Security Directory

G

GSG Berlin GmbH

gsg.de

46

GSG Berlin GmbH is a well-established real estate company specializing in leasing office, commercial, and warehouse spaces primarily in Berlin. With over 60 years of experience and a portfolio exceeding 1 million square meters, it serves a diverse clientele including startups, craftsmen, and SMEs. The company emphasizes flexibility in space usage and offers value-added services such as highspeed fiber internet and electric vehicle charging stations. The website reflects a strong market position with multiple locations and a broad tenant network. Technically, the website is built on WordPress using modern plugins and frameworks, optimized for performance and mobile responsiveness. It integrates analytics and marketing tools like Google Tag Manager and HubSpot, and employs a cookie consent mechanism compliant with GDPR. Security best practices are observed with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and professional content. The domain registration data is minimal but consistent with the business claims. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategic recommendations include publishing a formal security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance. Regular security audits of third-party scripts and further accessibility improvements would strengthen the security posture and user experience.

M

Přírodní vonné svíčky od Ewy Farne | Mmntshop.cz

mmntshop.cz

40

The website mmntshop.cz is a small e-commerce platform specializing in natural scented candles, notably associated with the celebrity Ewa Farna. It targets general consumers interested in natural home fragrance products within the Czech Republic. The site is built on WordPress using WooCommerce and Elementor, indicating a standard modern e-commerce infrastructure. Hosting appears to be provided by exon.io based on DNS information. The website demonstrates good design quality, mobile optimization, and SEO practices but lacks explicit privacy and terms of service documentation. Security posture is moderate with no advanced security headers detected and no visible vulnerability disclosure or incident response policies. Cookie consent is implemented, indicating some level of privacy compliance. Overall, the domain registration data is consistent and appropriate for the business age and type, supporting legitimacy.

F

Friedrich-Althoff-Konsortium e.V.

althoff-konsortium.de

54

The Friedrich-Althoff-Konsortium e.V. is a regional non-profit consortium serving scientific institutions in Berlin and Brandenburg, providing access to licensed electronic publications and scientific information. The website is hosted on WordPress.com, leveraging WordPress CMS and Jetpack for content management and analytics. The site is well-structured, primarily in German, with an English version available, targeting academic and research institutions. Security posture is moderate with HTTPS enabled but lacking explicit security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and compliance transparency.

A

andzup

andzup.com

63

andzup is a B2B prospection platform focused on the communication and media industry, providing qualified European market intelligence data and tools to optimize commercial prospecting. The platform targets communication agencies, ad agencies, publishers, and media owners across Europe, with a strong presence in France. The website demonstrates a professional and consistent brand image, supported by client trust indicators and third-party review badges. Technically, the site is built on WordPress with Elementor and uses modern SEO and analytics tools, including Yoast SEO and Piwik PRO. Security posture is good with HTTPS and reCAPTCHA v3 implemented, though security headers are missing and privacy policies are not clearly presented. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business presence appear legitimate. Overall, the site is well-structured, user-friendly, and suitable for its target audience.

N

Naše Toustárna

nasetoustarna.cz

51

Naše Toustárna is a small artisan bakery business based in the Czech Republic, specializing in handcrafted breads, pastries, and coffee. The website presents a professional and well-branded digital presence with clear descriptions of their passion for traditional baking methods and local products. The business targets general consumers interested in quality bakery goods with a focus on craftsmanship and ecological values. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Instagram Feed, providing a moderate level of digital maturity and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, although the website content and social media presence support legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

O

Ogenus Offshore UK Management Ltd

ogenusoffshore.com

60

Ogenus Offshore UK Management Ltd is a recruitment and manpower company specializing in supporting global oil and gas and renewable energy projects. Founded in 2018 and based in Athens, Greece, with presence in Scotland, UK, the company offers comprehensive recruitment services including marine crewing, drilling crews, inspection and maintenance manpower, and HR workforce strategy. Their market position is strengthened by a claimed 95% success rate in timely placements and a global presence in over 7 countries. The website is professionally designed using WordPress and Elementor, optimized for SEO with Yoast, and includes a cookie consent mechanism compliant with GDPR. However, direct contact information such as emails and phone numbers are not prominently displayed, relying instead on contact forms.

H

Hellenic Hydrocarbons and Energy Resources Management Company (HEREMA)

herema.gr

57

The Hellenic Hydrocarbons and Energy Resources Management Company (HEREMA) is a Greek governmental entity responsible for licensing and managing the development of Greece's energy resources, including hydrocarbon exploration and production, carbon capture and storage (CCS), underground gas storage (UGS), and offshore wind projects. The website reflects a professional and authoritative presence, targeting energy sector stakeholders, government officials, and industry professionals. It provides structured information about its mandate, regulatory frameworks, and ongoing projects, positioning itself as a key national authority in energy resource management. Technically, the website is built on WordPress and incorporates modern technologies such as Google reCAPTCHA for form security and CookieYes for cookie consent management. The site is mobile-optimized and includes SEO best practices, although accessibility features could be improved. Analytics are implemented via Google Analytics and YouTube embedded content, with a clear cookie consent mechanism in place. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate automated abuse. However, it lacks visible security headers and published security policies or incident response information. No vulnerabilities or suspicious content were detected. Privacy compliance is partial, with cookie consent but no explicit privacy policy or terms of service pages found. Overall, HEREMA's website demonstrates a solid digital presence with good business credibility and moderate technical maturity. Strategic improvements in privacy documentation, security headers, and accessibility would enhance its security posture and compliance standing.

B

Bluepowerpartners

bluepowerpartners.com

59

Bluepowerpartners is a Denmark-based international consultancy specializing in renewable energy infrastructure, offering a broad range of services from origination to construction management. The company positions itself as a leading advisor and delivery partner in the green transition, targeting renewable energy project stakeholders. The website is built on WordPress with Elementor and optimized for SEO using Yoast. It employs modern web technologies and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is solid with HTTPS enforced and Cloudflare protection, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and a detailed privacy policy hosted by a third party. However, no direct contact information or security policies are published on the site. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business credibility and market positioning.

H

Hellenic Cables

hellenic-cables.com

64

Hellenic Cables is a major European cable manufacturer specializing in submarine, power, and telecommunication cables, serving primarily industrial and energy sector clients. The company positions itself as one of the largest cable producers in Europe with a strong international presence and a B2B business model. Their website reflects a professional and well-structured digital presence, leveraging WordPress CMS with modern plugins and technologies such as Yoast SEO and OneTrust for privacy compliance. The site is well-optimized for SEO, mobile-friendly, and provides comprehensive corporate information including social media channels and contact details. Security-wise, the website enforces HTTPS and includes standard security headers, but lacks explicit security policy and incident response information. The WHOIS data for the domain is missing or inaccessible, which raises some concerns about domain registration transparency, though the website content and branding strongly indicate legitimacy. Overall, the site demonstrates a mature digital infrastructure with good privacy compliance and a solid security posture, suitable for a large industrial enterprise.

C

CLS (Collecte Localisation Satellites)

cls.fr

64

CLS (Collecte Localisation Satellites) is a large multinational company founded in 1986, specializing in satellite data collection and Earth observation services. The company operates globally with 35 sites and focuses on environmental monitoring, maritime security, sustainable fisheries, mobility, and energy infrastructure. CLS leverages advanced technologies such as data science, AI, and machine learning to provide actionable insights to governments, environmental agencies, and industry sectors. The website reflects a mature digital presence with professional design, comprehensive content, and multilingual support. Technically, the website is built on WordPress using the Divi theme and incorporates modern JavaScript libraries like Swiper.js and GSAP. It employs HTTPS with good SSL configuration and uses hCaptcha for form security. The site includes detailed privacy and cookie policies with consent mechanisms, indicating good privacy compliance. Analytics are implemented via Google Tag Manager with moderate user tracking. From a security perspective, the site shows good practices such as HTTPS enforcement and CAPTCHA usage but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain legitimacy verification, but the professional web presence and certifications support trustworthiness. Overall, CLS presents a strong business and technical profile with good security posture and privacy compliance. The main risk is the lack of publicly available WHOIS data, which should be further investigated to confirm domain registration legitimacy.

C

Churchill

churchill.fr

44

Churchill is a premium French web agency specializing in custom website creation, redesign, SEO, and digital marketing services primarily targeting market leaders in Paris and Lyon. The company emphasizes bespoke solutions using WordPress and WooCommerce, integrating advanced tools and third-party services to maximize client ROI. Their market position is supported by over 10 years of experience and more than 120 completed projects, with a strong focus on SEO and user experience. Technically, the website is built on a modern WordPress platform with performance optimizations via WP Rocket, analytics through Matomo and Google Tag Manager, and cookie consent managed by Axeptio. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, explicit security headers are not visibly configured, and no public security policy or incident response information is provided. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of WHOIS data limits domain trust verification. Privacy compliance is strong with comprehensive policies and consent mechanisms. Overall, the site demonstrates professionalism and trustworthiness, though domain registration transparency is lacking. Recommendations include enhancing security headers, publishing a security policy and incident response contacts, and improving WHOIS transparency to bolster trust and compliance.

A

Agence tactee

seoh.fr

49

Tactee is a French digital agency founded in 2014, specializing in SEO, SEA, inbound marketing, and website creation and redesign. The agency targets SMEs, startups, and large groups seeking to enhance their digital presence and conversion rates. With multiple agency locations across France and a portfolio of notable clients, Tactee positions itself as a trusted partner in digital marketing. Technically, the website is built on WordPress with modern tools such as Yoast SEO, Google Tag Manager, and marketing automation via Plezi, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. The absence of WHOIS data limits domain trust analysis but does not detract significantly from the overall legitimacy given the professional content and branding. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing vulnerability disclosure information.

D

Delaware County District Attorneys Office

delcoda.com

57

The Delaware County District Attorneys Office website serves as the official online presence for the government legal entity led by District Attorney Jack Stollsteimer. It provides information relevant to residents and stakeholders of Delaware County regarding legal prosecution and public safety. The website is built on WordPress using the Divi theme and incorporates SEO best practices via Yoast SEO. Hosting and domain registration are managed through GoDaddy, with the domain established in 2006, reflecting a mature and stable online presence. Security posture is adequate with HTTPS enabled and registrar locks in place, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy and cookie policies are absent, indicating a gap in compliance and transparency. No incident response or vulnerability disclosure information is provided. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve in privacy compliance and security hardening.

V

Visit Philadelphia

visitphilly.com

59

Visit Philadelphia operates as the official tourism and visitor information website for the city of Philadelphia, providing comprehensive resources including hotels, events, dining, and local attractions. The site targets tourists, families, and culture enthusiasts, positioning itself as the authoritative source for planning visits to Philadelphia. The business model centers on destination marketing and travel facilitation, leveraging partnerships with local hotels and event organizers. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Klaviyo, and various advertising and tracking integrations, ensuring good SEO, mobile optimization, and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though it lacks a public security policy or incident response information. The absence of WHOIS registration data is unusual but does not detract significantly from the site's legitimacy given its professional presentation and official branding. Overall, the website is a well-maintained, trustworthy resource for Philadelphia tourism.

P

PIBS

pibs.cz

63

Prague International Business School (PIBS) is an established educational institution based in the Czech Republic, specializing in advanced management education including MBA, DBA, and LL.M programs. The school targets current and future leaders seeking to enhance their managerial knowledge and skills, leveraging a network of experienced professors and business leaders. The website reflects a professional and consistent brand image with clear navigation and relevant content for prospective students. Technically, the site is built on WordPress using the Genesis Framework and Yoast SEO, hosted by Active24, and employs modern web technologies including Cookiebot for GDPR-compliant cookie consent. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers are not detected and could be improved. Privacy compliance is good with a detailed cookie consent mechanism, but explicit privacy and terms of service pages are not found in the provided content. Overall, PIBS presents a trustworthy and professional online presence suitable for its educational mission.

G

GAINDE 2000

gainde2000.com

51

GAINDE 2000 is a Senegal-based technology company specializing in comprehensive digital transformation solutions for enterprises and public administrations across Africa. The company positions itself as a pioneer in African digital solutions, offering services such as sector expertise, partnerships, and international presence. Their website reflects a professional and consistent brand image with clear service offerings and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, delivering a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some security headers and formal privacy/cookie policies. WHOIS data is missing, which raises concerns about domain registration legitimacy, though the website content and social presence suggest a legitimate business. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security practices.

Hobbyhorses Slovakia is a small e-commerce retailer specializing in hobby horses and related accessories, primarily targeting hobby horse enthusiasts and families in Slovakia. The website is built on WordPress using the Divi theme and several plugins to enhance functionality and multilingual support. The hosting is provided by HOSTINGER operations, UAB, with DNS managed via Cloudflare. The site demonstrates good content quality and user experience with a clear focus on its niche market. Technical infrastructure is modern but could benefit from enhanced security measures such as DNSSEC and improved security headers. Privacy compliance is basic with a privacy policy and cookie consent mechanism in place, though terms of service and security policies are absent. Overall, the site is safe for general audiences and shows moderate trustworthiness and professionalism.

C

CYBERsicher

transferstelle-cybersicherheit.de

54

CYBERsicher is a German government-related initiative dedicated to enhancing cybersecurity awareness and capabilities among small and medium-sized enterprises (SMEs), startups, and craft businesses. The website serves as a comprehensive platform offering free resources, workshops, events, and emergency support services tailored to the needs of the Mittelstand. It positions itself as a national hub for cybersecurity knowledge transfer and practical assistance, leveraging partnerships and official backing to build trust and reach its target audience effectively. The content is well-maintained, regularly updated, and presented in a professional manner, reflecting a strong commitment to user education and support. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WP Rocket, ensuring good performance, SEO optimization, and mobile responsiveness. The use of Borlabs Cookie indicates attention to privacy compliance and user consent management. Hosting is provided via rzone.de, and the site employs HTTPS with a solid SSL configuration. Accessibility and navigation are well-implemented, contributing to a positive user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced transparency and trust. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the security posture is solid but could be improved with additional documentation and security headers. The overall risk assessment is low, with the site appearing trustworthy and professionally managed. Strategic recommendations include publishing dedicated security and incident response policies, adding security headers, and considering a vulnerability disclosure framework. These steps would further strengthen the site's security maturity and user confidence.

B

bezDodavatele, a.s.

bezdodavatele.cz

42

bezDodavatele, a.s. operates as an alternative energy supplier in the Czech Republic, specializing in green electricity and gas with transparent, floating tariffs that avoid long-term commitments. The company positions itself as a customer-friendly, eco-conscious provider leveraging market opportunities to offer competitive pricing. Their services include electricity and gas supply, smart electricity tariffs, photovoltaic surplus buyback, and online calculators for savings estimation. The website is professionally designed, mobile-optimized, and provides clear navigation and multiple contact channels including forms, email, and phone support. Social media presence is active across major platforms, enhancing customer engagement. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Highcharts for interactive content. It integrates Google Tag Manager and CookieYes for analytics and cookie consent management, respectively. The site uses HTTPS with good SSL configuration, though additional security headers could improve its security posture. Forms are implemented securely using Gravity Forms, with consent mechanisms in place for data privacy compliance. Security-wise, the site demonstrates good practices including HTTPS enforcement and cookie consent, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is privacy protected, which is justified for this business type, though it limits domain age and registrant transparency. Overall, the site is trustworthy, professional, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing a security policy and incident response contacts, adding a vulnerability disclosure mechanism, and improving accessibility compliance. These steps will strengthen trust and security culture, supporting long-term business growth and customer confidence.

The website 'Use Social Proof' appears to be a minimal WordPress-based site with very limited content, primarily a default 'Hello world!' post. There is no clear business description, contact information, or privacy and security policies present. The technical infrastructure leverages common WordPress plugins and themes, including Astra theme, Yoast SEO, Google Analytics, and Google Tag Manager, indicating a basic digital maturity level. Security posture is moderate due to HTTPS usage and spam protection, but lacks advanced security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional but lacks professionalism, business credibility, and compliance features.

A

Analyzati

analyzati.com

52

Analyzati is a privacy-focused website analytics provider offering a lightweight, GDPR-compliant alternative to Google Analytics. The company provides real-time visitor tracking, event tracking, and detailed analytics with a focus on user data privacy. The business operates on a SaaS subscription model with freemium and paid plans, targeting website owners and developers who prioritize privacy. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. Hosting is likely via NameCheap, consistent with the domain registrar data. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is claimed but lacks visible privacy and cookie policies on the homepage. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in transparency and security best practices.

W

Wine Point Plzeň

winepointplzen.cz

53

Wine Point Plzeň is a small, specialized wine retailer located in Plzeň, Czech Republic, focusing on Czech and Moravian wines. The business offers a combination of retail sales, wine tastings, events, and corporate services, supported by an e-commerce platform. The website is built on WordPress using Elementor, featuring modern frontend technologies and a good user experience with mobile optimization. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks explicit security policies and cookie consent mechanisms. The domain registration is consistent and transparent, supporting the legitimacy of the business. Overall, the website presents a professional and trustworthy image but should improve privacy compliance and security transparency.

T

Tvůj Dj

tvujdj.cz

39

Tvůj Dj is a Czech-based small business specializing in tailored music event services including weddings, corporate events, clubs, and private parties. Established in 2005, the company has a solid market presence in the Czech Republic and offers a broad portfolio of services such as event production, audiovisual production, and technical equipment rental. The website reflects a professional and consistent brand image with active social media channels and well-structured content. Technically, the site is built on WordPress using modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance improvement. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices.

F

FairCasinos

fair-casinos.com

65

FairCasinos is a specialized online platform dedicated to providing comprehensive reviews and ratings of online casinos targeting Canadian players. Established in 2024, the site offers detailed insights into casino bonuses, game variety, licensing, and payment methods, positioning itself as a trusted affiliate and review resource in the Canadian gambling market. The platform leverages WordPress with modern SEO and user experience optimizations to deliver content effectively across devices. Security posture is solid with HTTPS and domain transfer protections, though improvements in DNS security and published policies are recommended. Overall, the site presents a professional and trustworthy front for users seeking reliable casino information.

N

National Breast Cancer Foundation, Inc.

nbcf.org

77

National Breast Cancer Foundation, Inc. is a well-established non-profit organization dedicated to providing help and hope to those affected by breast cancer through early detection, education, and support services. The organization has a strong market position supported by recognized certifications such as Four Star Charity and Platinum Transparency awards. Their website reflects a professional and trustworthy presence with comprehensive content targeting individuals affected by breast cancer and supporters. Technically, the website is built on WordPress with modern technologies and optimized for performance, mobile, and SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response information are not publicly available. Overall, the website demonstrates high credibility and trustworthiness, with a moderate risk due to lack of WHOIS transparency but justified by privacy protection for a non-profit entity.

A

Autopůjčovna NONSTOP

attackerci6.cz

38

Autopůjčovna NONSTOP is a Czech car rental service specializing in providing a wide range of vehicles including SUVs, luxury cars, and electric vehicles with nonstop availability in Prague, including airport and city center locations. The business operates primarily through an online reservation system, targeting both tourists and local customers seeking flexible and reliable car rental options. The website is built on WordPress CMS, utilizing common plugins such as Yoast SEO for search optimization and Smartsupp for live chat support, indicating a moderate level of digital maturity. The technical infrastructure is supported by the Czech registrar REG-WEDOS, with SSL encryption ensuring secure communications. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies, which could be improved to enhance trust and compliance. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, potentially exposing the business to GDPR compliance risks. Overall, the website presents a professional and trustworthy image with clear contact information and detailed vehicle listings, but could benefit from enhanced security and privacy practices to strengthen its risk profile.

S

SPŠ a VOŠ Příbram

spspb.cz

44

SPŠ a VOŠ Příbram is a regional educational institution in the Czech Republic providing secondary technical and higher vocational education. The website targets prospective students, current students, parents, and the general public, offering detailed information about study programs, school events, and virtual tours. The institution maintains an active social media presence and complies with GDPR regulations, including a comprehensive privacy policy and cookie consent mechanism. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery. It uses several plugins for video playback, galleries, and cookie management. The site is mobile-optimized and features good SEO practices with structured data and meta tags. Performance is moderate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some security headers and a security.txt file for vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, but the website's content and technical setup indicate legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving its educational mission effectively.

V

Velkotržnice Lipence

vt.cz

47

Velkotržnice Lipence operates as a retail and wholesale market located in Prague, Czechia, offering a diverse range of products including food, flowers, decorations, and fresh produce. Established in 1999, the company has a longstanding presence in the regional retail sector. The website reflects a professional and consistent brand image, targeting general consumers and businesses seeking quality market offerings. Technically, the site is built on WordPress with modern tools such as Google Tag Manager and Facebook Pixel, hosted by WEDOS, ensuring a stable and moderately performant digital infrastructure. Security measures are well implemented with HTTPS and security headers, although explicit privacy and terms of service policies are absent, representing a compliance gap. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

P

PBtisk a.s.

pbtisk.cz

60

PBtisk a.s. is a specialized book production and printing company established in 1990, currently recognized as one of the leading producers in Central Europe. The company serves a professional clientele including publishers, galleries, and museums, offering complete book production services, climate-neutral printing, and custom book models starting from single pieces. The website reflects a mature digital presence built on WordPress with Elementor, featuring good design quality, clear navigation, and GDPR-compliant privacy and cookie policies. Security measures include HTTPS, Google reCAPTCHA, and cookie consent management, though some security headers could be improved. Overall, the site demonstrates a solid security posture with no critical vulnerabilities detected.

W

WSM – Czech Republic s.r.o.

wsm.cz

51

WSM – Czech Republic s.r.o. is a Czech manufacturing company specializing in mobile hall systems and modular containers for various business applications such as receptions, office spaces, and sales rooms. The company targets business and industrial clients primarily within the Czech Republic. The website is built on WordPress and uses common web technologies including Gravity Forms and Font Awesome. The digital infrastructure appears basic but functional, with moderate performance and good mobile optimization. Security posture is limited with no visible security headers or advanced protections, and WHOIS data is unavailable, likely due to privacy protection. There is a lack of privacy and cookie policies, as well as contact information, which impacts trust and compliance. Overall, the website serves as a basic informational platform for a small manufacturing business but would benefit from enhanced security, compliance, and transparency measures.

L

LAMA PB s.r.o.

lamapb.com

61

LAMA PB s.r.o. is a Czech-based small business specializing in a broad range of construction and related services including height works, painting, locksmith services, arborist and risky tree felling, and equipment rental. The company has a diversified service portfolio and operates primarily in the Příbram, Prague, and Central Bohemia regions. Their website is built on WordPress with common plugins and demonstrates good content quality and user experience. The technical infrastructure is modern with HTTPS and cookie consent mechanisms in place, but lacks some security headers and a visible privacy policy page. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site is professional and trustworthy but could improve in privacy and security compliance areas.

D

Dolák s.r.o.

toyotadolak.cz

44

Toyota Dolák is a large, authorized Toyota dealership and service provider operating in the Czech Republic. It holds the position as the largest Toyota sales and service partner in the country, offering a comprehensive range of services including new and used vehicle sales, vehicle buyback, leasing, rental, and authorized servicing. The company operates multiple branches across key Czech cities, enhancing accessibility and customer reach. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to consumers and businesses interested in Toyota vehicles and related services. From a technical perspective, the website is built on WordPress with a modern technology stack including jQuery, Google Tag Manager, and various UI libraries. It is mobile-optimized and SEO-friendly, with good performance and accessibility standards. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a mature approach to privacy and regulatory compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a security.txt file suggests room for improvement in security best practices. The lack of WHOIS data reduces domain trustworthiness somewhat, but the professional presentation and detailed business information mitigate concerns. Overall, Toyota Dolák presents a trustworthy and professional online presence with strong business credibility and good technical implementation. Strategic improvements in security policies and domain transparency would further enhance trust and compliance.

L

Luboš Toman

lubostoman.com

52

Luboš Toman operates a professional photography website focused on sports, cultural, and reportage photography primarily targeting Czech-speaking audiences. The site showcases galleries, blog content, and provides clear contact information, positioning itself as a niche local photography service. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Bootstrap framework, and Google reCAPTCHA for form security. While HTTPS is enforced and basic security practices are in place, the absence of HTTP security headers and a cookie consent mechanism indicates room for improvement in security and privacy compliance. The WHOIS data is notably missing, which raises questions about domain registration legitimacy despite the active and professional website presence. Overall, the site scores well in content quality and business credibility but should address security and compliance gaps to enhance trust and resilience.

R

Royal Dobříš

spadobris.cz

47

Royal Dobříš operates a luxury wellness and apartment accommodation business located in Dobříš, Czech Republic, targeting tourists and visitors seeking premium wellness experiences near Prague. The website showcases private wellness facilities, premium apartments with private whirlpools and saunas, and a bistro offering European cuisine. The business positions itself as a premium local hospitality provider with a focus on privacy, quality, and customer experience. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and tracking tools such as Google Analytics, Facebook Pixel, and Ecomail. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enforced but lacks some security headers and formal privacy and terms policies, indicating room for compliance improvement. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

S

Status301

status301.net

62

Status301.net operates as the root site of the Permanently Moving Network, specializing in WordPress-related development services and plugin offerings. The business targets WordPress users and developers, providing both free and premium plugins alongside internet services such as VPS management and e-commerce site building. The website is built on WordPress CMS, hosted on o2switch.net, and uses modern web technologies including jQuery and LiteSpeed caching for performance optimization. The site demonstrates good mobile optimization and SEO practices, though accessibility is basic. From a security perspective, the website benefits from HTTPS encryption and domain transfer protection but lacks DNSSEC and security headers, which are recommended for enhanced protection. No explicit privacy policy or terms of service are published, though a cookie consent mechanism compliant with EU regulations is present. Contact is available via a dedicated contact page with a form, but no direct emails or phone numbers are listed. The domain is well aged and registered consistently, supporting the legitimacy of the business. Overall, the website presents a moderate security posture with room for improvement in privacy compliance and security best practices. The business model is clear and niche-focused, with a consistent brand and good content quality. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and implementing security headers to strengthen the security posture.

B

BK Instal

bkinstal.cz

38

BK Instal is a small Czech Republic-based company specializing in photovoltaic power plant servicing, installation, and comprehensive energy-saving solutions. The website presents a professional and modern approach to its business, targeting owners and operators of photovoltaic systems seeking efficient energy solutions. The company positions itself as a niche player in the energy sector with a focus on modern technology and cost savings. Technically, the website is built on WordPress with Elementor and WooCommerce, integrating modern tracking and security tools such as Google Tag Manager, Facebook Pixel, and Google reCAPTCHA v3. The site is mobile-optimized and performs moderately well, with good SEO practices in place. Security posture is solid with HTTPS enabled and use of security best practices, though some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. The absence of WHOIS data and privacy/cookie policies reduces transparency and compliance confidence. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and domain registration transparency.

C

Columbus Energy S.A.

columbusenergy.pl

53

Columbus Energy S.A. is a well-established Polish company specializing in renewable energy solutions for residential and business customers. Their offerings include photovoltaic installations, energy storage systems, heat pumps, intelligent energy management (Columbus Intelligence), and related services such as thermal modernization and electric vehicle charging stations. The company positions itself as a leading provider in Poland with a strong focus on eco-friendly and cost-saving technologies. The website is professionally designed, multilingual, and provides comprehensive information tailored to various customer segments including homeowners, businesses, farmers, and public institutions. Technically, the website is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight, TikTok Pixel, Microsoft Clarity, and SalesManago. It employs a cookie consent mechanism compliant with GDPR and provides detailed privacy policies. The site is mobile-optimized, SEO-friendly, and performs moderately well. From a security perspective, the site uses HTTPS and implements best practices such as asynchronous loading of scripts and cookie consent. However, DNSSEC is not enabled, and there is no visible security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain registered since 2014, supporting the company's legitimacy. Overall, Columbus Energy's website demonstrates a mature digital presence with strong business credibility and good security posture. Recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure mechanism to further enhance trust and security.

L

Loyal

loyalhealth.com

62

Loyal is a mature healthcare technology company founded in 2015, offering an end-to-end digital healthcare platform focused on patient engagement and data management. The company targets healthcare organizations and health systems, providing modular solutions such as provider data management, digital engagement, CRM, reputation management, and scheduling. The website is professionally designed using WordPress and Elementor, hosted on Azure DNS infrastructure, and integrates analytics tools like Google Analytics and MonsterInsights. Security posture is strong with HIPAA and SOC 2 Type 2 compliance claims, HTTPS enforcement, and domain registration protections. However, the site lacks visible privacy and cookie policies, as well as explicit incident response or vulnerability disclosure information, which are areas for improvement. Overall, the website is trustworthy, content-rich, and well-positioned in the healthcare technology market.

J

Jakob Schlaepfer

jakob-schlaepfer.ch

51

Jakob Schlaepfer is a Swiss-based manufacturer specializing in innovative textiles for fashion and interior decoration, targeting professionals in the textile and design industries. The company positions itself as a niche provider focusing on high-quality, creative, and design-driven textile products. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the site is built on WordPress and uses common JavaScript libraries such as jQuery and Modernizr, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate with HTTPS usage but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the site is trustworthy and legitimate, with domain registration data consistent with the business claims.

A

Atelier Fabrics

atelierfabrics.cz

43

Atelier Fabrics is a small Czech Republic based retail business specializing in fabrics and textile products, operating primarily through an e-commerce website built on WordPress. The website uses modern web technologies including Elementor and Slider Revolution for content presentation, and integrates Google Analytics and Facebook Pixel for user tracking and marketing purposes. The technical infrastructure is adequate for a small business, hosted via a Czech registrar and hosting provider, with proper SSL encryption ensuring secure communications. However, the website lacks comprehensive privacy and cookie policies, and does not disclose contact information or security policies, which limits its privacy compliance and business credibility. Security posture is moderate with HTTPS enabled but missing security headers and formal incident response mechanisms. Overall, the website is safe for general audiences with no adult or questionable content detected.

N

Nextend

nextendweb.com

59

Nextend is a well-established software company specializing in WordPress and Joomla plugins, powering over one million websites globally. Their product portfolio includes innovative tools such as Mosaic, Smart Slider 3, and Social Login, targeting web developers and site owners seeking advanced, lightweight, and engaging solutions. The company demonstrates strong market presence with positive user reviews and a consistent brand identity. Technically, the website is built on WordPress with a custom Mosaic framework, leveraging modern web technologies and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and domain registration consistent with business claims, though there is room for improvement in DNSSEC and security headers. Privacy compliance is good, featuring a cookie consent mechanism and a comprehensive privacy policy. However, explicit contact and security policy information are limited on the homepage. Overall, the site is professional, trustworthy, and technically mature.

1

1st Grand Challenge Conference

gc-conference-bua.de

42

The 1st Grand Challenge Conference website serves as an informational platform for a conference event, branded consistently with the domain gc-conference-bua.de. The business appears to be a small entity focused on organizing or promoting this conference, with limited publicly available business details. The technical infrastructure is based on WordPress with the Divi theme and several plugins enhancing SEO and content filtering capabilities. Hosting is provided by netcup, a known hosting provider, indicating a stable infrastructure. Security posture is weak due to the absence of security headers, privacy policies, and incident response information, which are critical for trust and compliance. No blocking or WAF mechanisms were detected, allowing full content access. Overall, the site is professionally designed but lacks important compliance and security documentation.

S

SPA Studio

spa-studio.cz

57

SPA Studio is a specialized retailer and service provider of family whirlpools and hybrid swim spa pools under the Canadian Spa International® brand, operating primarily in the Czech and Slovak markets. The company emphasizes quality, innovation, and customer service, supported by multiple showrooms and a comprehensive online presence. Their product offerings include over 47 unique whirlpool models and 9 swim spa models, targeting families and wellness enthusiasts seeking year-round relaxation solutions. Technically, the website is built on WordPress with a modern tech stack including jQuery, Slick Carousel, and various analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Smartlook. The site is well optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices and GDPR compliance through the Complianz plugin. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for forms, and manages cookie consent effectively. However, there is room for improvement in HTTP security headers and incident response visibility. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital front for SPA Studio, though the lack of WHOIS data reduces transparency regarding domain registration. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving incident response contact information to further strengthen trust and compliance.

N

Nábytek Hülsta

nabytekhulsta.cz

47

Nábytek Hülsta operates as a specialized retailer of German design furniture, offering a combination of modern design and high-quality craftsmanship. The website targets Czech consumers interested in premium furniture, supported by multiple showroom locations. The business is positioned as a medium-sized retail entity under the parent company W a Weinzettl, s.r.o., with a focus on delivering quality and innovative furniture solutions. Technically, the website is built on WordPress with Elementor and Yoast SEO, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Pinterest Tag. The site demonstrates good digital maturity with responsive design and SEO optimization. Security posture is solid with HTTPS and standard tracking protections, though explicit privacy and cookie policies are not visible, indicating room for improvement in compliance. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces domain trust but is common for retail businesses. Overall, the site is professional, trustworthy, and well-structured for its market segment.

B

BK Instal

bk-instal.cz

38

BK Instal is a small Czech Republic-based company specializing in photovoltaic power plant projects, installations, servicing, and energy savings solutions. The website presents a professional and modern approach to energy solutions, targeting owners and operators of photovoltaic systems and energy-conscious consumers. The company positions itself as a regional energy service provider with a focus on sustainable energy savings. Technically, the website is built on WordPress with Elementor, utilizing modern web technologies including Google Tag Manager and Facebook Pixel for marketing and analytics. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and privacy compliance mechanisms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website is functional and professional but would benefit from improved privacy compliance and verified domain registration information.

S

supsallanches

supsallanches.com

50

Supsallanches is a small French educational institution specializing in higher education and training in commerce, tourism, and marketing, offering BTS and Bachelor programs. The website is built on WordPress using the Divi theme and integrates HubSpot analytics and cookie consent mechanisms, indicating a moderate level of digital maturity. The domain registration is consistent with the business profile, created in 2020 and hosted with Scaleway SAS and o2switch.net. Security posture is adequate with HTTPS enabled and clientTransferProhibited status on the domain, but lacks DNSSEC and security headers. Privacy compliance is limited due to absence of a privacy policy and terms of service pages. Overall, the website is professional and functional but could improve in privacy and security transparency.

P

Pépinière d'entreprises PEP'S

pepsmontblanc.fr

46

PEP'S Mont Blanc is a small business incubator located in Passy, France, offering coworking spaces, mentoring, networking, and business support services targeted at entrepreneurs and startups. The website is built on WordPress using modern plugins such as Elementor and Bookly, indicating a moderate level of digital maturity. The site is mobile-optimized and includes structured data for SEO benefits. Security posture is generally good with HTTPS enforced and CSRF protections in booking forms, but lacks security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the website is professional and trustworthy, but improvements in privacy compliance and security hardening are recommended.

S

Sport-Eli

sporteli.cz

39

Sporteli is a small family-owned business specializing in sailboat rentals and teambuilding events on the Orlík reservoir in the Czech Republic. Established in 1990, the company offers a fleet of 19 fully equipped vessels and professional crew support, targeting corporate clients and recreational sailors. The website is built on WordPress with modern technologies such as Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enabled, but lacks advanced security headers and privacy policies, indicating room for compliance improvements. The absence of WHOIS data raises some concerns about domain legitimacy, though the website content and contact information appear professional and trustworthy. Overall, the site scores well on business credibility and technical implementation but should address privacy and security policy gaps to enhance trust and compliance.

P

Paliva Větrovský

palivavetrovsky.cz

33

Paliva Větrovský is a small regional business based in the Czech Republic specializing in the sale and delivery of various types of coal and briquettes, primarily serving the Příbram region. The company emphasizes quality fuel products with guaranteed origin and offers both personal pickup and delivery services. The website is built on WordPress using common plugins and frameworks such as Bootstrap and jQuery, with moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS and missing security headers, although some basic protections like copy protection scripts are implemented. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy for its business scope but requires significant improvements in security and privacy to meet modern standards.

N

Neher Systeme GmbH & Co. KG

neher.de

60

Neher Systeme GmbH & Co. KG operates a professional website focused on high-quality insect protection products including custom-fit fly screens for windows, doors, and light shafts. The company positions itself as a market leader in Germany with patented technology and a strong dealer network. The website is built on WordPress with modern plugins and frameworks, showing good technical maturity and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or privacy issues were detected. Overall, the site reflects a trustworthy and professional business with clear customer engagement channels.