Security Directory

DMO Lužické a Žitavské hory, z.s. operates a regional tourism website promoting the Lužické hory area, a scenic region on the Czech-German border known for its natural beauty, cultural heritage, and glassmaking tradition. The website offers guides, itineraries, accommodation and gastronomy information, and an e-shop for souvenirs, targeting tourists and nature enthusiasts. The business is positioned as a small, regional destination management organization supported by local and regional partners. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security measures include HTTPS, Google reCAPTCHA v3 on forms, and GDPR cookie consent, though security headers could be enhanced. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with moderate tracking and good user experience.

W

Warhorse Studios s.r.o.

warhorse.cz

57

Warhorse Studios s.r.o. is a Czech-based game development company established in 2011, specializing in creating meaningful games. The website presents a professional but basic digital presence with clear navigation and branding consistency. The company targets gamers and industry professionals, offering game development services and career opportunities. The technical infrastructure leverages OctoberCMS, jQuery, and slick carousel libraries, with Google Analytics and Tag Manager for tracking. Performance and mobile optimization are moderate, with room for improvement in SEO and accessibility. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies, indicating potential compliance gaps. No contact emails or phone numbers are directly provided, though social media links are present. Overall, the website is safe, legitimate, and moderately trustworthy but would benefit from enhanced privacy compliance and security best practices.

C

Cité Gestion

cite-gestion.com

58

Cité Gestion is a Swiss private bank specializing in personalized wealth management solutions for both Swiss and international clients. The bank emphasizes a unique business model that combines the security and regulatory compliance of a FINMA-regulated institution with the flexibility and independence of an agile private bank. With 15 years of experience and CHF 9.5 billion in assets under management, Cité Gestion positions itself as a trusted partner offering bespoke investment solutions and a high-quality operational infrastructure. The website reflects a professional and well-branded digital presence, supporting multiple languages and featuring multimedia content to engage its audience. Technically, the website employs a modern JavaScript technology stack including jQuery, Google Analytics, Google Tag Manager, and reCAPTCHA v3 for security. The site is mobile-optimized with good SEO practices and a cookie consent mechanism that aligns with GDPR requirements. However, some security headers are not visibly implemented, and no explicit terms of service or incident response policies are published, which could be improved. From a security perspective, the site uses HTTPS with strong SSL configuration and integrates Google reCAPTCHA to protect forms. The absence of WHOIS registration data raises some concerns about domain registration transparency, although the website content and business information suggest legitimacy. Overall, the security posture is good but could benefit from enhanced header policies and published security frameworks. The overall risk assessment indicates a professional and trustworthy financial institution with minor gaps in transparency and security documentation. Strategic recommendations include verifying domain registration details, publishing comprehensive security and incident response policies, and implementing additional security headers to strengthen protection and trust.

M

Mezzo Technologies

mezzotechnologies.com

53

Mezzo Technologies is a specialized engineering and manufacturing company focused on custom microtube heat exchangers designed for extreme performance in demanding industries such as aerospace, military, automotive racing, and modular nuclear applications. The company operates as a part of Signia Aerospace, leveraging a strong parent company relationship to enhance its market position. Their website reflects a mature business with detailed product offerings, clear market segmentation, and a professional digital presence. Technically, the site is built on WordPress with Elementor and includes modern SEO and analytics tools, indicating a moderate to advanced digital maturity. Security posture is good with HTTPS and domain transfer protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the business demonstrates high credibility and trustworthiness with no critical security issues detected.

B

Beey.io

beey.io

61

Beey.io is a technology-focused SaaS company specializing in automatic transcription and subtitle generation for audio and video content. The platform targets content creators, educators, and businesses seeking fast and affordable voice recognition services. The website presents a professional and consistent brand image with a clear focus on its core services. Technically, the site is built on WordPress using the Astra theme, integrating common marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and performs moderately well, though some accessibility features are basic. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages. Overall, the domain WHOIS data is unavailable due to privacy protection, which is justified for this business type. The website is safe for general audiences and shows no signs of malicious or adult content.

U

Ultrō

ultro.fr

60

Ultrō is a French digital agency specializing in e-commerce, UX/UI design, and web development services. Established in 2009, the company supports businesses in defining digital strategies and implementing digital services. The website reflects a professional and modern digital presence with strong client trust signals, including high ratings on Sortlist and active social media engagement. Technically, the site is built on Webflow with modern JavaScript libraries such as GSAP and integrates privacy-conscious analytics tools like Fathom and Plausible. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and headers could be improved. Overall, Ultrō presents a credible and trustworthy digital agency profile with a well-optimized and user-friendly website.

C

Citizen

citizen.com

66

Citizen operates a personal safety network platform that provides real-time 911 alerts, live incident broadcasts, and safety tracking for individuals and communities. The company leverages a mobile app-based business model with premium subscription services to enhance personal security. Positioned as a leader in community safety technology, Citizen serves a broad audience seeking timely and actionable safety information. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on Google Cloud infrastructure, and integrates analytics and monitoring tools for performance and error tracking. Security posture is strong with HTTPS enforcement and domain protections, though DNSSEC is not enabled and explicit security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Citizen demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for its market niche.

F

Fourthwall, Inc.

fourthwall.com

67

Fourthwall, Inc. is a technology company providing an all-in-one creator business platform that enables digital creators to launch branded shops, memberships, and homepages. The platform targets a broad audience of creators including YouTubers, Twitch streamers, TikTokers, musicians, podcasters, comedians, and businesses, positioning itself as a comprehensive solution for creator monetization and brand building. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on Webflow CMS, uses Google Analytics, Google Tag Manager, reCAPTCHA, and AdRoll for marketing and tracking, and is hosted likely on Webflow infrastructure with DNS managed by Google Domains. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and domain registration protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

B

Blažek

blazek.sk

53

Blažek is a well-established Czech and Slovak menswear brand specializing in formal and casual men's clothing and accessories. The company operates a professional e-commerce platform complemented by physical stores and bespoke tailoring services. Their market position is strong within the regional retail sector, targeting fashion-conscious men seeking quality apparel and accessories. The website reflects a mature digital presence with modern technologies such as Google Analytics, Facebook Pixel, and various UI libraries enhancing user experience and marketing capabilities. Security posture is solid with HTTPS enforced and secure login forms, though some security headers and explicit incident response policies are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Basecom

basecom.co

54

Basecom is a specialized B2B SaaS website design agency focused on creating conversion rate optimized websites that help SaaS companies double their revenue. Their market position is that of a niche agency delivering CRO-driven, visually stunning, and SEO-friendly websites. The company leverages modern web technologies such as Webflow, Lottie animations, and integrates analytics tools like Microsoft Clarity and Google Tag Manager to provide a high-quality digital experience. The website is well-designed, mobile-optimized, and professional, reflecting a mature digital presence for a small agency. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal privacy compliance documentation. Overall, the domain WHOIS data is privacy protected, which is typical for small agencies, and no suspicious patterns were detected. Strategic recommendations include adding privacy and cookie policies, security headers, and explicit contact information to enhance trust and compliance.

M

McDonald's Česká republika

mcdonalds.cz

70

McDonald's Česká republika operates a comprehensive and professionally designed website serving as the official portal for the brand in the Czech Republic. The site offers detailed information about their menu, promotions, McCafé products, Happy Meal offerings, and delivery services. It targets a broad general audience including families and fast food consumers, positioning itself as a leading quick service restaurant in the region. The business model focuses on retail food services supported by digital engagement through a mobile app and online coupons. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Cloudflare Insights for performance and analytics. The site is well optimized for mobile devices, features fast loading times, and includes accessibility considerations. The presence of a cookie consent mechanism and privacy policy indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF tokens. While explicit security headers are not fully confirmed in the HTML, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is attributed to privacy protection policies common in the region and does not detract from the site's legitimacy. Overall, the website presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic recommendations include publishing explicit security policies and vulnerability disclosure information to further enhance trust and transparency.

F

Floorbee - Floorbee - Popular floorball equipment

floorbee.com

60

Floorbee is an e-commerce retailer specializing in floorball equipment, offering a range of products including sticks, goalie gear, blades, balls, bags, goals, jerseys, field equipment, and accessories. The website targets floorball players and enthusiasts, positioning itself as a niche market player with a focus on quality and design. The site supports multiple languages, enhancing accessibility for a broader audience. Technically, the website employs Google Tag Manager and Google Analytics for tracking and uses Google Fonts for typography. The design is professional with good navigation and mobile optimization, though accessibility features are basic. Security posture is moderate but lacks visible security headers and privacy policies, which are critical for compliance and trust. The absence of WHOIS data raises concerns about domain legitimacy, although the website content and social media presence appear legitimate. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

N

NECY s.r.o.

eflorbal.cz

64

eFlorbal.cz is a specialized Czech e-commerce retailer focused on floorball equipment, operating since 2003 under the company NECY s.r.o. The website offers a wide range of products including floorball sticks, blades, goalkeeper equipment, bags, balls, and accessories from well-known brands. The company emphasizes product testing and customer education through its own floorball court and blog content. Technically, the site uses modern web technologies including jQuery, Google Fonts, and integrates multiple analytics and advertising tools such as Microsoft Clarity, Bing Ads, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS and secure forms, though it lacks some advanced security headers and formal incident response disclosures. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and credible. Overall, the site presents a trustworthy and user-friendly shopping experience for floorball enthusiasts.

M

McDonald’s ČR spol. s r. o.

mcdonaldscup.cz

67

McDonald’s Cup is a well-established youth football tournament in the Czech Republic, targeting children aged 6-11 years from elementary schools. The website serves as an information and registration portal for schools, organizers, and participants, supported by strong partnerships with McDonald’s, the Czech Football Association, UEFA Grassroots, and government bodies. The site features rich multimedia content, event updates, and training resources, reflecting a mature digital presence. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking, alongside a cookie consent mechanism. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though some security headers are missing. Privacy and cookie policies are present and GDPR compliant. However, the absence of WHOIS data reduces transparency and trust slightly. Overall, the site is professional, user-friendly, and trustworthy for its audience.

S

SPORTISIMO s. r. o.

sportisimopro.cz

61

Sportisimopro.cz is a Czech-based e-commerce platform specializing in sports equipment and apparel, catering primarily to sports teams and enthusiasts. The website offers a broad range of products including team kits, football gear, and custom printing services, positioning itself as a key player in the regional sports retail market. The company behind the site is SPORTISIMO s. r. o., a medium-sized retail entity with a consistent and professional online presence. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and a GDPR-compliant consent management system (Didomi). The site is responsive and optimized for mobile devices, with good SEO and accessibility basics. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and includes standard security headers, though it could enhance its security posture by adding Content-Security-Policy headers and conducting regular audits of third-party scripts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is well addressed with clear privacy and cookie policies and an active consent mechanism. Overall, the website presents a low-risk profile with strong business credibility and compliance. The lack of public WHOIS data suggests privacy protection, which is common and justified for commercial retail sites. Strategic recommendations include enhancing security headers, improving accessibility, and maintaining vigilance on third-party scripts to sustain a secure and trustworthy online presence.

E

EuroAgentur

eahotellipno.cz

52

EA Hotel Lipno near Cerna v Posumavi is a hospitality business operating a hotel near Lipno lake in the Czech Republic, offering accommodation, conference facilities, restaurant, and leisure services. The website is professionally designed with clear navigation and integrated booking functionality, targeting tourists and business travelers. The parent company is EuroAgentur, a known operator in the hospitality sector. Technically, the site uses an older jQuery version alongside Bootstrap and jQuery UI, with Google Analytics and CookieScript for tracking and consent management. Security posture is moderate with HTTPS enabled but lacking some modern security headers and using outdated libraries. Privacy compliance is good with a cookie consent banner and policy in place. WHOIS data is missing, likely due to privacy protection, which reduces transparency but is common in this sector. Overall, the site is functional, trustworthy, and business-appropriate but could improve security and transparency.

E

EuroAgentur

hotelhajenka.cz

51

EA Mountain hotel Hajenka is a small hospitality business located in the Šumava region of the Czech Republic, offering mountain hotel accommodation, wellness, dining, and event services. The website is professionally designed with multilingual support and integrates a third-party booking system. The technical infrastructure relies on established but somewhat dated technologies including jQuery 1.12.4 and Bootstrap, managed via the Topinfo CMS platform. Security posture is generally good with HTTPS enforced and a comprehensive cookie consent mechanism, though improvements are recommended in security headers and updating legacy libraries. The absence of WHOIS data limits domain trust verification but the overall digital presence and business information indicate a legitimate and trustworthy operation. Strategic recommendations include enhancing security headers, updating JavaScript libraries, and publishing explicit security and incident response policies.

E

EuroAgentur

apartmanynafilipce.cz

51

EA Apartments Na Filipce is a small hospitality business operating mountain apartments in the Sumava Mountains, Czech Republic. The company is part of EuroAgentur, a hospitality group, and offers accommodation, wellness, restaurant services, and special offers with an integrated online booking system. The website is professionally designed with clear navigation and multilingual support, targeting tourists seeking mountain lodging. Technically, the site uses Topinfo CMS with jQuery, Bootstrap, and Google services for analytics and advertising. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks some security headers and uses an outdated jQuery version. WHOIS data is unavailable, likely due to privacy protection, but the website content and branding indicate legitimacy. Overall, the site is functional and trustworthy with room for security and compliance improvements.

P

Pražský hrad

hrad.cz

70

The website www.hrad.cz serves as the official digital presence of the Office of the President of the Czech Republic, providing authoritative information, news, and cultural content related to the presidency and Prague Castle. It targets the general public, media, and visitors, offering comprehensive resources including press releases, event information, and contact avenues. The site is well-branded and professionally maintained, reflecting its governmental status. Technically, the site employs modern web technologies including Google Tag Manager for analytics, Cloudflare for performance and security, and is optimized for mobile devices with responsive design. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to user privacy and compliance with GDPR. The site is served over HTTPS with strong SSL configuration, contributing to a secure user experience. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and cookie consent management. However, explicit security headers and a public security policy or vulnerability disclosure page are not evident, representing areas for improvement. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent, given the official nature of the site. Overall, www.hrad.cz is a trustworthy, well-maintained government website with strong content quality and technical implementation. Strategic recommendations include enhancing security header implementation, publishing a security policy, and providing clearer contact information for security incidents to further strengthen trust and compliance.

Č

Česká asociace akademických technických sportů

caats.cz

40

Česká asociace akademických technických sportů (ČAATS) is a Czech non-profit association dedicated to organizing and promoting academic technical sports events and competitions. The website serves as a portal for event announcements, results, official documents, and partnership information, targeting academic institutions, students, and sports organizations within the Czech Republic. The association maintains partnerships with several national and international sports bodies, enhancing its credibility and reach. Technically, the website is built on WordPress 5.6.14, utilizing modern web technologies such as jQuery, Fancybox, and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some SEO and accessibility improvements could be made. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks several important security headers. There is no visible privacy or cookie policy, which impacts compliance with GDPR and related regulations. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and partnerships suggest a legitimate organization. Overall, the site is functional and professional but would benefit from enhanced security practices, explicit privacy compliance documentation, and verification of domain registration details to improve trust and compliance.

M

Mammut ANZ

mammut1862.com.au

66

Mammut ANZ operates a professional e-commerce website focused on retailing Mammut outdoor equipment and apparel in Australia and New Zealand. The site leverages Shopify as its platform, integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. The business targets outdoor enthusiasts with a comprehensive product catalog including avalanche safety gear, climbing equipment, and hiking apparel. The website demonstrates good branding consistency and content quality, with a clear focus on customer engagement through warranty forms and social media links. Technically, the site is well-structured, mobile-optimized, and uses modern web technologies, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and CAPTCHA protection on forms, but explicit security headers and policies are not fully implemented. Privacy compliance is limited by the absence of visible privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the site is trustworthy and professionally maintained, suitable for its retail purpose.

G

Gabia C&S

mammut.kr

64

The website mammut.kr serves as the official online store for the Mammut brand in Korea, a premium Swiss outdoor apparel and equipment company with a long heritage of 160 years. The site targets outdoor enthusiasts and climbers, offering a range of products including climbing gear, apparel, and accessories. The business operates primarily as an e-commerce retailer leveraging the Cafe24 platform, a popular Korean e-commerce solution. The domain is well-established, registered since 2009, and the WHOIS data aligns with the business's Korean presence and branding. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Facebook Pixel, and Vimeo for video content. It is hosted on Cafe24 infrastructure and uses HTTPS with good security headers, although DNSSEC is not implemented. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, explicit privacy, cookie, and security policies are not prominently found, which is a compliance gap. From a security perspective, the site enforces HTTPS and has domain transfer protections. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the analysis. The site uses tracking and marketing tools moderately, with standard analytics and retargeting pixels. Overall, the security posture is solid but could be improved by adding DNSSEC and publishing clear security and privacy policies. The overall risk assessment is low, with the site appearing legitimate, professionally managed, and secure for users. Strategic recommendations include enhancing privacy compliance, implementing DNSSEC, and publishing incident response and security policies to further build trust and meet regulatory requirements.

M

Mammut

mammut.tw

45

Mammut Taiwan operates an official brand website offering a comprehensive range of outdoor apparel, footwear, bags, and climbing equipment. The site targets outdoor enthusiasts and mountain sports lovers in Taiwan, providing product information, multimedia content, and links to official e-commerce platforms. The brand leverages its Swiss heritage and global reputation to position itself as a premium outdoor retailer in the local market. Technically, the website uses established JavaScript libraries and Google tracking tools, indicating moderate digital maturity and integration with marketing analytics. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the site is professional, trustworthy, and well-branded, though improvements in privacy and security transparency are recommended.

O

Orthopädie Sonnenhof KLG

orthopaediesonnenhof.ch

58

Orthopädie Sonnenhof KLG is a specialized healthcare provider based in Switzerland, focusing on orthopedics and sports medicine. The website presents a comprehensive range of orthopedic services including spine surgery, hand surgery, pediatric orthopedics, and more. It maintains a strong regional presence with partnerships such as the Lindenhofgruppe and Spitalzentrum Biel. The site is built on TYPO3 CMS and integrates modern tracking and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. Privacy compliance is well addressed with a clear privacy policy and cookie consent banner. Overall, the website is professional, trustworthy, and well-structured, serving patients and healthcare professionals effectively.

P

POMOCA

pomoca.com

48

POMOCA is a Swiss-based manufacturer specializing in ski touring skins, founded in 1933 and positioned as a world leader in its niche. The company offers a range of products including ski skins, accessories, and attachment systems, targeting ski touring enthusiasts and retailers globally. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and privacy policies in place, though explicit security policies and incident response details are absent. The domain WHOIS data is missing, which raises some concerns about registration transparency but does not detract significantly from the overall legitimacy given the business history and content quality. Overall, the website is well-structured, secure, and compliant, serving its business purpose effectively.

N

NORQAIN

norqain.com

69

NORQAIN is an independent Swiss watch brand established in 2018, specializing in luxury Swiss made watches and related merchandise. The company operates a professional e-commerce platform powered by Shopify, targeting watch enthusiasts and outdoor explorers. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and comprehensive marketing and analytics integrations. Security posture is strong with HTTPS, clientTransferProhibited domain status, and form protection via hCaptcha, although DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website is trustworthy, professional, and well-positioned in its niche market.

A

ANDERMATTERS

andermatters.ch

58

ANDERMATTERS is a Swiss-based small business specializing in guided outdoor activities and experiences in the Andermatt region, focusing on winter sports such as skiing, freeride, ski touring, and avalanche training, as well as summer climbing and glacier trekking. The company maintains partnerships with reputable brands like Mammut and Norqain, enhancing its market credibility. The website is professionally designed using Drupal 9, featuring good mobile optimization, accessibility, and clear navigation. Privacy and cookie compliance are well implemented with a comprehensive privacy policy and a granular cookie consent mechanism. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.

Z

ZERMATTERS

zermatters.ch

49

ZERMATTERS is a Swiss-based mountain guide office and ski school located in Zermatt, offering professional guided skiing, hiking, biking, climbing, and mountain tours year-round. The company holds recognized certifications such as IFMGA mountain guides and is an official Swiss Ski School, positioning itself as a trusted local expert in alpine outdoor activities. Their website is well-designed, mobile-optimized, and provides clear information about services, events, and booking options, targeting outdoor enthusiasts and tourists seeking expert guidance in the Swiss Alps. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and Google Tag Manager with privacy-conscious configurations. The site employs HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. Social media integration and partner links enhance their digital presence. However, some security headers are missing, and no explicit security policy or incident response contacts are published. From a security perspective, the site demonstrates good practices such as anonymized analytics and consent management but could improve by adding security headers and a vulnerability disclosure policy. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, ZERMATTERS presents a professional, trustworthy online presence with strong business credibility and good technical implementation. Strategic improvements in security policy transparency and header configurations would further enhance their security posture and trustworthiness.

Dětská hřiště is a Czech-based e-commerce retailer specializing in children's playground equipment, including complete playgrounds, modules, and accessories. The website targets parents and municipalities looking for quality, safe, and entertaining playground solutions. The business appears established with over 15 years of experience and a solid customer base. Technically, the site is built on the Shoptet platform, leveraging common web technologies such as jQuery, Google Analytics, and Facebook SDK. The site is mobile-optimized with good navigation and content quality. Security posture is adequate with HTTPS enabled and secure login forms, though some improvements like adding security headers and updating libraries are recommended. Privacy and cookie policies are present and GDPR compliant. The absence of WHOIS data limits domain trust assessment, but the website content and business presence suggest legitimacy.

N

Nineteen Group

emergencytechshow.com

73

The Emergency Tech Show 2025 website serves as a professional platform showcasing technology innovation for emergency services in the UK. It targets emergency services professionals, government officials, and industry stakeholders, offering event registration, exhibitor information, and content programming. The site is well-branded and co-located with the established Emergency Services Show, indicating a strong market position within the emergency services event sector. Technically, the site employs modern JavaScript libraries and integrates multiple marketing and analytics tools, including HubSpot, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, reflecting a mature digital marketing infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of explicit security headers and vulnerability disclosure policies suggests room for improvement. The lack of WHOIS data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which slightly reduces trustworthiness. Overall, the site is professional and functional but would benefit from enhanced transparency and security best practices.

M

MIRAMO spol. s r.o.

floreon.cz

43

Floreon+ Web is a specialized environmental and geospatial data visualization platform operated by MIRAMO spol. s r.o., a Czech Republic based company. The platform offers interactive mapping services with layers including floods, air pollution, traffic, and landslides, targeting environmental researchers, government agencies, and the general public interested in environmental data. The website leverages modern web technologies such as React and OpenLayers to deliver a dynamic and interactive user experience. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS usage but missing key security headers and vulnerability disclosures. Overall, the site is professionally designed and functional but would benefit from enhanced privacy compliance and security best practices.

A

AUTO BILD

autobild.de

63

AUTO BILD operates a comprehensive German-language automotive portal offering test reports, car market listings, and buying advice. The website serves a large audience of automotive consumers and enthusiasts, providing extensive content including news, reviews, and a used car marketplace with over 700,000 listings. The platform is well-positioned in the German automotive media sector with a strong brand presence and professional digital infrastructure. Technically, the website employs modern JavaScript frameworks (likely Vue.js), uses a robust CDN and DNS provider (Akamai), and integrates advanced consent management for GDPR compliance. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, uses security headers, and manages user consent effectively. However, it lacks publicly accessible privacy policies, terms of service, security policies, and incident response contacts, which are important for compliance and user trust. No critical vulnerabilities or suspicious WHOIS patterns were detected, indicating a legitimate and secure operation. Overall, AUTO BILD's website is a professional, trustworthy, and content-rich platform with room for improvement in transparency and compliance documentation.

N

NEWTON Media

newtonmediasee.eu

54

NEWTON Media SEE is a regional media intelligence and research company operating primarily in South East Europe, with a focus on media monitoring, data mining, market research, translation services, and voice-to-text technologies. The company maintains a network of regional subsidiaries and partners in Slovenia and Croatia, providing tailored media intelligence and consulting services. The website is professionally designed using WordPress and Elementor, reflecting a mature digital presence with moderate technical sophistication. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of public WHOIS data is consistent with EURid privacy policies for .eu domains and does not detract significantly from the company's legitimacy. Overall, the website and business present a credible and professional image suitable for their target market.

M

Meeker Aviation

meekeraviation.com

58

Meeker Aviation is a specialized manufacturer and supplier of customizable external payload mounts for helicopters and fixed-wing aircraft. The company positions itself as a top choice in the aviation sector, serving OEM providers and operators with innovative, flexible, and reliable payload mounting solutions. The website reflects a professional and consistent brand image with clear product categorization and partner affiliations. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern SEO and analytics tools such as Yoast SEO and Google Tag Manager. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and incident response disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced compliance and security transparency.

A

ACE Thermal Systems

acethermalsystems.com

59

ACE Thermal Systems is a medium-sized aerospace company specializing in the design, engineering, manufacturing, and support of high-performance environmental control systems and thermal management solutions for aircraft. The company positions itself as a responsive and agile partner to aerospace OEMs, offering a comprehensive range of services from product development to FAA certification support. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to the aerospace industry. Technically, the site is built on WordPress with Elementor and uses modern web technologies, though some improvements in security headers and privacy compliance are recommended. Security posture is generally good with HTTPS enabled and domain registration consistent with the business profile. However, the absence of explicit privacy and cookie policies and lack of security headers are areas for improvement. Overall, the website is safe, trustworthy, and well-structured, supporting the company’s market position as a specialized aerospace solutions provider.

C

Cyberday

cyberday.ai

73

Cyberday is a cybersecurity SaaS company specializing in simplifying and automating compliance with multiple information security frameworks such as ISO 27001, NIST CSF, GDPR, and others. Their platform integrates tightly with Microsoft Teams and web browsers to deliver a unified ISMS management experience, enabling organizations to manage security tasks, documentation, employee awareness, and compliance reporting efficiently. With over 500 organizations using their solution, Cyberday positions itself as a practical and user-friendly tool for IT and information security managers seeking to achieve and prove cyber compliance without complexity. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong trust signals including customer testimonials and certifications references. Technically, the site is built on Webflow and leverages modern analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place. However, public WHOIS data is unavailable due to privacy protection, which is justified for this business type. Overall, Cyberday demonstrates a professional, secure, and credible online presence aligned with its business goals.

N

Nimblr

nimblrsecurity.com

73

Nimblr is a security awareness training provider focused on reducing IT security incidents caused by user actions through smart simulations and training. The company operates a professional website built on the HubSpot CMS platform, integrating modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, and Cookiebot for cookie consent management. The website is well-designed, mobile-optimized, and provides clear messaging about its services, targeting businesses seeking to improve their security culture. From a technical perspective, the site uses modern technologies and maintains good performance and SEO practices. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism but lacks explicit security headers and published security policies. The domain registration is consistent with the company's founding date and shows no suspicious patterns, enhancing trustworthiness. Overall, the website presents a moderate to good security posture with room for improvement in privacy compliance and contact transparency.

G

Good Sailors, s.r.o.

dobraspisovka.cz

43

Good Sailors, s.r.o. is a Czech-based technology company specializing in electronic document and records management solutions, notably through their Dobrá spisovka application. The company has a strong social entrepreneurship focus, employing handicapped workers and serving a broad range of public institutions such as schools, municipalities, and museums. Their market position is supported by over 200 IT projects since 2002 and a client base exceeding 70 document originators. Technically, the website employs modern analytics and spam protection tools, with a responsive design and good user experience. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks some advanced security headers and explicit security policies. Privacy compliance is basic with a GDPR-aligned privacy policy but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market.

A

Autotrip.cz

autotrip.cz

56

Autotrip.cz is a Czech automotive magazine providing news, advice, and tools for drivers and car enthusiasts. The website offers content such as traffic signs, insurance information, driving tips, and automotive tests, targeting the Czech market. The business operates as a niche online media platform with a small company size and a founding date in 2014. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted via a Czech registrar and using Cloudflare DNS. The site employs HTTPS with good SSL configuration and integrates Google Adsense and Facebook Pixel for advertising and tracking. However, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with room for improvement in security headers and incident response disclosures. Overall, the website is professional and trustworthy but should enhance privacy and security transparency to improve compliance and user trust.

H

High performance parts

highperformanceparts.cz

44

Highperformanceparts.cz is a Czech Republic-based e-commerce business specializing in automotive performance parts, tuning, and racing accessories. It positions itself as the largest performance shop in the Czech Republic, offering a wide range of specialized products and acting as an exclusive importer and distributor for many renowned brands. The website targets automotive enthusiasts and tuning customers, providing both retail and wholesale services. Technically, the site uses a custom or proprietary platform with legacy jQuery libraries, integrated with modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. The hosting provider is POSKYTOVATEL.cz, and the site is served over HTTPS, ensuring basic transport security. Security posture is moderate, with secure login forms but lacking advanced security headers and privacy policies. WHOIS data is unavailable, which limits domain trust evaluation. Overall, the site is professional and functional but could improve privacy compliance and security best practices.

K

KRPA Slovakia spol. s r.o.

krpa.sk

50

KRPA Slovakia spol. s r.o. operates a professional e-commerce website specializing in wholesale and retail distribution of paper and office supplies in Slovakia. The company offers a broad range of products including postal envelopes, office paper, notebooks, labels, and other stationery items, targeting business and retail customers with next-day delivery services. The website is well-branded and consistent with the company's market positioning as a regional wholesaler and manufacturer. Technically, the site uses modern e-commerce infrastructure powered by the Upgates platform, integrates Google Analytics 4 and Google Ads for marketing and tracking, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is accessible without WAF or blocking mechanisms, providing a safe and professional user experience. However, explicit privacy and terms of service pages are not detected, which could be improved for compliance and user trust.

P

PAPÍRNY BRNO a.s.

papirnybrno.cz

42

PAPÍRNY BRNO a.s. is a leading Czech manufacturer and retailer specializing in school and office paper products, including notebooks, diaries, paper bags, and gastro packaging. The company operates an e-commerce platform offering a wide range of paper goods targeting schools, offices, and gastronomy sectors. Their market position is strong within the Czech Republic, supported by a clear brand presence and active social media engagement. The website is professionally designed with good navigation and mobile optimization, reflecting a medium-sized enterprise with a solid digital infrastructure. Technically, the site uses modern web technologies and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Hotjar, managed via Google Tag Manager. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although additional security headers and a published security policy would enhance their security maturity. WHOIS data is unavailable, limiting domain trust assessment, but the business information on the site is transparent and credible. Overall, the website is safe, GDPR compliant, and well-positioned for its target audience.

K

KRPA Holding

krpa.cz

56

KRPA Holding is a traditional Czech manufacturing company specializing in the production of specialized wrapping and graphic papers, envelopes, rolls, business forms, and school supplies. Established since 1835, it maintains a medium-sized presence in the manufacturing sector with several subsidiaries and partner companies. The website reflects a basic but functional digital presence with moderate branding consistency and trust indicators such as FSC certification and cookie consent mechanisms. Technical infrastructure includes legacy technologies like Flash and an outdated jQuery version, alongside modern analytics and retargeting tools integrated with user consent. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and updated libraries. Privacy compliance is minimal with no explicit privacy or terms of service pages found. Overall, the website is moderately professional and trustworthy but would benefit from modernization and enhanced compliance documentation.

I

Innovis

innovis.ai

54

Innovis is a technology company specializing in automation, digitalization, and security solutions primarily for logistics, retail, real estate, and municipal sectors. Backed by its parent company M2C, Innovis offers a range of services including automated reception systems, perimeter security, remote monitoring, and energy optimization. The company positions itself as a technological partner from concept through implementation, targeting medium to large enterprises in the Czech Republic and surrounding regions. The website is professionally designed, multilingual, and integrates modern marketing and analytics tools with GDPR-compliant privacy and cookie policies. Technically, the site runs on WordPress with integrations such as Google Tag Manager, reCAPTCHA, and Smartlook for user behavior analytics. Security posture is solid with HTTPS and spam protection, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Overall, Innovis presents a credible and trustworthy digital presence aligned with its business objectives.

D

DS Medical

dsmedical.co.uk

70

DS Medical is a well-established UK-based supplier specializing in emergency medical and first aid supplies, targeting medical, fire, rescue, and allied professionals. The company leverages a mature e-commerce platform (BigCommerce) to deliver a broad range of healthcare products, supported by decades of industry expertise. Their digital presence is professional, with comprehensive privacy and cookie policies, and integration of multiple marketing and analytics tools to optimize customer engagement and business insights. Technically, the website is built on a modern, secure infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforcement, consent management, and no visible vulnerabilities. However, the absence of explicit contact information and security policies suggests areas for improvement. Overall, DS Medical presents a credible and trustworthy online business with a solid foundation for growth and compliance.

T

The Emergency Services Show

emergencyuk.com

70

The Emergency Services Show website represents a leading UK event dedicated to the emergency services sector, showcasing over 500 exhibitors and providing networking and educational opportunities for blue light professionals. The site is professionally designed with rich content, modern JavaScript frameworks, and integrated marketing and analytics tools such as HubSpot, Facebook Pixel, and Google Tag Manager. Privacy and cookie policies are clearly presented, indicating GDPR compliance. However, the domain www.emergencyuk.com lacks WHOIS registration data, suggesting it may be unregistered or recently expired, which raises concerns about domain legitimacy despite the professional content. No direct contact information or security policies beyond privacy and cookie notices were found, and security headers appear absent, indicating room for improvement in security posture.

S

Sapeurs-Pompiers de France

pompiers.fr

57

The website www.pompiers.fr serves as the official digital presence of the Sapeurs-Pompiers de France, a large national governmental and non-profit organization dedicated to firefighting, emergency response, and public safety in France. It provides comprehensive information about firefighter recruitment, risk prevention, news, and community engagement. The site targets a broad audience including the general public, prospective volunteers, professionals, and stakeholders in emergency services. The business model is focused on public service and community support rather than commercial revenue generation. Technically, the website is built on WordPress with modern web technologies including Progressive Web App features, Google Tag Manager for analytics, and Axeptio for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, with structured data enhancing search engine understanding. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS, implements multiple security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or vulnerability disclosure page, which could enhance transparency and incident response readiness. Privacy compliance is well addressed through a comprehensive privacy and cookie policy with consent mechanisms, aligning with GDPR requirements. Overall, the website is trustworthy, professional, and well-maintained, reflecting the organization's authoritative position. The absence of WHOIS data is likely due to privacy protection policies common for governmental domains in France and does not detract from legitimacy. Strategic recommendations include publishing a security policy, establishing a vulnerability disclosure channel, and enhancing incident response contact visibility.

K

Kinet s.r.o.

vladeko.cz

50

Vladeko.cz is a Czech-based company specializing in the manufacturing and retail of wooden garden furniture and structures, including pergolas, altány, garden houses, and children's playground equipment. The company operates both a physical showroom in Tachlovice and an e-commerce platform, targeting homeowners, municipalities, and businesses interested in quality wooden garden products. Their business model combines custom woodworking services with online sales, supported by design, visualization, and installation offerings. The website reflects a mature digital presence with a clear product catalog and user-friendly navigation. Technically, the website is built on the PrestaShop CMS platform, utilizing modern web technologies such as Bootstrap for responsive design, Google Analytics and Tag Manager for tracking, and Cookiebot for consent management. The site is served over HTTPS with a good SSL configuration, though some security headers could be improved. Performance is moderate, with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits transparency, but the presence of physical contact information and partner links supports legitimacy. Overall, Vladeko.cz presents a trustworthy and professional online presence for a medium-sized retail and manufacturing business in the garden furniture sector. Strategic improvements in security headers and transparency around privacy and incident response would enhance their security posture and compliance standing.

M

Mammut Mountain School

mammutmountainschool.ch

56

Mammut Mountain School is a specialized alpine education provider based in Switzerland, uniquely positioned through a partnership between an equipment supplier and a mountain guide office. The company offers a comprehensive range of alpine training services including mountaineering, glacier trekking, climbing, ski touring, freeriding, and avalanche training, operating primarily from Andermatt and Zermatt. Their business model focuses on safety, individualized group conditions, and practical alpine education for outdoor enthusiasts. Technically, the website is built on Drupal 9, integrates Google Tag Manager for analytics, and uses OneTrust for cookie consent, reflecting a modern and compliant digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The website is accessible, well-structured, and GDPR compliant, with clear contact information and partner affiliations enhancing business credibility. Overall, the site demonstrates a good balance of content quality, technical implementation, security, privacy compliance, and business credibility, scoring an overall AI rating of 85.