Security Directory

R

raumwerk ag

raumwerkag.ch

28

raumwerk ag is a Swiss-based company specializing in comprehensive and reliable construction processes, including project development, building permit procedures, realization phases, and project handover. As a total contractor and part of the RaumUnion AG group, raumwerk ag emphasizes responsible specialists, customer security, transparency, and quality execution. The company targets clients seeking trustworthy construction project management and related services in the real estate sector. The website reflects a professional and consistent brand image with clear contact information and a focus on service offerings. Technically, the website is built on WordPress with modern JavaScript libraries such as Alpine.js and jQuery. It uses WP Rocket for performance optimization and loads resources efficiently. The site is mobile-optimized and provides a good user experience with clear navigation. However, it lacks advanced SEO and accessibility features and does not implement security headers, which could be improved. From a security perspective, the site uses HTTPS with excellent SSL configuration, but no security headers were detected. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are important for GDPR compliance and user trust. No analytics or tracking scripts were found, indicating minimal user tracking. The WHOIS data is consistent with the business claims, showing legitimacy and domain age appropriate for the company's stated history. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security best practices, and transparency regarding data protection and incident response to improve its security posture and regulatory adherence.

B

baumanager ag

baumanager.ag

48

baumanager ag is a Swiss-based architectural and construction project management company, operating as a small but specialized service provider. The company emphasizes holistic and innovative architectural solutions, coordinating project quality, costs, and timelines effectively. As a subsidiary of RaumUnion AG, it benefits from a reputable parent company association. The website is professionally designed using WordPress with modern frontend technologies, providing a good user experience and clear business information. However, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the website is trustworthy and serves its target audience well, but compliance and security enhancements are recommended.

B

BALTRO GROUP, a.s.

baltro.cz

57

BALTRO GROUP, a.s. is a Czech Republic-based medium-sized manufacturing company specializing in surface treatments, robotics automation, and mechanical parts production. Established in 2011, the company serves industrial clients with tailored solutions including fluoroplastic coatings, robotized workstations, and machining services. The website reflects a professional and consistent brand image, highlighting key partnerships and certifications such as ISO 9001. Technically, the site is built on WordPress with modern plugins for SEO and GDPR compliance, hosted by WEDOS. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the company presents a trustworthy and credible digital presence aligned with its business operations.

Č

České houby a.s.

ceskehouby.cz

43

České houby a.s. operates a Czech-language website focused on the sale and promotion of Czech mushrooms and related products. The site includes an eShop, recipe content, and company information targeting consumers interested in culinary uses of mushrooms. The company appears to be a small retail business established in 2001, with a consistent domain registration history and a clear physical presence in the Czech Republic. Technically, the website is built on WordPress using the Divi theme and Slider Revolution plugin, hosted likely by WEDOS, and employs HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and some best practices, but lacks explicit security headers and vulnerability disclosure mechanisms. Privacy compliance is basic, with no clear privacy policy or terms of service pages found. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

L

LEBEDA Tools s.r.o.

ronda.cz

60

LEBEDA Tools s.r.o. is a well-established Czech retail company specializing in garden, workshop, and pet supplies with over 30 years of experience. The company operates both a physical store and an e-commerce platform, offering a wide range of products including garden machinery, tools, and accessories from reputable brands. Their services include expert installation, authorized repairs, and customer training, positioning them as a reliable partner in their market segment. Technically, the website is built on the JZShop.cz platform, utilizing standard web technologies and integrating social media and marketing tools such as Facebook SDK and pixel tracking. The site is accessible, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security posture is adequate with HTTPS enforced, though improvements in security headers and explicit incident response policies are recommended. Overall, the website presents a professional and trustworthy digital presence aligned with its business goals.

K

Kulturistika.com

kulturistika.com

65

Kulturistika.com operates as a Czech-based fitness e-commerce platform combined with a magazine offering content on bodybuilding, fitness, strength sports, crossfit, and healthy lifestyle. The site targets fitness enthusiasts and athletes primarily in the Czech and Slovak regions, providing a broad range of sports nutrition products, clothing, equipment, and informative articles. The business model integrates online retail with content publishing to engage and convert its audience. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google reCAPTCHA Enterprise, Facebook SDK, and OneSignal for push notifications. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. Performance is moderate, with multiple external scripts for analytics and advertising. From a security perspective, the site uses HTTPS and implements bot protection on login forms. However, no explicit security headers were detected, and there is no published privacy policy or terms of service in the provided content. The WHOIS data is missing, which raises concerns about domain registration legitimacy. Cookie consent is implemented with advanced user controls, indicating some GDPR compliance awareness. Overall, the website presents a professional and functional platform with moderate security and privacy posture. The lack of WHOIS transparency and absence of privacy policy are notable gaps. Strategic improvements in security headers, privacy documentation, and domain registration verification are recommended to enhance trust and compliance.

A

Asociace výrobců kabelů a vodičů České republiky a Slovenské republiky

vyrobcikabelu.cz

53

The website represents the official association of cable and wire manufacturers in the Czech Republic and Slovakia, serving as a central information hub for industry members and customers. It provides updates on metal prices, quality standards, and industry news, positioning itself as a trusted regional industry association. The site is professionally designed with consistent branding and clear navigation, targeting both professional and lay audiences interested in cable manufacturing and related sectors. Technically, the site is built on WordPress with a modern tech stack including jQuery, Yoast SEO, and Google Tag Manager. It employs multilingual support and cookie consent mechanisms, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS and consent management but lacks some security headers and explicit policies. Security-wise, the site shows good practices in data protection and user consent but lacks visible incident response or vulnerability disclosure information. The absence of WHOIS data is a concern for domain transparency, though the site content and partner affiliations support legitimacy. Overall, the risk is moderate with recommendations to enhance security headers, privacy policies, and domain registration transparency. Strategically, the association should focus on improving compliance documentation and security posture to strengthen trust and regulatory adherence, while continuing to provide valuable industry content and maintain strong partner relationships.

E

EGE Power System, s.r.o.

egepowersystem.cz

50

EGE Power System, s.r.o. is a Czech-based company specializing in sustainable energy solutions including solar carports, heat pumps, photovoltaics, and industrial lighting. Founded in 2023, the company targets businesses and individuals seeking tailored turnkey energy systems. Their market position is that of a niche regional provider emphasizing customized and sustainable energy solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on their core services. Technically, the website employs modern web technologies such as Google Fonts, jQuery, and Slick Carousel, hosted by Webglobe. It uses Google Analytics with privacy-conscious default settings denying ad and analytics storage until consent is given. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. No CMS other than Pagebuilder is detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR. However, no explicit security headers or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. The WHOIS data is consistent with the business information, supporting legitimacy. Overall, the security posture is good but could be enhanced with additional headers and published policies. The overall risk assessment is low with no critical issues detected. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, and auditing third-party scripts regularly to maintain security and compliance. The website is trustworthy, professional, and compliant with privacy regulations, making it suitable for its target audience.

C

Closte

closte.com

58

Closte is a specialized WordPress cloud hosting provider leveraging Google Cloud Platform and Litespeed Enterprise technologies. Founded in 2015, it offers a pay-as-you-go pricing model designed for developers and businesses requiring scalable, high-performance WordPress hosting. The website presents a professional and consistent brand image with clear messaging focused on technical excellence and cost efficiency. The technical infrastructure is modern, utilizing WordPress CMS, Google Cloud hosting, and advanced caching technologies. Security posture is strong with HTTPS enforced and use of reCAPTCHA, though some security headers and explicit policies are missing. Privacy compliance is partial, lacking a cookie consent mechanism. Overall, Closte demonstrates a mature and credible business with a solid technical foundation and good market positioning in the WordPress hosting niche.

G

Gastronovi GmbH & Co. KG

gastronovi.com

57

Gastronovi GmbH & Co. KG operates a professional and comprehensive cloud-based software platform tailored for the gastronomy industry, offering modules for point of sale, inventory management, marketing, guest services, and payment processing. The company targets gastronomy businesses seeking digital transformation and operational efficiency. The website is well-designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages TYPO3 CMS, Bootstrap, and modern JavaScript libraries, with integration of third-party services such as Google Tag Manager and Calendly. Security posture is good with HTTPS enforced and cookie consent mechanisms implemented, though some security headers could be improved. WHOIS data is unavailable, which is unusual but the website's professionalism and trust signals mitigate concerns. Overall, the site demonstrates a strong business and technical foundation with minor areas for security enhancement.

M

Moravskoslezské Investice a Development, a.s.

poho2030.cz

54

POHO2030.cz is the official website for a regional transformational program focused on revitalizing the Pohornická landscape in the Karviná region of the Czech Republic. Coordinated by Moravskoslezské Investice a Development, a.s. (MSID), the program addresses the socio-economic transition following the closure of coal mines. The website provides detailed information about projects, events, and partners involved in this regional development initiative. The target audience includes local residents, investors, government entities, and cultural organizations. Technically, the site is built on WordPress with modern front-end libraries such as Swiper.js and Lottie animations, ensuring a visually engaging and mobile-optimized experience. However, it lacks visible privacy and cookie policies, which impacts compliance scores. Security posture is good with HTTPS enforced, but security headers are not evident. No forms or data collection mechanisms are present on the homepage, reducing immediate privacy risks. Overall, the site is professional, trustworthy, and serves as an effective communication platform for the regional development program.

W

Wojewódzki Ośrodek Dokumentacji Geodezyjnej i Kartograficznej w Katowicach

orsip.pl

72

ORSIP 2.0 is a regional government geoportal operated by the Wojewódzki Ośrodek Dokumentacji Geodezyjnej i Kartograficznej in Katowice, Poland. It provides comprehensive spatial data services, including interactive map applications, open data access, and web map services for the Silesian Voivodeship. The platform targets public administration, local governments, researchers, and citizens interested in regional spatial information. The website is well-structured, professionally designed, and offers extensive content relevant to its audience. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, with a focus on accessibility and mobile optimization. The hosting and domain registration are stable and consistent with the official nature of the service. Security measures include HTTPS enforcement, DNSSEC, cookie consent mechanisms, and CAPTCHA on contact forms, reflecting a good security posture. While no explicit security policy or incident response contacts are published, the overall security and privacy compliance are strong, with GDPR-aligned cookie and privacy policies. The WHOIS data confirms legitimacy and long-term operation, supporting trustworthiness. No vulnerabilities or suspicious content were detected, and the site is safe for general audiences. Overall, ORSIP 2.0 represents a mature, reliable government geoportal with solid technical and security foundations, serving an important role in regional spatial data dissemination and public service.

S

Śląskie dla rodziny |

slaskiedlarodziny.pl

39

The website 'Śląskie dla rodziny' appears to be a regional or community-oriented site focused on family-related content in the Silesian region of Poland. The domain has been registered since 2014 and is hosted by Digital Media Technology Sp. z o.o., indicating a stable and legitimate presence. The site uses WordPress with the Divi theme, a common CMS and theme combination for small to medium websites. However, the site lacks critical compliance elements such as privacy and cookie policies, which are essential for GDPR compliance in the EU. Technically, the site uses standard web technologies including JavaScript and jQuery, and loads fonts from Google Fonts. The security posture is basic with HTTPS enabled but no advanced security headers or DNSSEC. There is minimal tracking via an external script from zenbox.pl. Overall, the site is accessible and safe for general audiences but requires improvements in privacy compliance and security best practices.

Invest in Silesia is the official regional government platform dedicated to promoting investment opportunities and economic development in the Silesia region of Poland. The website serves as a comprehensive resource for investors, businesses, and entrepreneurs seeking information on regional economy, investment offers, business support institutions, and export facilitation. It is managed by the Urząd Marszałkowski Województwa Śląskiego (Marshal's Office of the Silesian Voivodeship), reflecting a strong governmental backing and regional development focus. Technically, the website employs a modern and well-structured technology stack including Bootstrap, jQuery, and various JavaScript libraries for UI components, data visualization, and calendar functionalities. The site is mobile-optimized, accessible, and uses HTTPS with DNSSEC enabled, indicating a secure and trustworthy infrastructure. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. From a security perspective, the site benefits from HTTPS and DNSSEC, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is well addressed with clear cookie consent mechanisms and a privacy policy aligned with GDPR requirements. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for regional investment promotion. Strategic recommendations include enhancing security posture by adding security headers, publishing a formal security policy, and providing incident response contact information to further strengthen trust and compliance.

V

VINCI Energies

vinci-energies.ch

76

VINCI Energies Switzerland is a prominent corporate entity specializing in accelerating the energy transition and digital transformation. As part of the global VINCI S.A. group, it offers a broad range of services including consulting, engineering, project management, and operation of electrical and telecommunication infrastructures. The company targets business and industrial clients seeking sustainable and innovative energy and digital solutions. The website reflects a mature digital presence with comprehensive content, consistent branding, and clear navigation tailored to professional audiences. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and GDPR cookie consent tools, leveraging Matomo for privacy-conscious analytics. The infrastructure supports good performance, mobile optimization, and accessibility. Security best practices are observed with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. The domain registration aligns with the corporate identity, reinforcing legitimacy. The site maintains high professionalism and trustworthiness, suitable for its enterprise audience. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and enhancing direct contact details for security and support to further strengthen trust and compliance.

Take off is a Swiss non-profit organization operating a day structure and work integration program for youth who have dropped out of the education system. It is part of the Jugendsozialwerk Blaues Kreuz BL umbrella and has been active for approximately 25 years, serving the Pratteln region. The website presents a professional and consistent brand image, with clear contact details and certifications from recognized Swiss bodies, indicating a trustworthy and established social service provider. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Bootstrap, and is built on the webIQ 5.0 framework. It employs HTTPS with a good SSL configuration and integrates Google Analytics via Google Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. The site is mobile optimized and has a clear navigation structure, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses a cookie consent banner compliant with GDPR. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit, but limits direct verification of domain ownership. Overall, the website is safe, professional, and credible with a moderate security posture. Strategic improvements in security headers, privacy disclosures, and accessibility would enhance trust and compliance.

AIP plus is a Swiss non-profit organization operating since 1996, focused on providing employment opportunities and integration support for job seekers, particularly those assigned by social insurance and employment agencies. The organization collaborates with local businesses to offer training and internships, aiming to facilitate entry into the first labor market. The website is professionally designed, content-rich, and provides clear contact information and partner links, reflecting a mature digital presence. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with a cookie consent mechanism ensuring privacy compliance. Security posture is adequate with HTTPS enforced, though security headers are missing and could be improved. WHOIS data is privacy protected, typical for Swiss domains, but the website's content and certifications strongly support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional platform.

Wohn- und Arbeitsintegration Bernhardsberg is a Swiss non-profit organization focused on providing housing and work integration services for adults with psychological impairments. It operates under the parent organization Jugendsozialwerk Blaues Kreuz BL and offers a range of social services including residential care, supported employment, and a bio-product manufactory. The website is professionally designed, content-rich, and targets a regional audience in Switzerland. It demonstrates strong trust signals such as certifications (ZEWO, SQS, dot.swiss), clear contact information, and a cookie consent mechanism. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager with IP anonymization, ensuring a good user experience and moderate performance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response policies could enhance protection. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, compliant with privacy regulations, and well-positioned in its social service niche.

Wohngemeinschaft Falkennest is a Swiss non-profit organization providing protected living spaces and social rehabilitation services for young adults aged 18 to 30 facing social difficulties. It operates under the oversight of the Basel-Landschaft canton government and is part of the Stiftung Jugendsozialwerk Blaues Kreuz BL. The website is professionally designed, content-rich, and targets clients, volunteers, and stakeholders in social services. Technically, the site uses a modern JavaScript stack with frameworks such as webIQ and Bootstrap, ensuring good mobile optimization and user experience. Security posture is moderate with room for improvement in HTTP security headers and explicit security policies. Privacy compliance is well addressed with cookie consent and a privacy policy. Overall, the domain and website present a trustworthy and legitimate entity with strong Swiss social service credentials.

Jugendwohngruppen Im Park is a Swiss non-profit organization focused on providing supported living and social integration services for youth in Basel. It operates under the umbrella of Jugendsozialwerk Blaues Kreuz BL and offers residential groups, assisted living, and placement services for young people, including those with psychological stability. The organization maintains a professional online presence with clear contact information, certifications, and social media engagement. Technically, the website uses modern web technologies and frameworks, including webIQ, Bootstrap, and jQuery, and is mobile optimized with a cookie consent mechanism in place. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers are missing and could be improved. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

R

Restaurant Falken

restaurant-falken.ch

55

Restaurant Falken is a small hospitality business based in Liestal, Switzerland, specializing in fresh lunch menus, including burgers, salads, and desserts. The restaurant emphasizes an alcohol-free environment and offers catering and take-away services. The website is built on WordPress using Elementor and Astra theme, reflecting a modern and responsive design with good SEO practices. The presence of a cookie consent banner and detailed cookie preference modal indicates compliance awareness with GDPR regulations, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response contact information. Overall, the website is professional and trustworthy, serving its local audience effectively.

R

RULEMATCH AG

rulematch.com

66

RULEMATCH AG operates a specialized spot cryptocurrency trading venue based in Switzerland, leveraging Nasdaq technology to serve banks, securities firms, and institutional clients. The company positions itself as a market operator focused on interbank trading and settlement of digital assets, emphasizing market integrity, AML/CFT compliance, and ultra-low latency trading. The website reflects a professional and modern digital presence with comprehensive trading documentation and news insights, targeting a niche institutional audience. Technically, the site is built on WordPress with modern SEO and privacy compliance tools, including Iubenda for cookie and privacy management, and Google Tag Manager for analytics. Security posture is solid with HTTPS and obfuscated contact details, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the presence of regulatory identifiers and professional content. Overall, RULEMATCH demonstrates a mature digital infrastructure suitable for its specialized financial services market.

Q

QuickFrame

quickframe.com

61

QuickFrame operates a sophisticated video creation and insights marketplace platform that connects brands with vetted video professionals to produce high-quality video content across multiple styles and objectives. The company has established itself as a trusted partner with preferred partnerships with major digital advertising platforms such as Meta, LinkedIn, TikTok, and MNTN. Their platform supports end-to-end video production workflows including concept development, bid management, collaboration, and final delivery. Technically, the website is built on WordPress and leverages a modern tech stack with extensive analytics and marketing integrations, hosted on AWS infrastructure. The site is well-optimized for SEO, mobile, and accessibility, reflecting a mature digital presence. Security posture is solid with HTTPS and domain protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, QuickFrame presents a professional, trustworthy, and business-focused online presence with room for minor security and privacy enhancements.

R

Reformierte Kirchgemeinde Gelterkinden-Rickenbach-Tecknau

ref-gelterkinden.ch

46

The Reformierte Kirchgemeinde Gelterkinden-Rickenbach-Tecknau is a small non-profit religious community organization serving the local Swiss communities of Gelterkinden, Rickenbach, and Tecknau. The website provides comprehensive information about religious services, community events, youth and family programs, and educational offerings. It targets local community members and church attendees, emphasizing spiritual engagement and social support. The organization maintains a clear and consistent brand presence with regular content updates and accessible contact information. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Event Organiser, with a custom theme likely based on the Genesis Framework. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. SEO practices are adequate with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses anti-spam measures on contact forms but lacks visible security headers such as CSP or HSTS. There is no cookie consent mechanism, which may pose compliance risks under GDPR. No analytics or tracking scripts are detected, indicating minimal user tracking. WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, the website is professional and trustworthy but could improve its privacy compliance and security posture. Strategic enhancements in security headers and cookie consent would strengthen user trust and regulatory adherence.

Kind Jugend Familie KJF is a Swiss regional service provider focused on supporting children, youth, families, institutions, and municipalities through various social services including leisure activities, school support, social work, and counseling. The organization operates under the parent domain jsw.swiss, indicating a government or non-profit affiliation. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and initiatives. Technically, the site uses modern web technologies such as the webIQ CMS framework, Google Maps API for location services, and Google Fonts for typography. Security posture is solid with HTTPS enabled and cookie consent implemented, though some security headers are missing. No vulnerabilities or suspicious patterns were detected. The WHOIS data is unavailable due to privacy protection, which is typical for Swiss domains and justified for this type of organization. Overall, the website is trustworthy, compliant with privacy regulations, and serves its target audience effectively.

A

AGC Glass Europe

agc-yourglass.com

57

AGC Glass Europe is a leading European manufacturer and marketer of flat glass products serving the construction, automotive, and solar power sectors. The company operates under the global AGC brand with a strong presence across Europe and a workforce of approximately 13,000 employees. The website targets architects, specifiers, distributors, and other stakeholders in the glass and construction industries, offering extensive product information, technical support, and digital tools such as a glass configurator. Technically, the site is built on Drupal 10, employs modern web technologies, and integrates marketing and analytics tools like Google Tag Manager and Visual Website Optimizer. Security posture is good with HTTPS and CAPTCHA protections, though some security headers and policies could be improved. The WHOIS data is unavailable or indicates the domain may not be registered, which is a concern for domain legitimacy, but the website content and branding strongly suggest a legitimate business entity. Overall, the site is professional, well-structured, and compliant with privacy regulations.

E

Excelsior

excelsiorwater.cz

44

Excelsior is a small Czech-based business specializing in the production and sale of classic mineral water with a balanced ratio of magnesium and calcium. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with good SEO practices and multilingual support. The technical infrastructure includes modern JavaScript libraries and third-party services such as Google Analytics and Tawk.to for analytics and customer engagement. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which poses a compliance risk. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website rudolfuvpramen.cz represents BHMW a.s., a small hospitality business operating the Mariánskolazaňský Rudolfův pramen, a healing spring in Mariánské Lázně, Czech Republic. The site provides information about the spring's healing properties, targeting general audiences interested in wellness and spa treatments. The business appears to have a local/regional market position with a focus on health and wellness services. Technically, the website is built on WordPress using the Divi theme, incorporating common plugins such as Google Analytics for tracking and Tawk.to for live chat support. The site is moderately optimized for mobile and SEO, with good content quality and consistent branding. Security-wise, HTTPS is enabled and no sensitive data is exposed, but the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security posture. Overall, the site is professional and trustworthy but lacks some critical compliance documentation.

B

BHMW a.s.

bilinska.cz

38

Bílinská kyselka is a company specializing in the bottling and distribution of natural spa spring water, with a historical legacy dating back to 1664. The website presents the brand as a producer of high-quality naturally sparkling spa water, targeting a general audience interested in health and wellness products. The company appears to be a small-sized entity based in the Czech Republic, with a consistent and professional brand presence online. Technically, the website is built on WordPress using the Divi theme and several plugins including Google Analytics for tracking and Soundy Background Music for audio features. The site is mobile optimized and has good SEO practices, although some accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and formal privacy or cookie policies. No WHOIS data is available, which limits domain trust assessment. No vulnerability disclosure or incident response contacts are present, indicating room for improvement in security transparency and compliance. Overall, the website is professional and trustworthy in its content and presentation but would benefit from enhanced privacy compliance, security best practices, and domain registration transparency to improve its risk profile and user trust.

The website slaskie.pl serves as the official online portal for the Marshal's Office of the Silesian Voivodeship in Katowice, Poland. It provides comprehensive information about regional government activities, public services, cultural events, and regional development initiatives. The site targets residents and stakeholders within the Silesian region, offering access to news, administrative resources, and social media engagement. The business model is that of a government public service entity, positioning itself as the authoritative source for regional information and services. From a technical perspective, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and various JavaScript libraries for enhanced user experience such as DataTables and FullCalendar. The site is hosted by OVH SAS, a reputable provider, and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. Security-wise, the site benefits from HTTPS encryption and a cookie consent mechanism compliant with GDPR. However, it lacks DNSSEC and security headers like Content-Security-Policy and Strict-Transport-Security, which are recommended to enhance protection. No incident response or vulnerability disclosure information is provided, indicating an area for improvement in security transparency. Overall, the website is trustworthy and professional, with a high legitimacy score based on WHOIS data and content consistency. It effectively serves its government function with good content quality and user experience. Strategic recommendations include enabling DNSSEC, implementing security headers, and publishing security policies to strengthen its security posture and compliance.

M

Moravskoslezské energetické centrum, příspěvková organizace

mskec.cz

54

Moravskoslezské energetické centrum, p. o., is a Czech regional public organization founded in 2014, specializing in energy consulting, management, and clean mobility development for the Moravskoslezský kraj region. The organization provides expert advisory services to regional public institutions and municipalities, focusing on energy savings, renewable sources, and strategic regional development. The website reflects a professional and consistent brand image with comprehensive content tailored to its target audience. Technically, the site is built on WordPress with modern libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response details. Overall, the site is trustworthy, compliant with GDPR, and well-positioned as a regional energy consultancy.

M

Moravskoslezské Investice a Development, a.s.

msid.cz

53

Moravskoslezské Investice a Development, a.s. (MSID) operates as a regional development agency focused on the Moravskoslezský kraj in the Czech Republic. The company aims to foster regional growth by supporting municipalities, businesses, and environmental initiatives. Their services include investment facilitation, marketing the region, environmental support, and managing land offers. The website is professionally designed, content-rich, and targets regional stakeholders including local governments, investors, and residents. The business model centers on regional development and sustainability, positioning MSID as a key player in the local government and real estate sectors. Technically, the website is built on WordPress with modern front-end technologies such as Tailwind CSS, Swiper.js, and DotLottie animations. SEO is well implemented with Yoast SEO plugin and structured data. The site is mobile optimized and uses analytics tools like Microsoft Clarity and Google Tag Manager. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses secure forms with consent checkboxes for newsletter subscriptions. However, it lacks visible security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and consistent. Overall, MSID's website demonstrates a mature digital presence with strong business credibility and good technical implementation. Strategic improvements in privacy compliance and security headers would further strengthen their security posture and trustworthiness.

M

Městská knihovna Tábor

knihovnatabor.cz

50

Městská knihovna Tábor is a municipal library serving the community of Tábor, Czech Republic, offering a wide range of services including physical and electronic book lending, cultural events, educational programs, and community engagement activities. The website reflects a well-structured public service platform targeting a broad audience including children, adults, seniors, and foreigners. The business model is consistent with a government-funded institution focused on public access to knowledge and culture. Technically, the website employs modern JavaScript libraries, including jQuery and Google Analytics, and integrates a third-party payment widget for ticket sales. The site is mobile-optimized with a moderate performance profile. However, some technical improvements are recommended, such as implementing security headers and a cookie consent mechanism to enhance privacy compliance. From a security perspective, the site uses HTTPS and restricts Google Analytics data collection by default, indicating a privacy-conscious approach. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and structure suggest a trustworthy municipal entity. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a solid digital presence for a public library with room for technical and privacy enhancements. Strategic recommendations include improving security headers, adding cookie consent, and enhancing transparency around data protection to strengthen user trust and compliance.

W

Wohnout

wohnout.cz

45

Wohnout.cz is the official website of the Czech music band Wohnout, providing fans with information about upcoming concerts, albums, lyrics, and an online merchandise shop. The site targets Czech-speaking music enthusiasts and offers direct links to ticket sales and social media channels, establishing a solid presence in the Czech entertainment market. The business model revolves around live performances and merchandise sales, supported by partnerships with music instrument brands and media outlets. Technically, the website employs modern web technologies including JavaScript, jQuery, and Slick Carousel for UI elements, and uses the Pagebuilder CMS platform. The site is mobile-optimized with a responsive design and basic SEO metadata, though there is room for improvement in accessibility and SEO completeness. The site is served over HTTPS, but lacks visible advanced security headers and cookie consent mechanisms. From a security perspective, the site shows moderate maturity with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers, explicit contact information for incident response, and cookie consent mechanisms indicate areas for enhancement. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and external links appear legitimate and professional. Overall, Wohnout.cz is a well-structured and content-rich site for a music band with good user experience and moderate security posture. Strategic improvements in security headers, privacy compliance, and contact transparency would enhance trust and compliance.

N

NTG AGRI s.r.o.

ntgagri.cz

51

NTG AGRI s.r.o. is a Czech-based company specializing in animal nutrition and consulting services for farm animals. Established in 2012, the company offers a range of products including premixes, mineral-vitamin supplements, milk replacers, and silage inoculants, alongside comprehensive advisory services aimed at optimizing farm production. The website reflects a professional and consistent brand presence, targeting agricultural businesses and farmers in the Czech Republic. Technically, the site is built on WordPress with Elementor and uses modern web technologies, hosted likely by WEDOS. Security posture is good with HTTPS enforced, though lacking some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its niche.

I

IPEXO

ipexo.cz

57

IPEXO is a Czech-based IT service provider specializing in cybersecurity, cloud services, website and e-shop development, and digital marketing. The company targets businesses seeking comprehensive internet solutions to enhance security, online presence, and customer acquisition. The website demonstrates a professional design with clear navigation and multiple interactive contact forms protected by Google reCAPTCHA, indicating a moderate level of digital maturity and security awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. The site lacks explicit security policies and incident response information, which are critical for trust in cybersecurity services. Overall, the website is functional and professional but would benefit from enhanced transparency and security disclosures.

E

EGE, spol. s r.o.

ege.cz

52

EGE, spol. s r.o. is a Czech-based medium-sized company specializing in the development, manufacturing, installation, and servicing of energy-related equipment, including encapsulated conductors, arc suppression reactors, and steel constructions. With over 30 years of experience, the company serves industrial and energy sectors, offering full-service solutions and maintaining a strong market presence supported by certifications and EU-funded projects. The website reflects a professional business model targeting B2B clients in energy and manufacturing industries. Technically, the website employs modern web technologies such as Google Tag Manager and Google Analytics, with responsive design and basic accessibility features. The site uses HTTPS with a valid SSL certificate, ensuring secure communications. Cookie consent mechanisms and privacy policies demonstrate GDPR compliance, although some SEO and accessibility improvements are possible. From a security perspective, the site shows good practices like HTTPS enforcement and cookie consent but lacks some security headers and explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is a concern for domain trustworthiness, but the website content and business information appear legitimate. Overall, the website is safe, professional, and compliant with privacy regulations, though domain registration transparency should be improved to enhance trust. Strategic recommendations include adding security headers, publishing incident response details, and enhancing SEO and accessibility.

S

Schweizerische Bodensee-Schifffahrt AG

sbsag.ch

55

Schweizerische Bodensee-Schifffahrt AG operates as a regional transportation and tourism company specializing in ferry and cruise services on Lake Constance (Bodensee). The company offers a variety of services including scheduled ferry routes, themed experience trips, event hosting such as weddings and corporate charters, and hospitality through partner restaurants. Their market position is that of a key regional player in transportation and tourism, targeting general audiences including tourists and local residents. The website reflects a professional and consistent brand image with good content quality and clear navigation.

F

Friendly LLC

friendly.is

63

Friendly LLC is a Swiss software company specializing in privacy-focused web analytics and marketing automation solutions. Their flagship products, Friendly Analytics and Friendly Automate, provide businesses with tools to optimize websites and automate marketing workflows while ensuring compliance with Swiss data protection laws (nFADP) and the EU GDPR. The company positions itself as a Swiss alternative to Google Analytics and HubSpot, emphasizing data residency in Switzerland and high data protection standards. Their market position is strengthened by certifications such as ISO 27001 and ISO 9001, and labels like 'swiss made software' and 'swiss hosting'. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO Premium and Matomo Analytics configured for privacy (cookies disabled). The site is well-optimized for performance, mobile responsiveness, and accessibility. The company uses Mautic for marketing automation and integrates with common CRM systems. Hosting is implied to be Swiss-based, supporting their data protection claims. From a security perspective, Friendly LLC demonstrates strong practices including HTTPS enforcement, ISO certifications, and data hosting in Switzerland. However, the site lacks visible cookie consent mechanisms and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. The use of privacy-friendly analytics and transparent business practices further enhance their security posture. Overall, Friendly LLC presents a trustworthy, professional, and privacy-conscious business with a strong Swiss identity. Strategic recommendations include implementing cookie consent banners, publishing incident response policies, and enhancing security headers to further improve compliance and trust.

B

BOHEMIA HEALING MARIENBAD WATERS a.s.

bhmw.cz

40

BOHEMIA HEALING MARIENBAD WATERS a.s. is a historic company specializing in bottling and distributing spa mineral waters, with a legacy dating back to 1664. The company operates multiple well-known spa water brands, targeting a global audience interested in natural healing waters. Their website serves as a multilingual landing page to promote their brands and provide corporate information. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins for interactive content and multilingual support. It employs modern web technologies and integrates Google Analytics for visitor tracking. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. The absence of WHOIS data reduces domain trustworthiness, though the website content and branding suggest a legitimate and established business. Overall, the site is professional, content-rich, and safe for general audiences, but could benefit from enhanced security and privacy features.

T

TESSEA

tessea.cz

62

TESSEA is a Czech national membership network dedicated to social entrepreneurship, connecting and supporting social enterprises across the Czech Republic. The website serves as a platform to present these enterprises and advocate for their interests. The organization appears to be well-established since 2015, with a clear focus on social economy sectors. The website is built on Joomla CMS with a moderate technical infrastructure including Google Analytics and reCAPTCHA for security and analytics purposes. The site is GDPR compliant with a cookie consent mechanism and a comprehensive privacy policy. Security posture is adequate with HTTPS enforced and some security best practices in place, though improvements are recommended in security headers and updating legacy frameworks. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, TESSEA presents a professional and trustworthy digital presence aligned with its business mission.

B

Beneš a Lát a.s.

benesalat.cz

46

BENEŠ a LÁT a.s. is a well-established Czech manufacturing company specializing in aluminum and zinc casting as well as plastic injection molding. Founded in 1934, the company operates with approximately 450 employees and leverages modern technologies including 3D metal printing. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with a modern tech stack including SEO and social media integration. Security posture is solid with HTTPS, reCAPTCHA, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic with cookie policies and GDPR considerations but lacks comprehensive privacy and security policies. The absence of WHOIS data limits domain trust assessment but the business information and social presence support legitimacy. Overall, the site is professional and trustworthy with room for enhanced security and compliance documentation.

F

Federace nábytkových bank a reuse center

reusefederace.cz

48

Federace nábytkových bank a reuse center is a Czech non-profit federation uniting furniture banks and reuse centers across the Czech Republic. The organization focuses on environmental sustainability by promoting reuse as an alternative to waste disposal. Their services include networking reuse operators, providing expert consultation for new reuse centers, organizing training, and fostering partnerships with public and private sectors. The website is professionally designed, content-rich, and optimized for SEO, targeting reuse operators, NGOs, public administration, and the general public interested in sustainability. Technically, the site runs on WordPress with modern plugins and supports HTTPS with secure form handling. However, the absence of WHOIS data and cookie consent mechanisms slightly reduce trust and privacy compliance scores. Overall, the site demonstrates a strong commitment to its mission with good digital maturity and security posture.

F

Flight Safety Foundation

flightsafety.org

55

Flight Safety Foundation is a well-established, independent non-profit organization dedicated to advancing aviation safety globally through research, education, advocacy, and publishing. With over 80 years of history, it holds a strong market position as a trusted leader in the aviation safety sector, serving aviation professionals and stakeholders worldwide. The website reflects this professionalism with comprehensive content, clear navigation, and a consistent brand presence supported by partnerships with major aviation and aerospace companies. Technically, the website is built on WordPress using modern plugins and frameworks such as Elementor and Yoast SEO. It leverages Amazon AWS for hosting and integrates Google Analytics and Tag Manager for user tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Contact information is clearly provided, enhancing business credibility. Overall, the website is secure, professional, and trustworthy, with minor improvements recommended in security headers, DNS security, and privacy consent mechanisms to further strengthen its posture.

S

studio KUTULULU, s. r. o.

kutululu.cz

60

Studio KUTULULU, s. r. o. is a small Czech graphic design studio specializing in branding, web design, and related creative services. The website is professionally designed, multilingual, and targets a general audience primarily in the Czech Republic. The business presents itself clearly with contact details and a portfolio of projects, indicating a niche local market position. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses popular plugins for SEO, multilingual support, and GDPR compliance. The site is mobile optimized and performs moderately well. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. It uses Facebook Pixel and Google Analytics for marketing and analytics, reflecting moderate user tracking. However, no explicit security policies or incident response information are published, and no WHOIS data is available due to privacy protection or domain registration issues. Despite this, the site shows no signs of malicious activity or vulnerabilities in the visible content. Overall, the website demonstrates a good security posture with room for improvement in publishing security policies and adding security headers. The business credibility is supported by clear contact information and professional presentation. The lack of WHOIS data slightly reduces trust but is common for small businesses. Strategic recommendations include enhancing security headers, publishing incident response info, and maintaining regular audits of third-party scripts.

B

Blaues Kreuz Schweiz

blaueskreuz.info

49

Blaues Kreuz Schweiz is a Swiss non-profit organization dedicated to providing comprehensive information and support related to alcohol consumption and addiction. Their website offers a variety of resources including online tests, help offers, educational content, and testimonials aimed at affected individuals, their families, and interested parties. The organization maintains a professional online presence with clear contact information and social media engagement, reinforcing its credibility in the addiction support sector. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and uses both Google Analytics and Matomo for analytics, balancing functionality with privacy considerations. The site is well-optimized for mobile devices, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and privacy-conscious analytics, but lacks explicit security headers and incident response contact details. The WHOIS data for the domain is malformed and unavailable, which limits domain registration trust analysis. Despite this, the website content and professional presentation suggest legitimacy. No WAF or blocking mechanisms were detected, and the site is fully accessible. The content is mature audience appropriate, focusing on alcohol and addiction education without any explicit adult content. Overall, Blaues Kreuz Schweiz presents a trustworthy and professional resource in its domain, with room for improvement in security policy transparency and WHOIS data clarity.

The Stiftung Jugendsozialwerk Blaues Kreuz BL operates as a Swiss non-profit organization providing a broad range of social services focused on youth and community support. Their offerings include employment assistance, housing, leisure activities, school support, and counseling, targeting children, adolescents, and families primarily in the Basel-Landschaft region. The organization maintains a professional online presence with clear navigation, multilingual support in German, and active social media engagement. Technically, the website is built using modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, supported by the webIQ 5.0 framework. It features responsive design optimized for mobile devices and integrates Google Analytics with IP anonymization, reflecting a moderate level of digital maturity. However, some security best practices such as security headers and incident response disclosures are absent. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit entity, though it limits transparency. Certifications such as ZEWO and SQS Swiss Made enhance trustworthiness. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with an overall AI score of 81. Strategic improvements include adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility features to further strengthen security posture and compliance.

Z

Zindel United

zindel-united.swiss

53

Zindel United is a Swiss-based company specializing in sustainable architectural design and construction services. Their business model focuses on creating resource-conscious and generational building solutions, positioning them as a reputable player in the Swiss real estate and construction sector. The website reflects a medium-sized enterprise with a professional online presence, targeting clients interested in sustainable and innovative building projects. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though there is room for improvement in implementing additional security headers. Overall, the website is trustworthy, well-structured, and compliant with GDPR and Swiss data protection laws.

Appenzeller Bahnen is a regional transportation company operating rail services across the Swiss cantons of Appenzell Innerrhoden, Appenzell Ausserrhoden, and St.Gallen. The company provides travel information, ticketing, and group travel services, positioning itself as a key regional mobility provider. The website reflects a professional digital presence with clear branding and relevant content tailored to travelers in the region. Technically, the site is built on the Contao CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile-optimized and implements good SEO and accessibility practices. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and a published security policy or incident response contacts. Overall, the website is trustworthy, secure, and professionally maintained, supporting the company's business objectives effectively.