Security Directory

P

Plesenská kafrárna, s.r.o.

taron.cz

9

The website www.taron.cz represents an e-commerce platform specializing in the sale of wines from the Rioja region, operated by Plesenská kafrárna, a local café and wine bar based in Ostrava - Plesná, Czech Republic. The business targets wine enthusiasts and local customers seeking quality wines with an option for local delivery. The site leverages the PrestaShop CMS platform and integrates common web technologies such as jQuery and Bootstrap to provide a responsive and user-friendly shopping experience. However, the WHOIS data for the domain is unavailable, which raises concerns about the domain's registration legitimacy and trustworthiness. The website enforces HTTPS, ensuring secure data transmission, but lacks several security headers and a cookie consent mechanism, which impacts its compliance with GDPR and modern security best practices. Contact information is clearly presented, including email, phone, and physical address, along with a Facebook social media presence. Overall, the site is functional and professionally presented but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.

A

ARCHA+

archa-plus.cz

58

ARCHA+ is a multifunctional cultural space operating since 2024 in the premises of the original Divadlo Archa in Prague. The organization offers a diverse program of contemporary arts including music, theater, and dance, targeting a broad audience interested in cultural events. Supported by municipal and governmental bodies, ARCHA+ positions itself as a key cultural institution in Prague with a focus on education and community engagement. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Vue.js, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing, all implemented with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-optimized for users.

N

Nadace BLÍŽKSOBĚ

blizksobe.cz

48

Nadace BLÍŽKSOBĚ is a Czech non-profit foundation dedicated to supporting organizations and individuals that enhance social quality of life, focusing on education, democracy, and civil society. The website presents a professional and consistent brand image with clear mission statements and support for known social initiatives such as Člověk v tísni. Technically, the site is built on WordPress with Bootstrap and uses modern web technologies including Google Analytics and reCAPTCHA for security. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and anti-bot measures, but lacks advanced security headers and published security policies. The absence of privacy and cookie policies is a compliance gap given GDPR relevance. WHOIS data is unavailable, which limits domain trust verification and reduces overall credibility. No signs of WAF or content blocking were detected, and the site content is safe for general audiences.

L

LEPOR s.r.o.

lepor.cz

41

LEPOR s.r.o. is a well-established Czech advertising agency founded in 2000, providing a range of services including copyshop, signmaking, graphic design, printing, and promotional product sales. The company targets local businesses and consumers primarily in the Czech Republic, leveraging partnerships with specialized online catalogs and product providers. The website reflects a solid local market presence with clear contact information and a focus on customer service. Technically, the site uses a combination of popular JavaScript libraries and frameworks such as jQuery and Bootstrap, with moderate performance and good mobile optimization. Security measures include Google reCAPTCHA Enterprise integration on the contact form, but lack visible advanced security headers or published security policies. Privacy compliance is basic, with a cookie consent banner but no privacy policy or terms of service pages. Overall, the site is functional and professional but could improve in security and compliance transparency.

M

Město Kutná Hora

kutnahora.cz

64

Město Kutná Hora operates an official municipal information portal serving citizens, entrepreneurs, and tourists. The website provides comprehensive information about city administration, cultural events, tourism, and local services. It holds a strong market position as the authoritative source for Kutná Hora city information, leveraging official branding and UNESCO heritage association. The portal supports multiple languages and integrates social media channels to enhance engagement. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various JavaScript libraries for UI components and analytics. The CMS identified is Marwel, a specialized platform. The site is mobile optimized with good SEO and accessibility features, though some improvements in security headers and incident response transparency are recommended. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with GDPR-aligned cookie management and privacy policy presence. Overall, the website is a trustworthy, well-maintained municipal portal with moderate technical sophistication and good user experience. The absence of WHOIS data slightly reduces domain trust but does not detract from the legitimacy of the site. Strategic improvements in security policy publication and header implementation would enhance the security posture further.

M

Mobibus

tisseomobibus.com

38

Tisséo Mobibus is a specialized transportation service catering to persons with reduced mobility in the Toulouse metropolitan area, operating under the Tisséo Collectivités umbrella. The website provides comprehensive information about their on-demand transport services, reservation systems, tariff details, and accessibility support. The digital presence is well-structured, leveraging WordPress with modern plugins and frameworks to deliver a user-friendly experience. The site is optimized for mobile and accessibility, reflecting the organization's mission. Security posture is solid with HTTPS and cookie consent management, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business and technical indicators suggest a trustworthy public service entity.

L

Le Grand Ouest Toulousain Agglomération

grandouesttoulousain.fr

51

Le Grand Ouest Toulousain Agglomération is a regional public government entity in France providing a range of community services including waste management, social services, urban planning, and mobility. The website serves as an official portal for residents and businesses within the agglomeration, offering information, online procedures, and public communications. The site is well-branded, professionally designed, and provides clear navigation and relevant content for its audience. Technically, it is built on Joomla CMS with modern libraries such as Bootstrap and jQuery, hosted by OVH, and uses HTTPS with Google Analytics for visitor tracking. The cookie consent mechanism is comprehensive and GDPR-aware, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and aligns well with its public sector mission.

P

Pays de La Loire Coopération Internationale

paysdelaloire-cooperation-internationale.org

49

Pays de La Loire Coopération Internationale operates as a regional multi-actor network dedicated to supporting international cooperation and solidarity projects within the Pays de la Loire region in France. The organization provides a comprehensive suite of services including networking, training, project support, and resource dissemination, positioning itself as a key regional player in the non-profit sector focused on international development and cooperation. The website reflects a professional and well-structured digital presence, leveraging modern web technologies and SEO best practices to engage its target audience effectively. Technically, the website is built on WordPress with a robust tech stack including Bootstrap, jQuery, and various plugins for SEO, GDPR compliance, and user engagement. The site is mobile-optimized, accessible, and performs moderately well, with room for improvement in security headers and hosting transparency. Privacy compliance is well addressed with clear policies and consent mechanisms. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks visible security headers and publicly available incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, though the website content and partner affiliations suggest legitimacy. Overall, the site presents a low-risk profile with strong business credibility and privacy compliance, suitable for its non-profit mission. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving WHOIS transparency to bolster trust and security posture.

L

Lendosphere

lendosphere.com

64

Lendosphere is a French crowdfunding platform specializing in financing projects related to the energy and ecological transition. Established in 2014, it positions itself as a leader in responsible investment opportunities within the renewable energy sector. The platform offers investors the ability to directly fund green projects managed by recognized companies, emphasizing transparency and regulatory compliance. The website is professionally designed, mobile-optimized, and provides comprehensive information including risk disclosures, terms of service, and privacy policies in French. Technically, the site employs modern JavaScript libraries, Cloudflare DNS, and monitoring tools like New Relic, ensuring a stable and performant user experience. Security practices include HTTPS enforcement, domain transfer lock, and CAPTCHA protections, although DNSSEC is not enabled and no explicit security policy or incident response page is found. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

AT Computers a.s. operates the ATC Market website, a well-established e-commerce platform specializing in technology products such as computers, servers, and accessories. The company has a strong regional presence in Slovakia and the Czech Republic, supported by a network of partner retail sites. The website offers a comprehensive product catalog, user account features, and a mobile application, targeting both consumers and business customers. The business model focuses on retail and B2B sales with physical and online channels. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Owl Carousel, built on an ASP.NET MVC framework with a custom CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response contacts are provided. The domain registration is consistent with the business identity, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, serving its target audience effectively.

I

ITS Office Technology, spol. s.r.o.

itsoffice.cz

55

ITS Office Technology, spol. s.r.o. is a Czech-based small IT services company specializing in comprehensive IT management solutions tailored for small to medium-sized businesses. Their offerings include IT infrastructure optimization, monitoring, printing management, helpdesk support, virtualization, and cloud solutions. The company positions itself as a reliable partner providing cost-effective IT outsourcing and support services with SLA guarantees. The website content is professionally presented, targeting regional businesses seeking IT operational support. Technically, the website employs a traditional tech stack including jQuery, Bootstrap, and Font Awesome, running on a custom CMS (AD-RS). The site is HTTPS enabled and mobile responsive with moderate performance. However, it lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. Google Analytics is used for user tracking, indicating moderate data collection practices. From a security perspective, the site shows basic good practices such as HTTPS and no visible sensitive data exposure. However, the absence of security headers and vulnerability disclosure policies suggests room for improvement. The WHOIS data is missing, which raises concerns about domain legitimacy and reduces trustworthiness, although the website content and contact information appear legitimate and consistent with a small regional IT service provider. Overall, the website is functional, professional, and relevant to its business purpose but would benefit from enhanced security measures, improved privacy compliance, and transparency in domain registration to strengthen trust and compliance posture.

C

CAVP (Caisse d'assurance vieillesse des pharmaciens)

interpharmaciens.fr

58

InterPharmaciens is a French financial aid program dedicated to supporting young pharmacists, biologists, and pharmacy owners in their first installations by providing complementary financial contributions through subordinated obligations. The program is offered by the CAVP and managed by ESFIN Gestion, targeting independent pharmacy professionals across metropolitan France and overseas regions. The website presents detailed information about the aid philosophy, eligibility, financial terms, and application process, supported by testimonials and partner logos, establishing a credible and professional presence. Technically, the website employs standard modern web technologies including Bootstrap, jQuery, and Font Awesome, ensuring mobile responsiveness and a good user experience. However, there is no evidence of advanced CMS or analytics tools, and performance is moderate. The site lacks privacy and cookie policies, which is a notable compliance gap. Security headers and SSL configuration details are not provided, limiting the assessment of security posture. From a security perspective, the site does not expose sensitive data or contain forms collecting personal information, reducing immediate risk. However, the absence of security headers and privacy policies suggests room for improvement in compliance and security best practices. WHOIS data is unavailable, likely due to privacy protection, but the domain and content appear consistent with a legitimate French healthcare financial aid service. Overall, the website is trustworthy and professionally presented but should enhance privacy compliance and security measures to improve its security posture and regulatory adherence.

A

Apec

apec.fr

69

Apec is a prominent French organization specializing in employment services for executives and recruitment consulting. The website offers a comprehensive range of services including job offers, career advice, recruitment tools, and consulting support through a network of 500 consultants across France. The site targets both candidates seeking executive positions and recruiters looking for qualified profiles. The business model revolves around facilitating executive employment and providing professional consulting services, positioning Apec as a key player in the French employment market. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and OneTrust for cookie consent, built on the Jahia CMS platform. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience and professional presentation. From a security perspective, the site enforces HTTPS, uses secure login forms, and implements cookie consent mechanisms. However, it lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. The absence of WHOIS registration details slightly impacts trust but is mitigated by the professional nature of the site and clear contact information. Overall, Apec's website is a well-structured, secure, and user-friendly platform that effectively supports its business objectives. Strategic improvements in security transparency and WHOIS data disclosure could further enhance trust and compliance.

A

Alterrenat Presse

alterrenat-presse.com

54

Alterrenat Presse operates as a specialized French e-commerce platform focused on alternative press, books, and magazines related to organic living, well-being, and ecological topics. The website is built on PrestaShop and offers a curated selection of products targeting a niche audience interested in sustainable and alternative lifestyles. The company maintains a professional online presence with clear contact information and social media engagement primarily via Facebook. Technically, the site uses a mix of legacy and modern JavaScript libraries and is mobile optimized with a moderate performance profile. Security posture is adequate with HTTPS enforced and basic security best practices, though improvements in security headers and updated libraries are recommended. The absence of WHOIS registration data raises concerns about domain legitimacy, but the active and professional website presence partially mitigates this risk. Overall, the site is a credible small business e-commerce platform with room for technical and security enhancements.

AT Computers a.s. operates the ATC Market e-commerce platform, specializing in technology and electronic products such as computers, servers, accessories, and related IT equipment. The company targets both retail consumers and business clients primarily in the Czech Republic and Slovakia, supported by a network of partner companies and subsidiaries. The website demonstrates a mature digital presence with a comprehensive product catalog, mobile applications, and clear business information. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit security policies are recommended. The absence of WHOIS data limits domain trust analysis, but the overall business credibility and content quality support a positive risk assessment. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

E

ENGIE

engie.com

72

ENGIE is a major global energy company focused on accelerating the transition to a carbon-neutral economy. The company offers a broad range of services including renewable energy production, energy flexibility solutions, infrastructure management, and energy supply tailored to cities, industries, tertiary sectors, and individual consumers. The website content is professionally presented in French, reflecting ENGIE's strong market position in the energy sector, particularly in France and internationally. Technically, the site is built on Drupal CMS with modern web technologies such as Bootstrap, Google Tag Manager, and Matomo analytics, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not detected and no security.txt file is published. The absence of WHOIS data for the domain is unusual but does not detract significantly from the site's legitimacy given the strong branding and external references. Overall, ENGIE's website demonstrates a mature digital presence aligned with its business objectives and compliance requirements.

I

Inbound Back Office

inboundbackoffice.com

45

Inbound Back Office is a service provider specializing in white-label virtual assistant and marketing support services tailored for marketing agencies, fractional CMOs, and small businesses. The company positions itself as a scalable and seamless support partner, trusted by hundreds of teams globally to handle marketing execution and administrative tasks without the complexities of hiring. Their website reflects a professional and consistent brand image with clear messaging and client testimonials that reinforce trust. Technically, the website leverages modern front-end technologies including Bootstrap, Tailwind CSS, jQuery, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and HubSpot. The site is built on Zephyr CMS and demonstrates good mobile optimization and user experience. However, some areas such as accessibility and SEO could be improved. Security-wise, HTTPS is properly implemented, but the absence of security headers and privacy/cookie policies indicates room for enhancement in compliance and protection. The security posture is moderate with no immediate vulnerabilities detected in the visible content, but the lack of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. This discrepancy between professional website content and missing domain registration information suggests the need for further verification. Overall, the site is functional and credible from a business perspective but requires improvements in privacy compliance and security best practices. Strategically, the company should prioritize establishing clear privacy and cookie policies, implement security headers, and resolve WHOIS registration transparency to strengthen trust and compliance. Enhancing accessibility and SEO will also improve user reach and satisfaction.

A

Akademie klasické homeopatie, spol. s r.o.

studujtehomeopatii.cz

42

Akademie klasické homeopatie, spol. s r.o. is a Czech Republic-based educational organization specializing in professional homeopathy training for medical professionals and the general public. The website offers detailed information about courses, seminars, congresses, and online lectures led by an experienced homeopath. The company has a clear market position with over 32 years of experience in the field. Technically, the website uses a modern JavaScript and CSS stack with responsive design and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS and secure login forms, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and company registration details support legitimacy. Overall, the site is professional, informative, and trustworthy for its target audience.

Pretekaj.sk is a Slovak sports registration and results platform operated by Matj.sk. It serves organizers and athletes by simplifying event registration and providing easy access to sports performance data. The platform targets a niche market within Slovakia, focusing on regional sports events and races. The website is well-structured, professionally designed, and provides clear navigation and relevant content for its audience. Technically, it employs modern web technologies including Bootstrap, jQuery, Google Analytics, and Facebook SDK, hosted likely behind Cloudflare for performance and security. Security posture is good with HTTPS enforced and secure payment logos displayed, though some security headers and explicit policies are missing. Privacy and cookie policies are present and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site is trustworthy, functional, and well-positioned within its market niche.

M

MARVIO agency s.r.o.

marvio.cz

9

MARVIO agency s.r.o. is a creative marketing agency based in Ostrava, Czech Republic, specializing in comprehensive marketing services including online marketing, website development, graphic design, printing, and vehicle wrapping. The company targets businesses and organizations seeking to enhance their marketing presence through both digital and offline channels. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Czech language. Technical infrastructure is based on WordPress CMS with modern JavaScript libraries and frameworks, although some components like jQuery are outdated. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response information. WHOIS data is missing, which raises concerns about domain registration transparency and legitimacy. Overall, the website presents a trustworthy and professional marketing agency with room for improvement in security and domain registration transparency.

D

Divio AG

django-cms.org

10

django CMS is an established open-source enterprise content management system built on the Django framework, supported by the django CMS Association and backed by Divio AG. It targets enterprise marketers, digital agencies, developers, and educational institutions, offering a scalable, secure, and flexible CMS solution with extensive community and expert support. The platform holds a strong market position, evidenced by multiple industry awards and adoption by notable organizations such as NASA and National Geographic. Technically, the website employs a modern technology stack including Python, Django, jQuery, and integrates analytics tools like Google Analytics, Hotjar, and Segment. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a professional design and clear navigation. HTTPS is enforced, and cookie consent mechanisms are implemented, reflecting good privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS usage and cookie consent but lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to privacy protection, which is justified for this type of open-source project. Overall, django CMS.org presents a trustworthy, professional, and technically sound web presence with strong community and business credibility. Strategic improvements in security transparency and policy publication would further enhance its security posture and user trust.

A

Alterrenat Presse

alterrenat.com

41

Alterrenat Presse operates as a niche French e-commerce platform specializing in the sale of alternative and organic lifestyle books and magazines. The website presents a professional and consistent brand image, targeting French-speaking consumers interested in organic agriculture, well-being, and alternative education. The business model centers on online retail and subscriptions, with additional services including event participation and advertising. Technically, the site is built on PrestaShop CMS, leveraging common JavaScript libraries and responsive design for good user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and vulnerability disclosure mechanisms. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly reduces trustworthiness. Overall, the site is functional, compliant with GDPR, and safe for general audiences.

S

Schweisfurth Stiftung

schweisfurth-stiftung.de

55

Schweisfurth Stiftung is a well-established non-profit organization focused on promoting ecological agriculture, animal welfare, and sustainable farming practices primarily in Germany. The foundation operates by granting awards, supporting development projects, and fostering networks within the ecological agriculture sector. Their website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates privacy-compliant analytics and cookie consent mechanisms. Security posture is strong with HTTPS, secure cookies, and captcha protections, although some advanced security headers could be added. Overall, the domain registration and hosting align well with the organization's profile, indicating legitimacy and trustworthiness.

M

MSA

msa.fr

63

The website www.msa.fr/lfp represents the official online portal of the MSA (Mutualité Sociale Agricole), the French agricultural social security organization. It provides comprehensive social protection services including health insurance, family benefits, retirement pensions, and work accident coverage for agricultural workers and employers in France. The portal targets individuals, exploitants, employers, partners, and elected representatives within the agricultural sector. The business model is that of a government social security entity, serving a large user base with essential social services. The website is professionally designed with clear navigation and multiple service sections tailored to different user groups. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as YUI, jQuery, Bootstrap, and Clay components. It incorporates a secure login mechanism via OpenID Connect and includes a cookie consent banner, indicating attention to privacy compliance. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses secure authentication flows. While explicit security headers and policies are not visible in the HTML, the overall posture appears strong with no evident vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security communication. Overall, the website is a trustworthy and authoritative source for agricultural social security services in France. The lack of WHOIS data limits domain registration trust analysis but does not detract from the site's legitimacy given its government affiliation and professional presentation. Strategic recommendations include publishing privacy and security policies, adding security.txt for vulnerability reporting, and enhancing contact information for security incidents to strengthen trust and compliance.

The website www.ekatalog.biz represents a professional B2B e-commerce platform provider focused on IT and digital technology sectors primarily serving Czech and Slovak markets. The business offers rapid deployment of customized e-shops with integrated product catalogs, order processing, and delivery services leveraging the extensive ATComputers stock. The site demonstrates a moderate level of digital maturity with use of modern frontend technologies such as Bootstrap and Modernizr, and a responsive design optimized for multiple device types. However, the absence of privacy and cookie policies, lack of visible security headers, and missing WHOIS data indicate areas for improvement in security and compliance. Contact information is clearly presented, supporting business credibility. Overall, the site is functional and professional but would benefit from enhanced security posture and privacy compliance to strengthen trust and regulatory adherence.

É

École normale supérieure Paris-Saclay

ens-paris-saclay.fr

56

École normale supérieure Paris-Saclay is a prestigious French Grande École specializing in higher education and research, particularly in fundamental sciences, engineering, and social sciences. It operates as part of the Université Paris-Saclay ecosystem and targets students, researchers, and academic partners. The website reflects a mature digital presence with comprehensive academic content, events, and testimonials, supporting its market position as a leading educational institution. Technically, the website is built on Drupal 9 with modern front-end libraries such as Bootstrap, jQuery, and Swiper, and employs Matomo analytics with privacy-conscious settings. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained technical infrastructure suitable for its audience. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or suspicious activities were detected. The WHOIS data confirms domain legitimacy and consistency with the institution's identity. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and good user experience. Strategic improvements could include publishing security policies and enhancing security headers to further strengthen trust and resilience.

D

DK Akord Ostrava

dkakord.cz

48

DK Akord Ostrava operates as a cultural and social center located in Ostrava-Zábřeh, Czech Republic, offering a wide range of cultural events including concerts, theater performances, and educational courses. The organization also provides venue rental services and operates a restaurant, positioning itself as a regional hub for cultural and social activities. The website reflects a medium-sized enterprise with a professional digital presence, integrating modern web technologies and multiple analytics and marketing tools to engage its audience effectively. The business model focuses on event hosting, ticket sales, and community engagement through educational and cultural programming. Technically, the site is built on WordPress with Bootstrap and jQuery, supported by reputable third-party services for analytics and marketing, ensuring a good user experience across devices. Security posture is solid with HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, well-maintained, and compliant with relevant privacy regulations, serving its target audience effectively.

K

Kolektor Conttek GmbH

conttek.de

45

Kolektor Conttek GmbH is a well-established German manufacturer specializing in precision stamping, bending parts, pressfit, contact parts, metal-plastic composite parts, assemblies, and plastic parts primarily serving the automotive and electronics industries. With a 60-year history and integration into the international Kolektor group, the company holds a strong market position as a reliable B2B partner offering development, tooling, and automation services. The website reflects a professional corporate presence with detailed descriptions of technologies and competencies, targeting industrial clients. Technically, the site is built on TYPO3 CMS with modern frontend frameworks and includes a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by adding explicit security policies, incident response contacts, and security headers. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence.

Dynapps is a professional and well-established Odoo implementation partner specializing in digitalizing business processes through tailored ERP solutions. They hold a strong market position as the largest Odoo implementer in Europe and have been recognized as the Best Odoo Partner in Europe 2024. Their services cover a broad range of industries including technology, energy, manufacturing, retail, and healthcare, targeting innovative companies seeking efficient business management solutions. The company operates multiple offices across Belgium, the Netherlands, Switzerland, and France, reinforcing their regional presence. Technically, the website is built on the Odoo CMS platform, utilizing modern web technologies such as Bootstrap, FontAwesome, Google Tag Manager, and Leadinfo for analytics and tracking. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, Dynapps demonstrates a strong posture with HTTPS enforcement, ISO 27001 certification, and use of Google reCAPTCHA on forms. However, there is room for improvement in implementing security headers and explicit incident response contacts. Overall, the website and business exhibit high professionalism, trustworthiness, and compliance with privacy regulations, although cookie consent mechanisms could be enhanced. The lack of public WHOIS data is due to EURid privacy policies and is justified for this business type. The risk profile is low, with no critical vulnerabilities detected, making Dynapps a credible and secure partner for ERP implementation.

K

KaviAR Tech SAS

kaviar.app

63

KaviAR Tech SAS operates KaviAR.app, a cloud-based augmented reality platform combined with a mobile app that enables users to create interactive AR experiences without technical expertise. The company targets businesses and individuals seeking to enhance printed materials with digital content, democratizing augmented reality usage. Their market position is that of a niche SaaS provider focusing on ease of use and accessibility, supported by tiered subscription plans and a free trial. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as HubSpot and Google Analytics. The site is mobile optimized and well-structured, providing a professional user experience. Security posture is solid with HTTPS, reCAPTCHA Enterprise, and cookie consent mechanisms, though it lacks explicit security policies and advanced security headers. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and consistency. The site does not contain adult or questionable content and maintains good privacy compliance.

R

Rostlinky.cz

rostlinky.cz

42

Rostlinky.cz is an established online garden retail business operating since 2001, primarily serving customers in the Czech Republic and Slovakia. The website offers a wide range of gardening products including seeds, bulbs, balcony plants, ornamental and fruit trees, shrubs, perennials, and gardening accessories. The business model is focused on e-commerce retail with an emphasis on fair and expert service. Technically, the website is built on the Magento platform, utilizing common web technologies such as jQuery, Prototype.js, and Bootstrap, and integrates marketing and analytics tools like Google Tag Manager and Facebook SDK. The site is secured with HTTPS and implements GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS registration data and lack of explicit security headers slightly reduce the overall trust and security posture. Contact information is limited to a phone number and online forms, with no public company email addresses found. Overall, the website presents a professional and trustworthy front for its business, but domain registration transparency and enhanced security headers would improve its credibility and security stance.

M

Městská divadla pražská

mestskadivadlaprazska.cz

79

Městská divadla pražská is a prominent cultural institution operating the largest single ensemble drama theatre across three stages in the center of Prague. The organization offers theatrical performances, ticket sales, educational programs, and media content such as blogs and podcasts, targeting a general audience interested in theatre and culture. The website reflects a mature digital presence with a professional design, clear navigation, and mobile responsiveness. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and analytics tools like Matomo and Facebook Pixel, ensuring a robust user experience. Security posture is solid with HTTPS enforced and secure form handling, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website demonstrates high professionalism and trustworthiness, supporting the institution's mission effectively.

S

STUDIO G

studiog.cz

40

STUDIO G is a small, independent drama theatre based in Ostrava, Czech Republic, founded in 2019. It offers a mix of original and classical theatrical performances, including children's theatre, poetry evenings, and concerts. The theatre collaborates with local professional actors and conservatory students, positioning itself as a cultural hub with growing local recognition. The website is built on Joomla CMS with modern front-end technologies and includes interactive sliders and social media integration. While the site is well-designed and mobile-optimized, it lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the domain registration and business information are consistent and trustworthy, reflecting a legitimate cultural organization.

D

Divadlo Petra Bezruče, s.r.o.

bezruci.cz

43

Divadlo Petra Bezruče, s.r.o. is a regional theatre company based in Ostrava, Czech Republic, providing theatrical performances, ticketing services, subscriptions, and cultural event hosting. The website serves as a portal for program schedules, ticket reservations, and company information, targeting local theatre audiences and cultural enthusiasts. The business operates with support from local government and cultural partners, positioning itself as a key cultural institution in the region. Technically, the website employs modern front-end technologies including Bootstrap, JavaScript libraries like WOW.js, and a cookie consent mechanism from TermsFeed. The site is mobile-optimized with responsive design and provides a user-friendly navigation experience. However, there is no evidence of a CMS or advanced analytics tools, and performance is moderate. From a security perspective, the site uses HTTPS but lacks visible security headers and published privacy or terms of service policies. Cookie consent is implemented with express consent, indicating some GDPR awareness. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and clear contact information mitigate some concerns. Overall, the website is functional and professional but would benefit from enhanced security practices, published privacy documentation, and WHOIS transparency to improve trust and compliance.

G

GARVIS Solutions s.r.o.

reenio.cz

71

REENIO, operated by GARVIS Solutions s.r.o., is a Czech-based online reservation system offering a cloud-hosted SaaS platform tailored for businesses providing direct customer services such as sports facilities, wellness centers, education, and cultural events. The platform supports free and paid subscription models, integrates secure online payments, and emphasizes ease of use and customer communication. The company holds a strong market position in the Czech Republic with a focus on GDPR compliance and continuous product development.

E

Emmaüs France

emmaus-france.org

60

Emmaüs France is a well-established non-profit organization dedicated to social inclusion and fighting exclusion through community support, reemployment, and ecological alternatives. Founded over 70 years ago, it holds a strong market position in France with a large network and a clear mission to empower vulnerable populations. The website reflects this mission with comprehensive content, clear navigation, and multiple engagement channels for donors, volunteers, and partners. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses privacy-respecting analytics (Matomo). It is hosted behind Cloudflare DNS and enforces HTTPS, ensuring a secure browsing experience. Security practices are good, with cookie consent mechanisms and domain transfer protections, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable digital presence for the organization.

T

TopRaut.cz

topraut.cz

52

TopRaut.cz is a small hospitality business specializing in catering services for events such as receptions, weddings, parties, seminars, and film production catering. Operating primarily in Prague, it manages the Kavárna DRBárna café and offers event space rental with audiovisual support. The company emphasizes customized menus and individual client approaches, serving a diverse clientele including cultural and film industry professionals. The website is built on WordPress with modern plugins and includes a contact form protected by Google reCAPTCHA. While the site is well-designed and content-rich, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data limits domain trust assessment, but the visible business information and partner references support legitimacy.

C

Centre Hospitalier Universitaire de Nîmes

chu-nimes.fr

56

The Centre Hospitalier Universitaire de Nîmes (CHU de Nîmes) is a major public university hospital serving the Gard region and neighboring departments in France. It provides comprehensive healthcare services including emergency care, consultations, hospitalizations, medical research, and professional training. The institution is large, with nearly 7,400 staff including medical and non-medical personnel, and operates across multiple sites. The website reflects a mature digital presence with a professional design, clear navigation, and accessibility features, targeting patients, healthcare professionals, researchers, and students. Technically, the website is built on the Drupal CMS platform, hosted by OVH, and incorporates modern web technologies such as Bootstrap and Swiper.js. It includes a cookie consent mechanism compliant with GDPR and uses Google Analytics for audience measurement. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms the domain's legitimacy with a long registration history and consistent registration details. Overall, the website demonstrates a strong security posture and compliance with privacy regulations, supporting the trustworthiness of the institution. Recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to further improve security transparency.

S

Spolek PŘÍZNAKY TRANSFORMACE

priznakytransformace.cz

57

The website priznakytransformace.cz is a Czech non-profit portal dedicated to personal development, spirituality, esoterics, health, and astrology. It offers a rich collection of articles, videos, and horoscopes targeting a general audience interested in these topics. The organization behind the site is a registered non-profit entity founded in 2014, with clear contact details and donation options, indicating a transparent and community-supported business model. Technically, the site is built on Joomla CMS with Gantry5 framework and uses common web technologies such as jQuery and Bootstrap. It is hosted likely by Wedos, a known Czech hosting provider. The site is mobile-optimized and has good SEO practices, although accessibility is basic.

Nákupní kartářka.cz is a Czech Republic based online platform specializing in prepaid credit packages for tarot card readings and psychic consultations via telephone. The website targets adults interested in esoteric and psychic services, offering a variety of credit packages to access live card readers. The business operates a niche e-commerce model focused on telephonic psychic services, positioning itself as a specialized service provider within the Czech market. Technically, the site is built on the Yii framework with Bootstrap and jQuery, integrating Google Analytics for user tracking. The site is mobile responsive and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enforced and CSRF protections in place, but lacks advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. WHOIS data is transparent and consistent with the business profile, indicating legitimacy and domain age appropriate for the business history. Overall, the website is functional and professional but could improve privacy compliance and security practices to enhance trust and regulatory adherence.

E

E-commerce + Print on Demand

tpop.fr

69

TPOP is a French-based e-commerce platform specializing in print-on-demand services with a strong emphasis on eco-responsibility and no upfront stock costs. The platform enables users to create online stores quickly and easily, offering physical, digital, and print-on-demand products with local European production. The company positions itself as a sustainable and user-friendly alternative in the e-commerce market, integrating with popular platforms like Shopify, Etsy, and WooCommerce. The website demonstrates a high level of digital maturity, employing modern web technologies such as Bootstrap, jQuery, and Weglot for multilingual support, alongside analytics and user feedback tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The lack of WHOIS data introduces some uncertainty about domain registration legitimacy, but the professional presentation and trust indicators like Trustpilot reviews and social media presence support credibility. Overall, TPOP presents a trustworthy and technically sound e-commerce solution with room for improvement in transparency and security disclosures.

O

OpenStreetMap

osm.org

11

OpenStreetMap is a globally recognized open source mapping platform that provides free, editable maps created by a community of contributors. It holds a strong market position as a leading provider of open geospatial data and mapping services. The website offers a comprehensive suite of tools including map editing, search, directions, GPS trace uploads, and community engagement features, targeting a broad audience from casual users to professional mappers. Technically, the site employs modern JavaScript frameworks such as Leaflet.js and Turbo (Hotwire), with hosting provided by Fastly, ensuring fast performance and excellent mobile optimization. Security measures include HTTPS enforcement, CSRF protection, and use of Content Security Policy nonces, although some standard security headers are missing. Privacy compliance is basic, with a privacy policy and terms of use present but lacking explicit cookie consent mechanisms or GDPR-specific statements. No contact emails or phone numbers are provided on the main page, and no vulnerability disclosure or security.txt files are found. Overall, the site is professional, trustworthy, and safe for general audiences, with a high AI score reflecting strong content quality, technical implementation, and business credibility.

Т

Тимак Агро България ЕАД

timacagrobg.com

48

Тимак Агро България ЕАД is a Bulgarian subsidiary of the international Roullier Group, specializing in innovative mineral fertilizers, biostimulants, and animal nutrition products. The company targets agricultural professionals and livestock producers, offering both products and expert agronomic consulting. The website reflects a medium-sized enterprise with a solid market position in Bulgaria and a 20-year presence, supported by professional content and certifications such as GreatPlaceToWork®. Technically, the site is built on WordPress with modern libraries and frameworks, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and basic best practices, though some security headers are missing and WHOIS data is unavailable, which slightly reduces trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and business-focused, though domain registration transparency should be improved.

D

DK Akord Ostrava

dk-akord.cz

48

DK Akord Ostrava is a cultural and community center located in Ostrava-Zábřeh, Czech Republic, offering a wide range of cultural events including concerts, theater performances, and educational courses. The organization serves the general public interested in cultural and educational activities and operates a venue rental service, restaurant, and ticket sales platform. The website reflects a medium-sized regional cultural hub with consistent branding and good content quality. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Yandex Metrika, and Facebook Pixel. The site is mobile-optimized and SEO-friendly, providing a good user experience.

T

TicketingBox

ticketingbox.com

67

TicketingBox operates a professional, turnkey theater ticketing platform designed to boost ticket sales, simplify audience management, and maximize revenue for theaters and venues. The website demonstrates a solid market position with notable clients such as Shen Yun, showcasing its capability to handle large-scale events across multiple theaters annually. The platform offers comprehensive services including marketing tools, custom branding, reporting, and secure ticketing technology. Technically, the website is built on a modern WordPress CMS with Elementor and integrates Google Analytics and AdSense for tracking and monetization. The site is mobile-optimized and SEO-friendly, providing a good user experience. However, the absence of privacy and cookie policies and missing WHOIS registration data raise concerns about compliance and domain legitimacy. Security posture is moderate with HTTPS enabled but lacks explicit security headers and published security policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and domain registration transparency.

R

Regiontourist.cz

region-tour.cz

41

Regiontourist.cz is a Czech Republic-focused online tourism platform that connects tourists with accommodation options, experiences, and travel tips. Founded in 2009, it serves a niche market by providing curated listings and content to help plan vacations and day trips within the country. The platform supports service providers such as accommodation owners and experience operators by offering promotional opportunities and customer acquisition channels. Technically, the website uses modern JavaScript libraries including jQuery and Bootstrap, integrates Google Tag Manager for analytics, and employs MailerLite for marketing. The site is mobile-optimized with good SEO practices and structured data for enhanced search visibility. Security-wise, the site enforces HTTPS but lacks some recommended security headers and explicit cookie consent mechanisms. No WHOIS data was found, which slightly reduces trustworthiness but the website content and social media presence indicate a legitimate business. Overall, the site is professional, user-friendly, and focused on family-friendly tourism content.

TRE.CZ is a small, modern web development company based in the Czech Republic specializing in professional website creation, including web design, WordPress development, and SEO consulting. The company targets businesses seeking comprehensive digital solutions from initial wireframes to post-launch advertising campaigns. The website is built on WordPress using the Illdy theme and incorporates modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA for security. While the site is well-structured and visually professional, it lacks published privacy and cookie policies, which impacts compliance and user trust. The absence of WHOIS registration data limits the ability to fully verify domain legitimacy, although the website content and contact information appear consistent and professional. Security posture is moderate with HTTPS and reCAPTCHA implemented but missing key security headers and formal security policies. Overall, TRE.CZ presents as a credible small business with room for improvement in privacy compliance and security transparency.

Onestein B.V. is a Dutch company specializing in open-source business software solutions, prominently featuring their CURQ ERP system based on Odoo Community. They provide consultancy, support, and custom development services tailored to businesses ranging from startups to enterprises, with a strong emphasis on Dutch financial compliance and community management. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site runs on Odoo CMS, uses Matomo for analytics, and employs modern web technologies such as Bootstrap and FontAwesome. Security posture is solid with HTTPS enforced, CSRF tokens present, and DNSSEC enabled, though the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in compliance and defense-in-depth. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

U

Université de Montpellier

umontpellier.fr

60

Université de Montpellier is a large, historic French public university founded in 1220, offering higher education, research, innovation, and international cooperation services. It holds a strong market position with recognized certifications such as the European HR Excellence in Research label. The website targets students, researchers, and academic partners, providing comprehensive information on academic programs, research units, campus life, and international partnerships. Technically, the site is built on WordPress with modern frameworks like Bootstrap and jQuery, supporting multilingual content via Weglot and analytics through Piwik/Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is partial with a clear privacy policy but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, supporting the university's mission and reputation.