Security Directory

P

Photon Energy Group

photonwater.com

48

Photon Water, a part of Photon Energy Group, offers specialized water treatment and environmental remediation solutions focusing on the removal of PFAS and other contaminants from water and soil. The company targets businesses and organizations requiring advanced water management technologies. The website presents a professional image with clear branding and relevant content, positioning itself as a niche player in the energy and environmental sectors. Technically, the website employs a modern JavaScript technology stack including Bootstrap, jQuery, and Google reCAPTCHA for bot protection. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices evident in meta tags and structured content. However, some accessibility features appear basic, and no CMS or hosting provider information is discernible. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, but lacks visible security headers and published privacy or security policies. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No contact information or incident response details are provided, limiting trust and compliance indicators. Overall, the website is functional and professional but would benefit from enhanced transparency, published policies, and improved security practices to strengthen trustworthiness and compliance posture.

N

Nadace Partnerství (The Environmental Partnership Foundation)

adapterraawards.cz

63

The Adapterra Awards website is operated by Nadace Partnerství, a Czech non-profit foundation focused on promoting climate change adaptation through awards, contests, and an inspirational database. The site targets experts and the general public interested in environmental adaptation measures, primarily in the Czech Republic and Austria. It offers resources such as downloadable booklets and showcases best practice projects. Technically, the site uses ASP.NET WebForms with Kentico CMS, integrates modern JavaScript libraries, and employs Google Tag Manager and Seznam tracking for analytics and marketing. The design is professional, mobile-optimized, and content-rich, supporting good user experience and SEO. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response contacts. WHOIS data is unavailable, limiting domain legitimacy verification, though the presence of official partner logos and contact details supports trustworthiness. Overall, the site is a credible, well-maintained resource for climate adaptation information with room for security and compliance enhancements.

N

Nadace Partnerství

lifetreecheck.eu

58

LIFE Tree Check is a non-profit environmental project coordinated by Nadace Partnerství, focused on helping Central European cities adapt to climate change by strengthening green infrastructure. The website serves as an educational and resource platform offering applications, publications, and inspirational content to municipalities and the public. The project is supported by the EU LIFE program and partners across multiple countries, positioning it as a reputable initiative in the climate adaptation sector. Technically, the site is built on Kentico CMS with ASP.NET WebForms, leveraging modern web technologies like jQuery and Google Tag Manager for analytics and marketing. The site is well-designed, mobile-optimized, and provides clear navigation and rich content in Czech. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit incident response information. WHOIS data is unavailable due to EURid privacy policies, but the site’s legitimacy is supported by its association with a known non-profit and EU funding. Overall, the site is professional, trustworthy, and serves its target audience effectively.

N

Nadace Partnerství

otevrenazahrada.cz

58

Otevřená zahrada is a non-profit initiative managed by Nadace Partnerství, offering a unique blend of nature, education, and community experiences in the heart of Brno, Czech Republic. The website targets children, schools, companies, and the general public, providing educational programs, event spaces, and recreational opportunities. The project is positioned as a local community and environmental hub with a strong focus on sustainability and learning. Technically, the website is built on ASP.NET WebForms with Kentico CMS elements, utilizing modern libraries such as Bootstrap, jQuery, and Tippy.js for UI enhancements. It integrates Google Tag Manager and Microsoft Clarity for analytics and tracking, and implements a cookie consent mechanism aligned with GDPR requirements. The site demonstrates good mobile optimization and SEO practices, though some accessibility improvements are possible. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers in the provided data. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the association with a reputable foundation and clear contact information enhance credibility. Overall, the website is professional, content-rich, and trustworthy, with recommendations to enhance security headers and improve domain transparency through WHOIS data availability.

L

Laser Game Arény – návrh a stavba Laser Arény, vybavení pro Laser Game, vesty a zbraně pro Laser Game

lasergameareny.cz

44

LaserGameAreny.cz is a Czech-based company specializing in the design, construction, and outfitting of laser game arenas. With over 25 realized projects and 13 years of experience, they position themselves as a leading European provider in this niche entertainment sector. Their services include arena design, supply of gaming equipment such as vests and guns, development of game extensions, and comprehensive operational support including marketing and reservation systems. The website is professionally designed, mobile-optimized, and provides detailed information about the business model and benefits of laser game arenas. Technically, the site uses standard web technologies including jQuery and Google Fonts, hosted on a Czech hosting provider. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. Contact is primarily via a contact page with no direct emails or phone numbers visible. Overall, the site is safe, suitable for a general audience, and reflects a credible business presence in the Czech Republic.

S

Sport Balkán

sportbalkan.cz

45

Sport Balkán is a small hospitality and leisure business located in Brno, Czech Republic, offering a variety of sports and entertainment services including bowling, squash, laser game, billiards, table football, and darts. The website presents a professional and consistent brand image with clear contact information and partner affiliations. The business targets a general audience including corporate events, students, and birthday parties. Technically, the website uses AngularJS and jQuery frameworks with Bootstrap styling, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. WHOIS data is unavailable due to privacy protection, which is typical for small businesses. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

U

UrbanReport

urbanreport.ro

54

UrbanReport is an online Romanian media publication focused on urban life, providing news, articles, and analyses related to lifestyle, health, fitness, and general urban topics. The website targets a general audience interested in staying informed about urban living. The business operates primarily as a digital media outlet with a small-scale presence and consistent branding. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy and terms of service pages. Security posture is adequate but could be improved with better header implementation and clearer compliance documentation. Overall, the site is professional and trustworthy with no signs of malicious content or adult material.

K

KOUDELKA DESIGN s.r.o.

kp-design.cz

44

KOUDELKA DESIGN s.r.o. is a small Czech company specializing in advertising production services. The website presents a professional design using WordPress with the Divi theme, targeting businesses seeking advertising solutions. The technical infrastructure includes modern web technologies such as jQuery, Google reCAPTCHA for bot protection, and Google Analytics for visitor tracking. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enabled and reCAPTCHA in use, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is functional and professional but could improve transparency and security documentation.

C

Cestopisy

cestopisy.net

39

Cestopisy.net is a Czech independent travel guide website operating for over 19 years, offering detailed travelogues, quality photographs, and video guides focused on tourism, vacations, and sightseeing tips. The site targets travelers and tourists seeking authentic and well-curated travel content. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins, delivering a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled but lacks security headers and explicit privacy/cookie policies, which are areas for improvement. WHOIS data is missing, which raises concerns about domain registration transparency but does not detract significantly from the site's professional content and trustworthiness. Overall, the site is a reliable resource for travel information with moderate technical and security maturity.

M

Muzeum regionu Boskovicka

muzeum-boskovicka-sbirky.cz

47

The website muzeum-boskovicka-sbirky.cz serves as an online catalog for the Museum of the Boskovice region, providing a searchable database of collection items primarily in the Czech language. The institution is a regional cultural entity focused on preserving and showcasing historical artifacts. The site is well-structured, professionally designed, and optimized for mobile devices, offering a good user experience with clear navigation and search functionalities. The business model is that of a public cultural institution, targeting researchers, historians, and the general public interested in regional history. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies such as JavaScript libraries (Select2), Google Fonts, and external cookie consent management via CookieHub. Hosting appears to be managed through a Czech registrar and hosting provider, with proper HTTPS encryption ensuring secure data transmission. Performance is moderate with good mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating awareness of privacy regulations such as GDPR. However, there is room for improvement by adding security headers and publishing formal security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Analytics usage is moderate, employing Google Analytics with user consent. Overall, the website is legitimate, trustworthy, and professionally maintained, with a strong alignment between domain registration data and business identity. It poses low risk and serves its intended audience effectively. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and possibly adding a dedicated privacy policy page to improve compliance and user trust.

B

BluePool s.r.o.

neabeaute.cz

50

NEA Beauté is a luxury beauty salon based in Prague 10, Czech Republic, offering a wide range of cosmetic and wellness services including manicure, pedicure, skincare treatments, eyelash extensions, permanent makeup, and massages. The salon partners with premium brands such as BABOR and Cuccio, emphasizing high-quality products and personalized client care. The website supports online booking via a third-party service and maintains an e-shop for related products. Technically, the site uses Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. While the site is well-structured and mobile-optimized, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security headers are not evident, suggesting room for improvement in security posture. The domain registration is consistent and legitimate, with no signs of suspicious activity. Overall, the website presents a professional and trustworthy image suitable for its target audience.

P

Photon Energy Group

photonenergy.com

54

Photon Energy Group is a well-established renewable energy company specializing in solar power plant development, battery energy storage systems, energy trading, and flexibility solutions. With over 16 years of industry experience and operations in more than 15 countries, the company maintains a significant portfolio of photovoltaic assets and offers comprehensive services from project development to operations and maintenance. The website reflects a professional and modern digital presence with strong branding and clear communication of services and case studies. Technically, the site employs a modern technology stack including Google Tag Manager, reCAPTCHA, and various JavaScript libraries, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and spam protection on forms, though it lacks some advanced security headers and explicit incident response or vulnerability disclosure pages. The absence of WHOIS data limits domain trust verification, but the overall business credibility remains high due to transparent business information, investor relations, and social media presence. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving domain registration transparency.

R

RichmondShare Blog | High quality content and interaction in the ELT world | RichmondShare is a free-access blog aimed at teachers and future teachers of English as a Foreign Language where ELT professionals (authors, editors, teachers educators, teachers etc) share their ideas, experiences and reflections.

richmondshare.com.br

68

RichmondShare is a niche educational blog focused on English Language Teaching (ELT) professionals and future teachers, primarily targeting the Brazilian market. The website serves as a free-access platform for sharing ideas, experiences, and reflections within the ELT community. It operates on a WordPress CMS with standard SEO optimizations and integrates Google Analytics and Tag Manager for visitor tracking. Hosting infrastructure appears to be on Amazon AWS, providing reliable performance and scalability. The site demonstrates good mobile optimization and accessibility basics, supporting a positive user experience for its audience. However, the absence of explicit privacy and terms of service pages, as well as contact information, limits its compliance and business transparency. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published policies. Overall, RichmondShare is a credible educational resource with room for improvement in privacy compliance and business information transparency.

SVEN Biolabs is a Czech Republic based business operating since 2016, likely in the biotechnology or laboratory sector. The website uses OpenCart CMS with the Journal3 theme and integrates modern web technologies including Bootstrap, Font Awesome, and Google Tag Manager. The site is moderately optimized for mobile and performance, with basic SEO and accessibility features. Security posture is moderate with HTTPS implied but no explicit security headers detected. Privacy compliance is limited, with no visible privacy policy or terms of service, though a cookie consent mechanism is present. Contact information is not explicitly provided on the site, which may impact user trust and compliance. Overall, the website is functional and professional but would benefit from enhanced security and compliance disclosures.

The ABNT Coleção website serves as a digital platform managed by the Associação Brasileira de Normas Técnicas, providing centralized access to a wide range of technical standards from Brazil and other major countries. The platform targets businesses and professionals who require reliable and secure access to these standards, supporting compliance and technological advancement. The business model revolves around subscription-based access to these norms, positioning ABNT as a key national and international standards authority. Technically, the website is built on a mature ASP.NET WebForms framework with Telerik UI components, enhanced by modern libraries such as jQuery and Google reCAPTCHA v3 for security. While the technology stack is somewhat legacy, it is functional and integrates essential security features like HTTPS and bot protection. The site demonstrates moderate performance and basic mobile optimization, with room for improvements in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect login forms, but lacks explicit security headers and detailed security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture. Privacy compliance is basic, with cookie consent implemented and a privacy policy linked externally, though GDPR compliance is not explicitly confirmed. Overall, the website is professional, trustworthy, and aligned with its business purpose. Strategic recommendations include enhancing security headers, improving mobile and accessibility features, and publishing comprehensive security and incident response policies to strengthen trust and compliance.

S

Studio River

studioriver.fr

36

Studio River is a French award-winning motion design studio specializing in creative storytelling and video production. Their website showcases a professional portfolio of short films and motion design projects for notable clients in luxury and technology sectors. The company targets creative agencies, brands, and media professionals seeking high-quality motion design services. Technically, the website is built on WordPress using the Salient theme and employs modern web technologies including jQuery, Google Analytics, and Vimeo video integration. The site is mobile-optimized, fast-loading, and well-structured with clear navigation. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Privacy and cookie policies are not explicitly found, indicating compliance gaps. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security disclosures.

A

Associação CCG/ZGDV

ccg.pt

72

Associação CCG/ZGDV is a well-established Portuguese research and innovation institute specializing in applied research and technological innovation within the digital economy. Their expertise spans computer graphics, ubiquitous computing, human-machine interaction, and information engineering. The institute offers a range of services including consultancy, contract research and development, advanced technology training, testing and validation, and IT/data center services. Their market position is strong within Portugal, supported by a consistent brand presence and recognized certifications such as ISO 27001. Technically, the website employs modern frameworks like Bootstrap and integrates essential tools such as Google Analytics and Mailchimp for analytics and marketing. The site is mobile-optimized, well-structured, and provides a professional user experience. Security-wise, the site uses HTTPS and secure form validation, complemented by comprehensive privacy and cookie policies that demonstrate GDPR compliance. However, there is room for improvement in security headers and formal security policy disclosures. Overall, the website reflects a mature digital presence with high trustworthiness and professional content quality. The security posture is solid but could be enhanced with additional policies and technical controls. The domain registration data aligns well with the business claims, reinforcing legitimacy. No critical vulnerabilities or suspicious content were detected, and the site is safe for general audiences.

A

Afipre - Fabrico de Ferramentas de Corte com Rigor e Precisão

afipre.pt

47

Afipre – Ferramentas de Corte, Lda is a Portuguese manufacturer specializing in precision cutting tools for the metalworking and metal-mechanical industries. With 25 years of experience, the company offers a range of services including consultancy, sharpening and repair, PVD coatings, and stock management, targeting industrial manufacturers seeking productivity improvements. The website is built on WordPress using modern plugins like Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site is well-designed, mobile-optimized, and SEO-friendly, but lacks explicit privacy and cookie policies, as well as incident response or vulnerability disclosure information. Security posture is adequate with HTTPS enabled, but missing security headers and formal security policies reduce the overall security maturity. No blocking or WAF challenges were detected, allowing full content access and analysis.

V

Void Software

void.pt

67

Void Software is a Portugal-based technology company specializing in custom software development, advanced AI integration, and embedded systems development. The company positions itself as a skilled, agile, and innovative technology partner offering a broad range of services including security, blockchain solutions, and DevOps. Their market approach targets businesses seeking cutting-edge technology solutions with a focus on quality and security. The website reflects a professional and consistent brand image with clear service offerings and certifications that enhance trust. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery. The site is moderately performant and well-optimized for mobile devices, though accessibility features are basic. SEO optimization is present but could be improved. No CMS or advanced frameworks were detected, indicating a custom or lightweight implementation. From a security perspective, the company demonstrates maturity through ISO 27001 certification and a suite of security services. However, the website lacks visible security headers and does not provide cookie consent mechanisms or incident response policies, which are important for compliance and security transparency. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website and business present a low-risk profile with strong business credibility and a good security posture. Strategic improvements in privacy compliance and security best practices would further enhance trust and reduce potential risks.

V

VisionSpace

visionspace.com

57

VisionSpace is a specialized technology company focused on satellite operations, cybersecurity, and AI solutions primarily serving the space and defense sectors. The company offers end-to-end services including consultancy, product development, and ground segment AIV, positioning itself as a niche expert in these high-technology domains. The website reflects a professional and consistent brand image with comprehensive service descriptions and active social media engagement. Technically, the website is built on WordPress using Elementor and Slider Revolution, leveraging modern web technologies and fonts from Google and Adobe. The site is hosted with GoDaddy and employs HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is adequately addressed with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS and a cookie consent mechanism compliant with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-established domain with consistent registration details, enhancing trustworthiness. Overall, VisionSpace presents a secure, professional, and compliant online presence suitable for its target audience. Strategic improvements in security headers, incident response transparency, and accessibility could further strengthen its posture.

S

STI Group

sti-group.com

54

STI Group is a large, Germany-based manufacturer specializing in sustainable packaging and point-of-sale display solutions. The company emphasizes innovation and environmental responsibility, offering fiber-based, plastic-free packaging for food and non-food products. Their market position is strong, supported by multiple certifications and awards, and they operate multiple production sites across Europe and Asia Pacific. Technically, the website is built on TYPO3 CMS with modern frontend libraries and includes comprehensive cookie consent and privacy management, reflecting good digital maturity. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, user-friendly, and trustworthy, but the lack of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy.

S

SPEEDBIRD VEICULOS AEREOS NAO TRIPULADOS SA

speedbird.aero

60

Speedbird Aero is a Brazilian-based company specializing in drone delivery logistics, offering a certified and innovative platform for commercial, industrial, and healthcare sectors. Their business model centers on Drone as a Service (DaaS), providing unmanned aircraft systems, navigation software, and droneport infrastructure to enable efficient and safe package delivery. The company has established partnerships with major clients and operates globally with plans for expansion by 2030. Technically, the website employs modern web technologies such as jQuery and Bootstrap, with integrated analytics and a cookie consent mechanism, reflecting moderate digital maturity. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and published security policies, indicating room for improvement. Overall, the website is professional, content-rich, and trustworthy, though it would benefit from enhanced privacy and security disclosures.

P

PSD Aero

psdaero.com

72

PSD Aero is a well-established French company specializing in the distribution and processing of metallurgical products for the aerospace, nuclear, and mechanical industries. With a strong international presence and partnerships with major aerospace players such as Safran and Airbus, PSD Aero positions itself as a first-tier supplier offering high-quality alloys and customized services. The company emphasizes quality, environmental sustainability, and supply chain acceleration to meet the demanding needs of its customers. Technically, the website employs modern web technologies including Bootstrap, Swiper.js, and Microsoft Clarity for analytics, ensuring a responsive and user-friendly experience. Security measures such as HTTPS, security headers, and secure forms are implemented, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and reliable digital presence for PSD Aero.

M

Motofil

motofil.com

51

Motofil is a Portuguese-based company specializing in the development and manufacturing of industrial robotic welding and cutting equipment, including MIG/MAG welding, submerged arc welding, robotic automation, handling, and thermal cutting technologies such as laser, plasma, and oxy-fuel cutting. Established in 1981, Motofil positions itself as a leader in robotic welding solutions serving various industrial sectors including aeronautics, automotive, metalworking, and renewable energy. The company maintains a medium-sized business model focused on B2B industrial clients, supported by a professional website with comprehensive product and service information, testimonials, and active participation in international industry fairs. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Slick Carousel, and integrates analytics and marketing tools like Google Analytics, Google Tag Manager, and HubSpot. The site is well-optimized for mobile devices, has good SEO practices, and includes GDPR-compliant privacy and cookie policies with consent mechanisms. Security posture is generally good with HTTPS enforced and reCAPTCHA on forms, though explicit security headers and a published security policy are absent. The WHOIS data for the domain www.motofil.com is not publicly available, which raises concerns about domain registration legitimacy and consistency with the company's claimed history. Despite this, the website content and business information appear professional and trustworthy. No signs of adult or questionable content were found, and the site is fully accessible without WAF or blocking mechanisms. Overall, Motofil demonstrates a strong business presence and digital maturity with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to strengthen trust and compliance.

M

Meditor DAS

m-das.com

42

Meditor DAS is a specialized technical engineering company providing solutions in reliability and data systems primarily for the industrial, aerospace, and military sectors. Their offerings include integrated logistic support, technical publications, and training services such as ASD-STE100. The company operates a professional WordPress-based website with a consistent brand image and clear navigation, targeting B2B clients in niche technical markets. The domain registration and hosting details align well with the company's stated history and business focus, indicating legitimacy and stability. Technically, the website uses modern frameworks and plugins but lacks some advanced security configurations such as DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. Overall, the website is professional and trustworthy but could improve in privacy and security posture.

K

KIT-AR

kit-ar.com

59

KIT-AR is a specialized technology company providing augmented reality solutions for quality assurance in manufacturing environments. Their platform aims to reduce costs and errors on the shopfloor by digitizing quality assurance processes and upskilling workers. The company targets manufacturing sectors such as automotive, aerospace, and electronics, positioning itself as a niche B2B provider with a focus on continuous improvement and digital transformation. The website presents professional branding, case studies with reputable clients, and clear calls to action, indicating a mature business presence. Technically, the website is built on WordPress using modern plugins and frameworks such as Genesis Framework, Slider Revolution, and Yoast SEO. It employs Google reCAPTCHA for form security and Matomo for privacy-conscious analytics. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements anti-bot measures but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies were found, representing a compliance gap with GDPR and other privacy regulations. Contact information is clearly provided, but no formal security or incident response policies are published. Overall, KIT-AR's website reflects a credible and professional business with solid technical foundations but could improve its privacy compliance and security posture. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing a vulnerability disclosure process.

Iberica - Indústria de Componentes Metálicos S.A. is a medium-sized manufacturing company based in Portugal, specializing in steel and aluminum components for electric vehicles, automotive, and motorcycle industries, as well as producing bicycles for bike sharing services. Founded in 1964, Iberica has established itself as an internationally recognized supplier with a strong focus on quality and innovation. The website reflects a professional business presence with clear descriptions of its business areas, technology capabilities, and commitment to quality manufacturing. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and Elementor, with integrations for Google Analytics and cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks advanced security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were found. Privacy compliance is basic, with a privacy policy and cookie consent but no explicit GDPR data retention details or data protection officer contact. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, incident response transparency, and enhanced privacy compliance would further strengthen its posture.

A

Amper S.A.

grupoamper.com

56

Grupo Amper is a Spanish industrial and technological group with over 60 years of history, specializing in defense, security, communications, energy, and sustainability sectors. The company positions itself as a leader in technological and industrial strategic capabilities with a significant international presence. Their key services include defense and security solutions, energy and sustainability services, and telecommunications. The website reflects a professional corporate presence targeting businesses and government entities in these sectors. Technically, the website is built on WordPress using common plugins such as WPBakery Page Builder, Slider Revolution, and LiteSpeed Cache. It employs modern tracking and analytics tools like Google Tag Manager and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized with good SEO practices and structured data implementation, although accessibility features are basic. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, which impacts the overall trustworthiness assessment. Overall, the website is professional and content-rich, but the discrepancy in WHOIS data suggests a need for further verification of domain registration. Strategic recommendations include enhancing security headers, publishing incident response policies, and clarifying domain registration details to improve trust and compliance.

E

Enartin

enartin.com

55

Enartin is a specialized mechanical engineering company based in Portugal, founded in 2020, focusing on designing and producing customized machines tailored to client-specific industrial processes. Their market position is that of a niche provider offering detailed mechanical design, production oversight, and rigorous testing to ensure quality and performance. The company targets industrial manufacturing, space sector, and system development clients. Technically, the website is built on WordPress using Elementor with integrations for Google Analytics and LinkedIn tracking, hosted likely via GoDaddy. The site is mobile optimized and presents a professional design but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

B

beintec

beintec.pt

55

beintec is a Portuguese technology company specializing in intelligent technology solutions and expert consulting services aimed at businesses undergoing digital transformation. The company positions itself as a niche provider with a professional online presence and a focus on B2B services. The website is built on WordPress, leveraging popular plugins such as Contact Form 7 and Slider Revolution, indicating a mature but standard technical infrastructure. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, reflecting awareness of privacy regulations. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website and domain registration data indicate a legitimate and trustworthy business with good digital maturity.

A

Atlar Innovation

atlar.pt

54

Atlar Innovation is a Portuguese technology company specializing in advanced computing platforms and intelligent monitoring tools, serving sectors such as aerospace, industrial modernization, energy, and web services. The company positions itself as a modern, agile technology provider with a focus on delivering innovative solutions from earth to sky. Their market presence is supported by a professional website, active social media channels, and visible certifications, indicating a credible and trustworthy business. Technically, the website is built on WordPress with Elementor and several modern plugins, ensuring a good user experience, mobile optimization, and SEO readiness. The site uses HTTPS and includes a comprehensive cookie consent mechanism, reflecting a mature digital infrastructure. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of a dedicated security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in security transparency and readiness. Overall, the website is professional, secure, and compliant with privacy regulations, making it a reliable digital presence for Atlar Innovation. Strategic enhancements in security policy publication and incident response communication would further strengthen their security posture and trustworthiness.

A

Allio Group

allio-group.com

58

Allio Group is a European precision engineering company specializing in the design and manufacture of checking fixtures, tooling, prototypes, and models primarily for the automotive and aerospace industries. Established in 2006 with operations in Romania, France, and Portugal, the company serves major industrial clients with tailored manufacturing solutions. Their website reflects a professional and comprehensive presentation of their services and products, targeting B2B industrial customers. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA, with a GDPR-compliant cookie consent mechanism. Security posture is generally strong with HTTPS enforced and secure form handling, though some security headers and incident response policies are absent. The absence of WHOIS domain registration data is a notable concern, suggesting either privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, the website is well-structured, content-rich, and trustworthy from a business perspective, but would benefit from enhanced security transparency and WHOIS data verification.

Kantipur Themes is a small technology business specializing in WordPress themes, offering both free and premium options designed for fast and beautiful website creation without coding. The company appears to have a niche market position focused on performance and modern design, targeting web developers, bloggers, and small businesses. The website is built on WordPress using Elementor and includes modern web technologies such as jQuery and FontAwesome. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partial with a privacy policy and terms of service present but missing cookie policy and GDPR indicators. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

F

Fakultní nemocnice Brno

preventivni-programy.cz

60

Fakultní nemocnice Brno operates a dedicated website for its preventive health programs, targeting a broad audience including families and individuals seeking early diagnosis and health maintenance. The hospital emphasizes personalized care and offers a variety of preventive services supported by experienced medical staff. The website is professionally designed with clear navigation and relevant content, reflecting a strong commitment to healthcare promotion. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google reCAPTCHA, and other libraries to ensure a responsive and interactive user experience. The site demonstrates good mobile optimization and basic accessibility features. Cookie consent and privacy compliance are well implemented, supporting GDPR requirements. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA to protect forms from spam. Cookie management is granular and transparent. However, explicit security headers and incident response information are not clearly present, representing areas for improvement. The absence of WHOIS registration data is a notable concern, though the website content and contact details strongly indicate legitimacy. Overall, the website presents a trustworthy and professional front for the hospital's preventive programs, with recommendations to enhance security policies, WHOIS transparency, and incident response disclosures to further strengthen trust and compliance.

C

Centrum reprodukční medicíny

cermedbrno.cz

44

Cermed is a specialized reproductive medicine center based in Brno, Czech Republic, offering fertility treatments, reproductive health protection, and donation programs for sperm and eggs. With over 40 years of experience and a strong market position, it serves couples and individuals seeking expert gynecological and fertility care. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Czech. Technically, it employs modern JavaScript libraries, Google Analytics, and reCAPTCHA for security and user experience. However, the absence of WHOIS data and security headers slightly reduces trustworthiness. Privacy compliance is well addressed with GDPR policies and cookie consent mechanisms. Overall, the site demonstrates a solid security posture but could improve transparency with explicit terms of service and incident response information.

I

Ingenta

ingenta.com

61

Ingenta is a UK-based company specializing in business publishing software and publishing technology solutions. Their offerings include intellectual property systems, rights and royalty management, and content publishing platforms, targeting media companies, publishers, and content creators globally. The company positions itself as a world-leading provider with a strong focus on configurable software and professional services to support complex business environments. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses reCAPTCHA for forms but lacks explicit security headers and a visible cookie consent mechanism. WHOIS data is unavailable, which slightly impacts trust but the professional web presence and contact information support legitimacy. Overall, Ingenta presents a credible and professional digital footprint with room for enhanced security and privacy compliance.

G

GateHub Limited

gatehub.net

77

GateHub Limited operates a digital wallet and trading platform focused on the Internet of Value, leveraging the XRP Ledger protocol. Established in 2014 and headquartered in London, UK, GateHub positions itself as a leading XRP Ledger wallet provider with a comprehensive suite of services including asset management, payments, trading, and wallet protection. The platform targets cryptocurrency users and traders seeking a secure and versatile environment for managing digital and fiat assets. The website reflects a mature business with consistent branding and a clear market presence. Technically, the website employs a modern technology stack including AngularJS, jQuery, Bootstrap, and various JavaScript libraries for charting and analytics. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. The site is mobile-optimized and includes standard SEO and accessibility features, though some accessibility aspects could be improved. Privacy and cookie policies are well implemented with user consent mechanisms, and analytics tools such as Google Tag Manager and Sentry are used for monitoring and tracking. From a security perspective, the site enforces HTTPS and uses no-cache headers to protect sensitive data. However, DNSSEC is not enabled, and explicit security headers are not detected, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were found. The absence of a published security policy and incident response contacts limits transparency in security governance. The WHOIS data aligns well with the business claims, indicating a legitimate and established domain registration. Overall, GateHub presents a professional, secure, and user-friendly platform with strong business credibility. Strategic enhancements in security headers, DNSSEC, and incident response transparency would further strengthen its security posture and trustworthiness.

B

BiblioHelp

bibliohelp.cz

51

BiblioHelp is a Czech educational and therapeutic resource website focused on bibliotherapy, providing curated book recommendations for individuals facing psychological, physical, and social challenges. The site is supported by academic sponsorship from Masaryk University and funded by the Czech Ministry of Culture, positioning it as a niche non-profit resource in the education and healthcare sectors. Technically, the website runs on Drupal CMS with jQuery and integrates Google Analytics for visitor tracking. The design is professional with clear navigation, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and privacy compliance documents. WHOIS data is unavailable, which raises concerns about domain legitimacy, but the website content and academic backing provide some trust. Overall, the site is a valuable resource but needs improvements in privacy compliance and security best practices.

E

Empemont s.r.o.

empemont.cz

63

Empemont s.r.o. is a well-established Czech company specializing in the production, distribution, and installation of wireless public address systems, public lighting, radar speed measurement devices, and other municipal infrastructure technologies. With over 30 years of market presence and more than 1200 satisfied municipalities and cities as clients, the company holds a leading position in the Czech and Slovak markets. Their business model focuses on manufacturing, sales, installation, and comprehensive servicing, including financing and grant assistance. The website reflects a professional and customer-centric approach, emphasizing quality, local production, and strong partnerships.

A

AGRO 21 s.r.o.

agro21.cz

59

AGRO 21 s.r.o. is a Czech company specializing in the organization of agricultural land purchases directly for farmers, avoiding resale to maximize prices for sellers. The company positions itself as a trusted intermediary with over 4000 transactions in more than a decade, targeting landowners and farmers primarily in the Czech Republic. The website is professionally designed, with clear navigation and relevant content focused on their services, references, and social responsibility initiatives. Technically, the site uses Orchard CMS, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for tracking, complemented by a GDPR-compliant cookie consent mechanism. Security posture is moderate with no visible security headers and missing WHOIS transparency, which slightly reduces trust. Overall, the site is accessible, informative, and compliant with privacy regulations but could improve in security best practices and domain registration transparency.

Z

Žďárské Vrchy.cz

zdarskevrchy.cz

53

ŽďárskéVrchy.cz is a regional online magazine focused on tourism, nature, culture, history, and current events in the Žďárské vrchy region of the Czech Republic. It serves tourists, local residents, and enthusiasts of outdoor activities by providing information on accommodation, events, tourist destinations, and local news. The website has been operational since 2000, indicating a well-established presence in its niche market. Technically, the site uses a modern tech stack including Bootstrap, jQuery, FontAwesome, and integrates Google Analytics and Adsense for tracking and monetization. It is hosted by REG-GRANSY and uses HTTPS with good SSL configuration. However, the site lacks explicit privacy and terms of service pages, which impacts its privacy compliance score. Security headers are not detected, and no vulnerability disclosure or incident response information is provided. The site includes a cookie consent banner with a consent mechanism, aligning partially with GDPR requirements. Social media presence is active on Facebook, Instagram, and YouTube, enhancing its outreach. Overall, the website is professionally designed, mobile-optimized, and provides relevant content for its target audience, but it should improve privacy and security disclosures to enhance trust and compliance.

K

Objevujte a relaxujte na Vysočině - korunavysociny.cz

korunavysociny.cz

55

The website www.korunavysociny.cz serves as a regional tourism portal promoting the Vysočina region in the Czech Republic. It provides information on tourist destinations, thematic trips, accommodation, events, and an experience card aimed at visitors and tourists interested in exploring the region. The site is built on the xartCMS platform and integrates common JavaScript libraries such as jQuery, MooTools, and Google Tag Manager for analytics and tracking. The content is primarily in Czech with Google Translate support for multiple languages, enhancing accessibility for international visitors. The website design is professional with good navigation and mobile optimization, supporting a positive user experience. From a technical perspective, the site uses HTTPS ensuring encrypted communication, but lacks important security headers that could enhance protection against common web vulnerabilities. The absence of privacy, cookie, and terms of service policies indicates gaps in compliance with data protection regulations such as GDPR. No explicit contact emails or phone numbers are visible, which may affect user trust and business credibility. Social media presence is established on Instagram, Facebook, and Threads, supporting community engagement. Security-wise, no critical vulnerabilities or exposed sensitive data were detected, but the missing WHOIS registration data raises concerns about domain transparency and legitimacy. This lack of WHOIS information could be due to privacy protection or registry issues, which reduces the overall trust score. The website does not appear to be blocked by any WAF or security challenge, allowing full content access. Overall, the website is a functional and informative regional tourism resource with good content quality and technical implementation. However, it requires improvements in privacy compliance, security headers, and transparency of domain registration to enhance trustworthiness and regulatory adherence.

Z

ZDAR, a.s.

zdar.cz

58

ZDAR, a.s. is a well-established transportation and logistics company based in the Czech Republic, offering a wide range of services including bus and truck servicing, logistics, vehicle maintenance, and public transportation. With over 30 years of experience, the company targets regional transport customers and motorists, positioning itself as a reliable and professional service provider in its sector. The website reflects this maturity with detailed service descriptions and a consistent brand presence. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. The presence of Google reCAPTCHA and cookie consent mechanisms indicates attention to security and privacy compliance. However, the absence of visible security headers and missing WHOIS data slightly detract from the overall technical and trust posture. From a security perspective, the site uses HTTPS and implements basic security best practices, but lacks published incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The privacy policy and cookie consent are comprehensive and GDPR compliant, supporting good privacy practices. Overall, the website is professional, secure, and trustworthy, though improvements in transparency (WHOIS data) and security headers would enhance its security posture. The business is credible and well-positioned in its market, with a clear focus on transportation and logistics services.

K

krasko.info

krasko.info

55

krasko.info is a Czech-language travel blog dedicated to showcasing the beauty, culture, and tourism opportunities within the Czech Republic. The website offers detailed guides, tips, and articles about cities, natural landscapes, traditional cuisine, and travel experiences, targeting travelers interested in exploring Czechia. The site is small-scale, content-driven, and appears to be maintained by a consistent author, Erika Loubalová. Technically, the site runs on WordPress with common plugins such as All in One SEO and Contact Form 7, ensuring a modern CMS platform with good SEO and mobile responsiveness. Security posture is adequate with HTTPS enforced and secure form handling, but lacks advanced security headers and cookie consent mechanisms. WHOIS data is unavailable due to query failure or privacy protection, but no suspicious indicators are present. Overall, the site is legitimate, safe, and professionally presented, though improvements in privacy compliance and security hardening are recommended.

B

Bea Awards

bea-awards.eu

50

BEA Awards is a niche event awards organization based in Belgium, focusing on recognizing excellence in the event industry. The website serves as a platform for event professionals to submit cases for awards, view past winners, and engage with partners. The site is primarily in Dutch with a French language option, targeting Belgian event stakeholders. The business model revolves around event organization and awards hosting, positioning itself as a specialized player in the Belgian event sector. Technically, the website is built on WordPress using the Blocksy theme and several popular plugins such as Yoast SEO, Jetpack, and Contact Form 7. It employs modern web technologies including Google reCAPTCHA v3 for bot protection and has a cookie consent mechanism in place. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the site benefits from HTTPS encryption and uses reCAPTCHA to secure forms. However, it lacks several security headers and does not provide publicly accessible security policies or incident response contacts. There is no vulnerability disclosure or security.txt file, which could improve transparency and trust. Privacy compliance is partial, with a cookie banner present but no dedicated privacy policy page found. Overall, the website is professional and functional with moderate security and privacy compliance. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance its security posture and trustworthiness.

S

Smartsolutions

smartsolutions.ua

61

Smartsolutions is a medium-sized Ukrainian company founded in 2000, specializing in legal, tax, and financial solutions, including business and asset protection, anti-piracy efforts, and IT project support. The company targets businesses and IT projects primarily within Ukraine, positioning itself as an established service provider with a professional online presence. The website is built on WordPress and employs modern JavaScript libraries and analytics tools, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and explicit security policies suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the website is professional and trustworthy, but enhancing privacy and security transparency would strengthen its risk profile.

L

Litoměřicko24

litomericko24.cz

57

Litoměřicko24 is a Czech regional news media outlet focused on delivering news, reports, and multimedia content related to the Litoměřicko region. The website serves a general audience interested in local events, culture, and sports, leveraging a WordPress-based platform with integrated video and podcast content. The site maintains a consistent brand presence with active social media channels on Facebook, Instagram, and YouTube. Technically, the site employs modern web technologies including Google Fonts, Google Tag Manager, Matomo Analytics, and Google Adsense for monetization and tracking. Security posture is moderate with HTTPS enabled and reCAPTCHA integration, but lacks some recommended security headers. Privacy and cookie policies are not detected, indicating potential compliance gaps. WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and social presence support its legitimacy as a regional media source. Overall, the site is professionally designed, mobile-optimized, and provides relevant content for its target audience.

M

Mikroazyl Vlčáry z.s.

vlcary.cz

40

Mikroazyl Vlčáry z.s. is a small non-profit organization based in the Czech Republic specializing in providing shelter and rehoming services for large and giant breed dogs, particularly those with behavioral challenges. The organization is led by Rudolf Desenský, a practitioner in dog psychology, offering specialized behavioral re-education and socialization services. The website serves as an informational platform showcasing the dogs currently in care, their status, and adoption possibilities. The business model focuses on animal welfare and rehoming rather than commercial activities. Technically, the website is built using Incomedia WebSite X5 Pro CMS with jQuery, hosted by WEDOS, a Czech hosting provider. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, it lacks advanced technical security measures such as security headers and HTTPS enforcement details are not visible in the provided data. From a security perspective, the site does not implement visible security headers or privacy and cookie policies, which are important for GDPR compliance given the EU jurisdiction. No forms or data collection mechanisms were detected, reducing immediate privacy risks but also limiting user engagement options. The absence of contact information and incident response details limits transparency and user trust. Overall, the website is functional and informative with a clear business focus but requires improvements in privacy compliance, security posture, and contact transparency to enhance trustworthiness and regulatory adherence.

N

Nativia s.r.o.

kockanenipes.cz

49

Kočka není Pes is a Czech Republic based small business operating a WordPress-powered website that combines media content and e-commerce focused on pet care products and information. The company, Nativia s.r.o., founded in 2015, offers a TV series, articles, workshops, and an online shop specializing in pet food brands such as Cat’s Love, Dog’s Love, and Royal Canin. The website targets pet owners and enthusiasts primarily in the Czech market. Technically, the site uses a modern WordPress theme (Enfold) with WooCommerce for e-commerce functionality, integrates social media, and uses GoPay for payment processing. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features.

1

1Win Casino

1wincasino.cz

54

1Win Casino is a newly established online gambling and sports betting platform targeting the Czech Republic market. The website offers a comprehensive range of casino games, poker, e-sports betting, and mobile applications, supported by multiple international gambling licenses. The platform emphasizes user security with SSL encryption, two-factor authentication, and regular audits, although explicit security and privacy policies are not publicly disclosed. Technically, the site is built on WordPress with modern performance optimizations and SEO best practices, delivering a fast and mobile-optimized user experience. While the site is professionally designed and trustworthy, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score.