 25 · GDPR 33
NIS2 25 · GDPR 33
Stahuj.cz is a Czech software download portal operated by Internet Info, offering an extensive catalog of freeware and shareware applications. It targets Czech-speaking users seeking software downloads and related information. The site is professionally designed with good content relevance and navigation, supported by advertising revenue. Technically, it employs modern tracking and advertising technologies including Google Analytics, Google Tag Manager, Gemius, and consent management via Didomi. The site uses HTTPS and security headers, indicating a good security posture, though it lacks publicly available security policies or incident response contacts. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial websites. Overall, the site is safe, well-maintained, and compliant with GDPR cookie consent requirements.
- Euro.cz
euro.cz
Finance · Czech Republic
54Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Euro.cz is a well-established Czech online media portal specializing in economic, business, and financial news. It targets professionals in economy, politics, and public administration, providing continuous information and documentation services. The website demonstrates a professional digital presence with consistent branding and quality content tailored to its audience. Technically, the site employs modern web technologies including Google Tag Manager, Google Adsense, Gemius analytics, and a consent management platform to comply with GDPR requirements. The site is mobile optimized and shows good SEO practices. Security-wise, the website uses HTTPS with good SSL configuration and implements standard security headers, although there is room for improvement in CSP implementation and publishing security policies. The absence of WHOIS data limits full domain legitimacy verification, but the overall digital footprint and compliance indicators suggest a legitimate and trustworthy operation. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response information, and improving accessibility features.
- Dobrý web
dobryweb.cz
Education · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Dobrý web is a Czech-based educational platform specializing in digital marketing and UX training, offering a variety of online and bespoke courses. The company has a strong market presence with over 14 years of experience and a high satisfaction rate among participants. Their business model focuses on e-learning and tailored corporate training, supported by a parent company Sherpas, s.r.o., a digital agency. The website is professionally designed with clear navigation and rich content, targeting individuals and companies seeking to improve their digital marketing skills. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and reCAPTCHA for security. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is good with HTTPS and form protections, though some security headers and policies could be improved. Privacy compliance is basic with cookie consent but lacks a clear privacy policy page. WHOIS data is missing, which reduces domain trustworthiness, but the overall business credibility and content quality are high. Recommendations include publishing a privacy policy, security policy, and improving security headers to enhance trust and compliance.
Other · Czech Republic
71Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Tuesday.cz is a Czech website positioning itself as a social network in the real world, primarily focused on organizing professional events such as trainings and full-day conferences, both online and offline. The site targets professionals interested in educational and networking events. The technical infrastructure includes common web technologies and third-party analytics and advertising tools, but lacks visible advanced frameworks or CMS identification. Security posture is moderate with no detected security headers and unknown SSL configuration. Privacy compliance is weak due to absence of visible privacy and cookie policies. The lack of WHOIS data reduces trustworthiness and raises concerns about domain legitimacy. Overall, the website appears functional and professional but would benefit from improved transparency and security practices.
Vitalia.cz - největší server o zdravívitalia.cz
Media · Czech Republic
66Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Vitalia.cz is a prominent Czech health and wellness information portal offering extensive content on healthy living, food quality, and disease prevention. The site targets a general audience interested in health topics and operates primarily on an advertising-supported business model. It holds a strong market position as one of the largest health-related websites in the Czech Republic. Technically, the website employs modern tracking and advertising technologies including Google Analytics, Google Tag Manager, Adform, and Criteo, alongside consent management via Didomi, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, the site enforces HTTPS and uses Sentry for error monitoring, but lacks explicit security headers and detailed security policies. Privacy compliance is well addressed with a comprehensive cookie and privacy policy and active consent mechanisms. Overall, the website presents a professional and trustworthy front with no critical security or privacy issues detected.
Technology · Czech Republic
66Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Root.cz is a Czech technology news portal focusing on Linux, servers, networks, and computer security. It provides articles, news, commentary, and a community forum targeting IT professionals and enthusiasts in the Czech Republic. The website demonstrates a mature content publishing model with regular updates and a consistent brand presence. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, advertising platforms like Google Adsense and CPEX, and uses consent management tools to comply with privacy regulations. Security-wise, the site enforces HTTPS, implements multiple security headers, and uses Sentry for error tracking, indicating a good security posture. However, the absence of visible privacy policy, terms of service, and contact information pages limits full compliance and transparency. Overall, the site is legitimate and trustworthy but could improve privacy disclosures and user contact options.
Media · Czech Republic
64Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Lupa.cz is a Czech-language media website focused on IT, internet market developments, internet security, connectivity, mobile internet, online media, advertising, and cloud services. It targets a general audience interested in technology and internet topics within the Czech Republic. The website demonstrates a moderate level of digital maturity, employing modern web fonts, responsive design, and multiple third-party analytics and advertising technologies such as Google Analytics, Google Tag Manager, Adform, and Gemius. However, the absence of visible privacy and cookie policies, as well as the lack of WHOIS registrant data, limits the transparency and trustworthiness of the domain registration. Security posture is moderate with no explicit security headers detected and no visible incident response or vulnerability disclosure information. Overall, the website is accessible and professionally designed but would benefit from enhanced privacy compliance and clearer business contact information.
- 444
444.hu
Media · Hungary
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
444.hu is a well-established independent Hungarian news website founded in 2003. It targets a broad Hungarian audience with diverse content including politics, culture, sports, and technology. The site uses modern web technologies such as Ember.js and integrates multiple third-party analytics and advertising services to support its business model. While the website demonstrates good content quality and professional design, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is generally good with HTTPS and asynchronous script loading, but could be improved with additional security headers. Overall, the domain's age and consistent WHOIS data support its legitimacy as a reputable media outlet.
DERTOUR Foundation e.V.dertouristik-foundation.com
Non-profit · Germany
69Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
DERTOUR Foundation e.V. is a German non-profit organization established in 2014 by the DERTOUR Group, focusing on supporting educational, nature conservation, and animal protection projects in less developed tourist destinations worldwide. The foundation operates internationally with a network of partners and emphasizes sustainable development and social responsibility. The website is professionally designed using WordPress and Elementor, featuring multilingual support (German and English) and detailed project information. Technical infrastructure includes modern CMS and analytics tools with privacy considerations such as IP anonymization and cookie consent. Security posture is generally good with HTTPS and no visible vulnerabilities, but lacks some security headers and formal policies like privacy and terms of service. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and well-maintained but would benefit from improved transparency and formal policy disclosures.
- NevDama CZ
nev-dama.cz
Hospitality · Czech Republic
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Nev-Dama.cz is a Czech travel agency specializing in ski and summer holiday packages, targeting families, seniors, and groups primarily in the Czech Republic and surrounding countries. The website offers a comprehensive catalog of winter and summer destinations, including ski resorts, wellness stays, and bus transportation tours. The business model focuses on online bookings and seasonal promotions, positioning itself as a regional leader in winter holiday travel. Technically, the site employs modern JavaScript frameworks (Vue.js), integrates Google Analytics and Tag Manager for marketing and analytics, and uses Usercentrics for GDPR-compliant consent management. Security measures include HTTPS enforcement, reCAPTCHA for bot protection, and standard security headers, though no explicit security policy or incident response contacts are published. The absence of WHOIS data reduces transparency but does not detract from the professional presentation and trust signals on the site. Overall, the site is well-structured, mobile-optimized, and compliant with privacy regulations, making it a reliable platform for holiday bookings.
- DER Touristik CZ a.s.
etravel.cz
Hospitality · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
eTravel.cz is an established online travel agency operating under the DER Touristik CZ a.s. umbrella, a major player in Central European travel markets. The website offers a broad range of holiday packages including last minute deals, exotic vacations, ski trips, wellness and spa offers, and tours by bus or own transport. The target audience is primarily Czech-speaking travelers seeking convenient and diverse travel options. The business benefits from strong brand recognition and integration within the DER Touristik group, enhancing its market position and trustworthiness. Technically, the website employs modern web technologies including Vue.js, jQuery, Google Tag Manager, and Usercentrics for consent management, reflecting a mature digital infrastructure. The site is mobile optimized with good performance and basic accessibility features. Analytics and marketing tools are used responsibly with consent mechanisms in place, supporting GDPR compliance. From a security perspective, the site uses HTTPS, reCAPTCHA for form protection, and a consent management platform, indicating a solid security posture. However, the absence of visible security headers and incomplete WHOIS data are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a professional, trustworthy, and user-friendly platform for travel services. The main risk factor is the lack of WHOIS transparency, which slightly reduces domain trustworthiness but does not undermine the evident legitimacy of the business. Strategic recommendations include enhancing security headers, improving accessibility, and ensuring WHOIS data availability for full trust assurance.
Mapotipmapotip.cz
Government · Czech Republic
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Mapotip is a Czech-based technology provider specializing in mapping portals for municipalities and local governments. Their website presents them as a reliable partner offering innovative solutions to facilitate daily administrative tasks and enhance public information presentation. The business model focuses on B2G services, targeting cities and municipalities with tailored mapping solutions. The website is professionally designed using the Framer platform and integrates Google Analytics for visitor tracking. However, the absence of privacy and cookie policies, as well as contact information, limits transparency and compliance. Security posture is moderate with HTTPS enabled but lacking security headers and detailed security policies. The domain WHOIS data is missing or indicates the domain may not be registered, which raises legitimacy concerns despite the professional web presence. Overall, the site is safe and suitable for general audiences, but improvements in compliance and transparency are recommended.
- ALIS spol. s r.o.
alis.cz
Government · Czech Republic
70Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
ALIS spol. s r.o. is a Czech Republic-based software company specializing in modern information systems tailored for public administration, municipalities, schools, and similar organizations. Their flagship product, KEO4, is a cloud-based multitenant application used by thousands of organizations, including over 2,700 municipalities. The company offers a broad range of software solutions including accounting, payroll, document management, and digital citizen services, positioning itself as a key player in the government and education technology sector. Technically, the website demonstrates a moderate level of digital maturity with modern HTML5, CSS3, and JavaScript usage, integration of Google Fonts, and responsive design elements. However, no major JavaScript frameworks or CMS platforms are detected, indicating a custom or lightweight implementation. The site is well-structured with good SEO and accessibility basics but could improve on security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, the absence of WHOIS data and security.txt files, as well as missing explicit security policies, suggests room for improvement in transparency and incident response readiness. The privacy policy is present and GDPR compliant, but cookie consent mechanisms are lacking. Overall, the website is professional, trustworthy, and content-rich, serving a specialized audience in the public sector. The lack of WHOIS data and some security best practices slightly reduce the trust score but do not critically impair the site's credibility. Strategic improvements in security policies, WHOIS transparency, and cookie consent would enhance the company's security posture and compliance standing.
- Restaurace Pod kaštanem Sepekov
restauracesepekov.cz
Hospitality · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Restaurace Pod kaštanem Sepekov is a small local Czech restaurant offering traditional Czech cuisine and catering services including pizzas, events, and take-away meals. The website is professionally designed using the Webnode CMS platform and hosted on AWS Cloudfront, providing moderate performance and good mobile optimization. The site includes a cookie consent mechanism but lacks privacy and terms of service pages, which impacts compliance. Security posture is adequate with HTTPS enforced but missing security headers and WHOIS transparency reduce trust. Overall, the business appears legitimate and focused on local hospitality services with a clear service offering and good user experience.
- SSOVT-Radio spol. s r.o.
obecnirozhlas.cz
Telecommunications · Czech Republic
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
SOVT-Radio spol. s r.o. is a Czech telecommunications company specializing in wireless local information systems and digital municipal radio solutions. Established in 1992 with roots dating back to 1986, the company offers products such as RDRdigi3 and VARIS4, targeting municipalities and emergency services. Their market position is strong within their niche, supported by ISO 9001 certification and a long operational history. The website reflects a professional business presence with detailed product information and clear contact details. Technically, the site is built on WordPress using the Avada theme and common plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and formal privacy and cookie policies, which are compliance gaps. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site is trustworthy and professional but could improve privacy compliance and security hardening.
- Městská knihovna v Milevsku
knihmil.cz
Government · Czech Republic
56Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Městská knihovna v Milevsku is a public municipal library serving the town of Milevsko and its surrounding region in the Czech Republic. The library provides a wide range of services including book lending for adults and children, cultural and educational programs, workshops, and digital library access. It operates under the auspices of the local government (Město Milevsko) and serves a diverse audience including families, schools, and regional users. The website reflects a well-maintained digital presence with clear navigation and relevant content tailored to its community. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and integrates third-party libraries for enhanced user experience like Swiffy Slider and Fancybox. It uses Google Analytics with privacy-conscious settings and is hosted securely over HTTPS. Security posture is generally good, with secure forms and no exposed sensitive data, though improvements in security headers and vulnerability disclosure mechanisms are recommended. Privacy compliance is strong, with clear GDPR and cookie policies and explicit user consent mechanisms. Overall, the website is professional, trustworthy, and well-suited to its public service mission, though the absence of WHOIS data limits domain legitimacy verification.
- Základní škola a Mateřská škola Sepekov
zssepekov.cz
Education · Czech Republic
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Základní škola a Mateřská škola Sepekov is a local educational institution in the Czech Republic providing primary and preschool education services. The website serves as an official information portal for students, parents, and the local community, offering news, event calendars, contact details, and resources related to school activities. The institution promotes a mobile app for real-time updates and maintains a clear communication channel through multiple contact emails and phone numbers. The website content is well-structured, primarily in Czech, and targets local families and stakeholders. Technically, the website uses a combination of jQuery, Bootstrap, Swiper.js, and other JavaScript libraries, likely managed via the Galileo CMS platform. The site is mobile-optimized and accessible, with good SEO practices and a clean navigation structure. However, there is room for improvement in performance optimization and modern security practices. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating some privacy awareness. However, no explicit privacy policy or terms of service pages were found, and security headers are absent, which could expose the site to certain risks. The lack of WHOIS data reduces the ability to fully verify domain legitimacy, though the website content and contact information appear authentic and consistent with a public educational institution. Overall, the website is functional, professional, and trustworthy for its intended audience but would benefit from enhanced security measures, clearer privacy documentation, and improved domain registration transparency to strengthen its risk posture and compliance.
- AAsociace krajů ČR
epusa.cz
Government · Czech Republic
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
ePUSA is a Czech government-operated electronic portal designed to serve territorial self-governments by providing access to public administration data and services. It is managed by the Association of Regions of the Czech Republic and hosted by the Technology Center of the Pilsen Region. The portal collaborates with other government projects such as Czech POINT and MOOL, positioning itself as a key infrastructure for regional data management in the Czech Republic. The website content is primarily in Czech and targets government administrators and officials. Technically, the site uses standard web technologies including jQuery and Google Analytics, but lacks advanced modern frameworks or CMS platforms. Security posture is moderate with HTTPS usage and basic form protections, but lacks visible security headers and privacy/cookie policies, which are areas for improvement. WHOIS data is unavailable, which reduces domain trustworthiness, though the site’s government affiliation and partnerships provide credibility. Overall, the site is functional and serves its purpose but would benefit from enhanced security and privacy compliance measures.
Miowebmioweb.cz
Technology · Czech Republic
70Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Mioweb is a Czech SaaS platform specializing in providing comprehensive digital business solutions including website creation, online courses, membership clubs, e-commerce, and marketing funnels. Positioned as the leading Czech tool for online course creators and infopreneurs, it serves a medium-sized user base with over 7000 users. The platform emphasizes ease of use, professional support, and a rich feature set tailored for digital entrepreneurs. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Funnelytics. Security measures include HTTPS enforcement and standard security headers, reflecting a good security posture. However, the absence of WHOIS data limits domain registration transparency. Overall, Mioweb presents a professional, secure, and user-friendly platform with strong market positioning in the Czech Republic.
- Městys Sepekov
sepekov.eu
Government · Czech Republic
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Městys Sepekov operates as a local government municipality in the Czech Republic, providing official information, public services, cultural event updates, and administrative contacts to residents and visitors. The website serves as a comprehensive portal for municipal news, local services, and community engagement. The site is well-structured with clear navigation and is optimized for mobile devices, reflecting a moderate level of digital maturity. The technical infrastructure leverages common web technologies such as jQuery, Bootstrap, and Swiper.js, integrated within a CMS platform likely provided by Galileo Corporation. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the website presents a trustworthy and professional front for the municipality, with room for improvement in security best practices and transparency.
- Obec Branice
branice.cz
Government · Czech Republic
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Obec Branice is a small municipal government entity in the Czech Republic providing local governance and community information through its website. The site serves residents and visitors with news, official documents, contact details, and information about local organizations and services. The website is built on Joomla CMS with a moderate technical infrastructure and good mobile optimization. Security posture is adequate with HTTPS and CSRF protections but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained, reflecting the municipality's official presence.
Obec Božeticebozetice.cz
Government · Czech Republic
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Obec Božetice operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information about the municipality, including local government services, cultural events, waste collection, and contact details. It targets residents and visitors seeking official information and administrative resources. The website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google reCAPTCHA v3 to secure forms. The site is accessible, mobile-optimized, and presents a professional appearance consistent with a local government portal. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks advanced security headers and explicit privacy or cookie policies. WHOIS data is unavailable, which limits domain registration trust analysis but does not detract from the site's apparent legitimacy. Overall, the website is a reliable source of municipal information with room for improvement in privacy compliance and security best practices.