Security Directory

S

Spolek pro ochranu přírodní rezervace a hradu Krašova

hradkrasov.cz

55

The website www.hradkrasov.cz represents a non-profit organization dedicated to the preservation and promotion of the historical site Hrad Krašov in the Czech Republic. The organization operates the castle ruins, organizes cultural and historical events, and provides visitor information. The site targets tourists, history enthusiasts, and local community members, offering event calendars, visitor guidelines, and opportunities to support the castle's restoration. Technically, the website is built on WordPress with Elementor and uses modern plugins for event management and downloads. It incorporates Google Tag Manager and CookieYes for analytics and privacy compliance. Security posture is adequate with HTTPS and cookie consent, though some security headers are not explicitly detected. The site is accessible without WAF or blocking mechanisms, and contact information is clearly provided, enhancing trust. WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this type of organization. Overall, the site is professional, user-friendly, and compliant with privacy regulations.

N

National Heritage Institute

zamek-manetin.cz

45

The website represents the official online presence of the Manětín chateau, a Baroque cultural heritage site managed by the National Heritage Institute of the Czech Republic. It provides comprehensive visitor information including tours, opening hours, admission, and contact details, targeting tourists and cultural heritage enthusiasts. The site is well-branded and consistent with government heritage management standards. Technically, the website employs a modern tech stack including jQuery, Leaflet.js for maps, Google Analytics and Tag Manager for analytics, and integrates fonts from Typekit and Google Fonts. The site is mobile optimized, accessible, and performs moderately well, hosted under a reputable registrar. Cookie consent is implemented with granular user controls, reflecting good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy or incident response contact information, and no vulnerability disclosure mechanism is present. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness. The risk assessment is low with no critical issues detected. Strategic recommendations include publishing a security policy, incident response contacts, and a vulnerability disclosure page to enhance transparency and security maturity.

DATA JOBS CZ is a Czech Republic based personnel agency specializing in job placement and recruitment services within the Czech Republic and the broader EU region. The company operates a professionally designed website offering job listings, consulting, and CV submission services targeting job seekers and employers. The business is small-sized, founded in 2017, and maintains a consistent brand presence with partner logos and active social media channels. Technically, the website leverages modern web technologies including Bootstrap 4, jQuery, and Google Analytics, hosted by WEDOS, a Czech hosting provider. The site is mobile optimized and SEO friendly, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security best practices. No signs of WAF or content blocking were detected, allowing full content accessibility. WHOIS data aligns well with the business profile, supporting legitimacy. Overall, the website scores a solid 78 out of 100, reflecting good content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture.

C

Chameleon Studios Ltd

chameleonstudios.co.uk

65

Chameleon Studios Ltd is a well-established, award-winning web design and digital marketing agency based in Cambridge, UK, founded in 2004. The company specializes in delivering comprehensive digital solutions including web design and development, branding, hosting, SEO, and digital marketing services. Their client base includes ethical organizations, academic institutions such as the University of Cambridge, and various businesses, positioning them as a trusted and reputable agency within their niche. The website reflects a professional and consistent brand image with clear navigation and rich content tailored to their target audience. Technically, the website is built on WordPress CMS, leveraging modern technologies such as jQuery, Google Tag Manager, and SiteGround hosting optimizations. The site demonstrates excellent performance, mobile responsiveness, and SEO optimization, indicating a mature digital infrastructure. Privacy and cookie policies are comprehensive and GDPR compliant, with an active cookie consent mechanism enhancing user privacy. From a security perspective, the site enforces HTTPS and employs best practices such as cookie consent banners and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and incident response contact information suggests room for improvement in security posture. The WHOIS lookup was unsuccessful due to querying a subdomain rather than the registered domain, limiting domain registration insights. Despite this, the website content and business information appear legitimate and trustworthy. Overall, Chameleon Studios presents a strong business and technical profile with a high level of professionalism and security awareness. Strategic recommendations include enhancing security headers, publishing incident response contacts, and ensuring WHOIS data accuracy to improve trust and compliance further.

T

TECHNICOAT Bakeware s.r.o.

technicoat-bakeware.com

51

TECHNICOAT Bakeware s.r.o. is a Czech Republic based small manufacturing company specializing in high-quality coated and uncoated bakeware products and related coating services for industrial bakeries. The company emphasizes improving baking efficiency, hygiene, and safety through its non-stick coating technology. The website reflects a professional and consistent brand presence with clear product and service offerings, targeting industrial baking businesses. Technically, the website uses modern JavaScript libraries and Google services with GDPR-compliant cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS and consent mode implemented, but lacks explicit security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration legitimacy and reduces overall trust. The site is free from adult or questionable content and provides clear contact information and business credentials. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from improved transparency on domain registration and enhanced security disclosures.

D

DEK a.s.

skupina-dek.cz

64

DEK a.s. is a large Czech enterprise operating as a group of companies specializing in the supply of building materials, construction services, manufacturing of construction products, and software solutions for the construction industry. The company holds a strong market position, ranked 6th in the Czech TOP 100 most admired companies in 2023, serving primarily the Czech and Slovak markets. Their business model integrates retail, manufacturing, and technology services tailored to construction professionals and customers. The website reflects a professional and consistent brand image with clear navigation and relevant content.

C

Czech Online System s.r.o.

digitalniurednideska.cz

51

Czech Online System s.r.o. operates the website digitalniurednideska.cz, offering specialized digital official notice boards primarily targeting municipalities and local government offices in the Czech Republic. Their business model focuses on providing outdoor digital signage hardware combined with proprietary content management software, enabling remote and automated display of official documents and local information. The company is small-sized, founded in 2011, and presents a professional and consistent brand image with clear contact and reference information. Technically, the website employs common web technologies including jQuery, Swiper.js, and Google Analytics, with a moderate performance profile and good mobile optimization. The digital signage hardware supports Windows and Android platforms, emphasizing all-in-one outdoor solutions with touch capabilities. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. From a security perspective, while HTTPS is implied, explicit security headers are not detected, and no dedicated security or incident response policies are published. The absence of WHOIS data reduces domain trustworthiness, though the website content and company information appear legitimate and professional. No vulnerabilities or malicious content were identified. Overall, the website scores well in content quality, privacy compliance, and business credibility, but could improve in security posture and transparency. Strategic recommendations include enhancing security headers, publishing security policies, and resolving WHOIS data visibility to strengthen trust and compliance.

C

Czech Online System s.r.o.

digitalnipanely.cz

52

Czech Online System s.r.o. operates the website digitalnipanely.cz, specializing in the sale and rental of digital LED touch panels primarily targeting businesses, hospitality, public institutions, and event organizers in the Czech Republic. The company positions itself as an innovative provider of modern digital signage solutions, offering remote content management software and a variety of panel products. The website reflects a professional and consistent brand image with comprehensive contact information and social media presence, supporting its market credibility. Technically, the website employs modern web technologies including Google Analytics and Google Tag Manager for analytics and marketing, alongside Swiper.js for UI components. The site is mobile-optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details are explicitly identified, and some security headers are missing, suggesting room for technical hardening. From a security perspective, the site enforces HTTPS and uses secure forms with required fields, but lacks explicit security policies or incident response information. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, although the website content and business information appear legitimate and professional. No vulnerabilities or suspicious content were detected. Overall, the website presents a solid business front with good technical and privacy compliance but would benefit from enhanced security policies, WHOIS transparency, and additional trust signals to improve its security posture and domain legitimacy.

B

Budějovický Budvar, n. p.

budweiser-budvar.cz

58

Budějovický Budvar, n. p. is the national brewery of the Czech Republic, with a strong heritage and a significant export presence in over 70 countries. The company produces a variety of beer products, including limited edition collaborations with microbreweries, and offers brewery tours and educational content through its website. The brand is well recognized and maintains consistent, professional digital branding. Technically, the website is built on Webflow with modern JavaScript libraries and integrates Google Analytics and Cookiebot for tracking and compliance. Security posture is solid with HTTPS enforced and age verification implemented to comply with alcohol advertising regulations. However, explicit security headers are not detected, and no incident response contact is provided. WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by its content and external references. Overall, the site is professional, secure, and compliant, targeting adult consumers and partners in the beer industry.

C

Corel Corporation

officecommunity.com

67

WordPerfect, under Corel Corporation, offers a legacy office suite product line targeting individuals, businesses, and educational institutions. The website provides comprehensive support resources including tutorials, downloads, orders, and account management. The business model centers on software sales and licensing with a focus on niche market segments. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern web technologies such as jQuery, Bootstrap, Google Tag Manager, and Optimizely, indicating a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though the absence of a dedicated security policy or vulnerability disclosure page is noted. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the lack of WHOIS registration data for the domain www.wordperfect.com is a concern, suggesting possible privacy protection or domain aliasing. Overall, the website is trustworthy and professional but would benefit from enhanced transparency in security policies and domain registration details.

R

RRT s.r.o.

autaslovensky.sk

52

AUTÁSLOVENSKY.sk is a specialized service provider focused on integrating Slovak and Czech language translations into vehicle control systems. With over 17 years of experience and more than 17,500 vehicles served, the company operates primarily in Slovakia and the Czech Republic, offering on-site installation and custom software development for automotive brands. The website reflects a professional and trustworthy business with clear contact channels and customer testimonials. Technically, the site uses modern web technologies including Google Tag Manager, reCAPTCHA v3, and LiveChat, ensuring user interaction and marketing capabilities. Security posture is solid with HTTPS and form protections, though additional HTTP security headers and incident response information could enhance resilience. Overall, the site is well-structured, GDPR compliant, and presents a credible business presence in the automotive localization niche.

D

DEKPROJEKT s.r.o.

designbuilder.cz

56

DEKPROJEKT s.r.o. operates as the official reseller and support provider for DesignBuilder software in the Czech Republic and neighboring countries. The company offers advanced building simulation software combining 3D modeling with dynamic energy, daylight, and CFD analyses, targeting architects, engineers, and energy specialists. Their business model includes software subscription sales, training, and consulting services. The website is professionally designed, content-rich, and provides comprehensive information about the software, licensing, training, and climate analytics data. Technically, the site uses AngularJS and Vue.js frameworks, integrates multiple analytics and tracking tools, and implements cookie consent mechanisms, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS implied and cookie consent present, but lacks explicit security headers and dedicated security policy pages. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious or adult content.

DEKSOFT operates as a specialized web portal providing cloud-based computing applications tailored for the construction industry, with a focus on energy and building physics. The company primarily serves professionals in the Czech Republic and Slovakia, offering a subscription licensing model that includes a free trial period. Their product suite includes thermal analysis, acoustics, photovoltaics, and BIM-related tools, positioning them as a regional leader in construction software solutions. The website reflects a professional and consistent brand image with clear business and contact information. Technically, the website employs modern web technologies including Vue.js, Google Tag Manager, Microsoft Clarity, and Facebook Pixel for analytics and marketing. The infrastructure is cloud-based, supporting multi-device access and seamless software updates. Performance and mobile optimization are good, though accessibility features are basic. SEO is adequately addressed with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The use of third-party analytics and marketing scripts is transparent, though monitoring and updating these dependencies is recommended. Overall, the security posture is solid but could be enhanced with formal policies and security headers. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include publishing a formal security policy, incident response contacts, and vulnerability disclosure information to improve transparency and trust. Enhancing accessibility and security headers would further strengthen the site’s security and compliance posture.

D

DEK a.s.

dekpartner.cz

55

DEK a.s. operates the website dekpartner.cz, providing technical support, educational content, and software solutions primarily for architects, planners, students, and teachers in the construction industry within the Czech and Slovak Republics. The company has an established market presence since 2006, offering a range of services including consultations, BIM solutions, and educational resources. The website is professionally designed with consistent branding and targets a specialized audience in the construction and education sectors. Technically, the website employs modern web technologies such as Vue.js, UIkit, Axios, and integrates analytics tools like Google Tag Manager, Microsoft Clarity, and Exponea. The site is hosted with Active24, uses HTTPS with good SSL configuration, and implements security measures like invisible Google reCAPTCHA and CSRF tokens in forms. However, some security best practices such as security headers and explicit incident response policies are not publicly visible. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is partial, with a privacy policy and terms of service present but lacking a cookie consent mechanism. The WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy compliance and security transparency. Strategic recommendations include implementing cookie consent, adding security headers, and publishing incident response information to enhance trust and compliance.

Remington is a well-known brand specializing in personal care and grooming products, targeting a general consumer audience through retail and e-commerce channels. The website presents a professional and consistent brand image with a focus on product offerings such as hair care and shaving tools. Technically, the site employs modern frameworks like Bootstrap 4 and integrates multiple third-party analytics and advertising services, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS but lacks visible security headers and privacy compliance indicators, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about registration transparency, impacting trustworthiness. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices to improve compliance and user trust.

Š

Škola interiéru

skola-interieru.cz

42

Škola interiéru is a Czech-based educational institution specializing in practical interior design courses. The website showcases a well-structured offering of courses taught by experienced professionals who actively work in the design industry. The business targets aspiring and practicing interior designers, students, and related professionals seeking practical skills. Technically, the website is built on WordPress, uses modern web technologies, and implements HTTPS with some security best practices. However, the absence of WHOIS data and explicit privacy and cookie policies slightly reduce trust and compliance confidence. The site features strong branding, detailed course information, and positive testimonials, indicating a reputable and professional operation.

B

Best Transport a.s.

best-transport.cz

39

Best Transport a.s. is a Czech-based transportation and forwarding company with nearly 30 years of experience, specializing in furniture transport and logistics services primarily across Central Europe. The company emphasizes quality, reliability, and environmental responsibility, serving business clients with regional freight forwarding, warehousing, and distribution. The website reflects a professional and consistent brand image with detailed contact information and shareholder transparency documents. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and WPML for multilingual support. It employs modern web fonts and scripts, integrates Google reCAPTCHA for form security, and uses Google Tag Manager for analytics. The site is mobile-optimized with good navigation and performance, though accessibility and SEO could be improved. From a security perspective, the site uses HTTPS with a valid SSL certificate and includes reCAPTCHA to protect forms. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data reduces domain trust verification, though the website content and business information appear legitimate and professional. Overall, the website presents a credible business front with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

Č

Český rozhlas

ceskyrozhlas.cz

68

Český rozhlas is the Czech Republic's public radio broadcaster, offering a comprehensive online portal with news, live radio streaming, podcasts, cultural content, and audiobooks. The website is professionally designed, mobile-optimized, and provides extensive multimedia content targeting the general public interested in news and culture. Technically, the site is built on Drupal 7 with modern web technologies and integrates Google Tag Manager and advertising services. Security posture is good with HTTPS enforced, though some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy policy detected. WHOIS data is missing, which slightly impacts trust but the site’s branding and content strongly indicate legitimacy.

I

Information centre Vodňany

vodnany.net

56

The website www.infocentrumvodnany.cz serves as the official information center for the town of Vodňany in the Czech Republic, focusing on tourism-related services such as accommodation, gastronomy, cultural sights, and nature trails. It targets tourists and visitors seeking local information and travel guidance. The site is positioned as a local/regional tourism information provider with a small business profile. Technically, the website employs common and reliable web technologies including jQuery, Bootstrap, Font Awesome, and Google Fonts, with Google Tag Manager used for analytics. The site is mobile-optimized and presents a clear navigation structure, contributing to a good user experience. Security-wise, the site uses HTTPS and implements a cookie consent mechanism indicating GDPR awareness. However, it lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data reduces trust but is likely due to privacy protection, which is reasonable for this business type. Overall, the site is functional and trustworthy for its purpose but would benefit from enhanced security and compliance documentation.

M

Městské muzeum a galerie Vodňany

muzeumvodnany.cz

58

Městské muzeum a galerie Vodňany is a local cultural institution in Vodňany, Czech Republic, providing museum and gallery services including exhibitions, educational programs, and community events. The website reflects a well-structured and content-rich platform targeting local residents, tourists, and art enthusiasts. The institution maintains a consistent brand presence and offers clear contact information and social media engagement primarily via Facebook. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Bootstrap, Owl Carousel, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices evident in metadata and structured navigation. Security posture is moderate; while HTTPS is implied by the URL and cookie consent mechanisms are implemented, there is a lack of visible security headers and no explicit security or incident response policies published. WHOIS data is unavailable, which limits domain trust assessment but does not detract significantly from the overall legitimacy given the official nature of the content and contact details. Overall, the website is professional and trustworthy, serving its cultural and educational mission effectively.

W

WARC

warc.com

65

WARC is a well-established digital platform and advisory service specializing in marketing effectiveness. It serves a global audience of marketing professionals, agencies, media owners, and academic institutions by providing evidence-based research, case studies, data tools, and professional learning programs. The website reflects a strong market position with a comprehensive suite of products including strategy, creative, media, learning, and advisory services. The parent company is Ascential Events (Europe) Limited, indicating a credible corporate backing. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Slick Carousel, and integrates marketing and analytics tools like Marketo Munchkin and Google Tag Manager. The site is mobile optimized, accessible, and SEO friendly, with a professional design and clear navigation. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with good SSL configuration and some security best practices. However, explicit security headers like Content-Security-Policy and X-Content-Type-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Contact information is available primarily via contact forms. Overall, the website presents a low risk profile with strong business credibility and technical maturity. The main concern is the absence of WHOIS data, which is unusual but likely due to registrar or privacy policies rather than malicious intent. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen trust and security posture.

Q

QUITEC

zoper.cz

56

ZOPER.cz is a Czech Republic based specialized e-commerce platform focused on providing modern point-of-sale (POS) technology and related services for retail and hospitality sectors. The business is operated by the company QUITEC, led by Martin Pavlík, and offers a wide range of POS hardware, software, accessories, and consulting services. The website targets small to medium-sized businesses in the Czech market, positioning itself as a knowledgeable guide and supplier in the POS domain. Technically, the website is built on the Shoptet CMS platform, utilizing common web technologies such as jQuery, Google Tag Manager, Google Analytics (both UA and GA4), Facebook SDK, and various marketing and tracking tools including ActiveCampaign and Leady. The site is mobile optimized with good navigation and content structure, though some technical improvements are possible, such as updating outdated libraries and enhancing security headers. From a security perspective, the site enforces HTTPS and uses CSRF tokens on forms, with a cookie consent mechanism in place indicating GDPR compliance. However, explicit security policies and incident response information are not published, and some security headers are missing. No vulnerabilities or exposed sensitive data were detected in the content. The lack of WHOIS data reduces domain trustworthiness, but the website content and business presence appear professional and legitimate. Overall, ZOPER.cz presents a solid business offering with good technical and privacy practices, though improvements in security transparency and domain registration clarity are recommended to enhance trust and compliance.

L

Lamael

lamael.cz

46

Lamael.cz is a business-focused website representing Lamael, a company founded in 2017 that offers a mobile application for business management. The website targets business users seeking efficient management tools, positioning itself as a niche player in the technology sector within the Czech Republic. The site is built on WordPress using the Thrive Theme and incorporates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity, indicating a mature digital marketing strategy. Security measures include HTTPS and reCAPTCHA, but lack explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is professional and well-branded, though it could improve transparency and security posture.

Z

Zo školy do školy | IKAR

zoskolydoskoly.sk

55

The website zoskolydoskoly.sk is an e-commerce platform specializing in children's books targeted at children aged 0 to 12 years. It offers a wide catalog of books with a focus on educational and entertaining literature for young readers. The site is localized in Slovak language and hosted on a Slovak hosting provider, indicating a regional focus. The business appears to be newly established in 2024, consistent with the domain registration date. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Google Tag Manager for analytics and tracking, although it currently denies ad and analytics storage by default, showing some privacy consideration. Security posture is moderate with HTTPS and DNSSEC enabled, but lacks security headers and formal security policies. No privacy or cookie policies were found, which is a compliance gap. Contact information is not explicitly provided on the visible content, which may affect user trust and support accessibility. Overall, the website is professionally designed with good navigation and content relevance, suitable for its target audience. The content is safe with no adult or explicit material.

M

MIDOCAR Logistic, s.r.o

dopravomat.cz

49

Dopravomat.cz is a Czech-based platform operated by MIDOCAR Logistic, s.r.o, founded in 2020, specializing in group transportation services. The website enables users to submit transportation requests for groups and receive competitive offers from a network of verified transport providers across the Czech Republic. The business model focuses on transparency, no hidden fees, and payment only after service completion, positioning itself as a trusted intermediary in the transportation sector. The platform targets groups needing various transport sizes, from personal cars to large buses, emphasizing convenience and cost-effectiveness. Technically, the website employs a custom-built infrastructure leveraging modern web technologies including Google Maps API for location autocomplete, jQuery and jQuery UI for UI components, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with good navigation and user experience, though some accessibility features are basic. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses secure form inputs but lacks visible security headers and published security policies. There is no cookie consent mechanism, which may impact privacy compliance. No incident response or vulnerability disclosure information is available. The WHOIS data is consistent with the business identity, indicating legitimacy. Overall, the security posture is adequate but could be improved with additional best practices. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security headers, and transparency around security policies would enhance trust and reduce risk. The platform is well-positioned in its niche with a clear value proposition and solid business credibility.

Bohemiasoft s.r.o. operates a Czech-language website offering a suite of integrated online business tools tailored for small and medium entrepreneurs. Their services include online invoicing, email hosting on custom domains, e-commerce solutions, website creation, and digital office integration, positioning them as a comprehensive SaaS provider in the Czech market. The website is professionally designed with clear navigation and good content relevance, targeting entrepreneurs seeking centralized business management solutions. Technically, the site is built on WordPress with modern JavaScript libraries and includes analytics and social media integrations, reflecting a moderate level of digital maturity. Security posture is adequate but could be improved by implementing additional security headers and anti-spam measures on forms. Privacy and terms of service documents are provided, indicating a commitment to compliance, though cookie consent mechanisms are lacking. Overall, the domain registration is consistent with the business claims, showing a long-standing presence since 2008. Strategic recommendations include enhancing security headers, adding bot protection, and improving privacy compliance mechanisms to strengthen trust and security.

B

Bisport

bisport.cz

53

Bisport is a well-established small business specializing in water sports rental services, particularly canoe and raft rentals on the Sázava river in the Czech Republic. The company also offers accommodation, catering, and organizes school and corporate events, positioning itself as a regional leader in outdoor hospitality and tourism. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to families, schools, and outdoor enthusiasts. Technically, the site is built on WordPress, leveraging modern web technologies such as Google Analytics and Tag Manager for tracking, and includes a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers and policies could be improved. Overall, the site is trustworthy, user-friendly, and compliant with privacy regulations, supporting the business's credibility and customer engagement.

D

DRONTE s.r.o.

dronte.cz

45

DRONTE s.r.o. operates a specialized boat rental and water sports service primarily in the Czech Republic, focusing on rivers such as Berounka, Hron, Ohře, Otava, Sázava, Lužnice, Vltava, and Malý Dunaj. The company offers rentals of kayaks, rafts, and canoes, organizes water sports events, and provides accredited courses through its water sports school. The business also engages in boat manufacturing and sales, targeting outdoor enthusiasts and tourists interested in water activities. The website reflects a small but established regional player with a clear focus on water recreation and tourism. Technically, the website employs a moderately modern tech stack including jQuery, Nette Framework, and various UI libraries. It integrates multiple third-party analytics and advertising tools such as Google Analytics, Google Tag Manager, Google Ads, and Seznam Retargeting. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. Cookie consent is implemented, indicating some privacy compliance. No incident response or vulnerability disclosure information is publicly available. The absence of WHOIS data limits domain trust verification, though the website content and business information appear consistent and legitimate. Overall, the security posture is average with room for improvement in headers, policies, and transparency. The overall risk assessment is moderate. The business appears credible and operational, but the lack of WHOIS transparency and limited security policies suggest caution. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, auditing third-party scripts, and improving accessibility and privacy compliance to strengthen trust and security culture.

Půjčovna lodí Samba s.r.o. operates a specialized water sports equipment rental service focusing on canoe, raft, and kayak rentals across several Czech rivers including Sázava, Otava, Lužnice, Morava, and Ohře. The company targets water sports enthusiasts, families, schools, and corporate groups, offering additional services such as baggage transport and theft insurance. The website is well-structured, professionally designed, and provides clear contact information and service descriptions, positioning the company as a trusted regional provider in the water sports rental market. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and retargeting scripts from Seznam, with responsive design and embedded widgets for real-time river conditions. While the site uses HTTPS and cookie consent mechanisms, it lacks explicit security headers and a formal security policy page, which could be improved to enhance security posture. Security-wise, the site shows good practices such as encrypted connections and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, though the website content and contact details appear authentic and professional. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and transparency around vulnerability disclosure would further strengthen trust and security posture.

C

Coweo Technologies s.r.o.

tvpisek.cz

72

Coweo Technologies s.r.o. operates JenPráce.cz, the second largest job and gig advertisement portal in the Czech Republic, serving job seekers and employers with a comprehensive platform for job listings, HR advertising services, and career advice. The company has a solid market position with experience dating back to 2007 and maintains a professional online presence with consistent branding and quality content. The website is well-structured, mobile-optimized, and integrates modern tracking and analytics technologies such as Google Tag Manager, Facebook SDK, and Sentry for error monitoring. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms in place. Security posture is strong with HTTPS enforced and use of security best practices, although explicit security headers could be improved. The absence of WHOIS data reduces domain transparency and trust slightly, but overall business credibility remains high based on available information and certifications like ISO 27001.

E

Elifin s.r.o.

elifin.cz

39

Elifin s.r.o. is a Czech Republic based small professional services firm specializing in comprehensive consulting services including legal, tax, accounting, and financial controlling. Established in 2006, the company offers a broad range of services such as mergers and acquisitions advisory, crisis management, corporate consulting, asset management, and company liquidation. The firm maintains partnerships with recognized organizations like KODAP and the international ETL group, enhancing its market credibility and reach. Technically, the website employs a custom or legacy CMS with JavaScript libraries such as jQuery and carouFredSel for UI components. Google Tag Manager and Google Analytics are used for tracking, although no explicit cookie consent mechanism or privacy policies are present. The site is moderately optimized for mobile and SEO, with a consistent and professional design. From a security perspective, the site uses HTTPS URLs but lacks visible security headers and published security policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. The contact information is clearly presented, supporting business credibility. Overall, the website is safe, professional, and well-aligned with its business purpose. However, it would benefit from enhanced privacy compliance, security best practices, and transparency regarding data protection and incident handling.

N

Netpromotion

muzeum-st.cz

45

Muzeum středního Pootaví Strakonice is a regional cultural institution operating under the South Bohemian Region of the Czech Republic. It manages historical exhibitions primarily located in the Strakonice castle complex and the unique water mill in Hoslovice. The museum offers a variety of cultural and educational services including exhibitions, lectures, virtual tours, and special events. The institution benefits from EU funding and government support, positioning it as a key cultural heritage site in the region. The website reflects a professional and consistent brand image with clear navigation and relevant content for tourists, educators, and the general public. Technically, the website is built on WordPress using Elementor and several Jet plugins, integrating modern web technologies such as Google Tag Manager, Facebook SDK, and YouTube API. The site is mobile optimized and includes SEO best practices. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid with good privacy compliance, including a comprehensive GDPR policy and cookie consent. However, the site lacks explicit security policies and incident response contacts. Analytics and tracking are moderate, using Google Analytics and Facebook Pixel, with appropriate privacy notices. Overall, the website is trustworthy, well-maintained, and suitable for its audience. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.

T

TECHNICOAT s.r.o.

technicoat.cz

53

TECHNICOAT s.r.o. is a well-established, family-owned company specializing in high-performance functional coatings based on fluoropolymer technology. Founded in 1999 and headquartered in the Czech Republic, it serves a broad range of industrial sectors including automotive, energy, food, semiconductor, chemical, and general engineering. The company is part of the ADELHELM group and operates subsidiaries such as TECHNICOAT Bakeware s.r.o. Their business model focuses on B2B service provision with a strong emphasis on quality, innovation, and customer responsiveness. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js, with integrated Google Analytics and Consent Mode for privacy compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and published security policies could enhance protection. The absence of WHOIS data due to privacy protection is noted but does not detract significantly from the legitimacy of the business, which is supported by certifications such as ISO 9001:2015 and multiple trust indicators including customer testimonials and industry awards. Overall, the website and business present a credible, professional, and secure digital presence suitable for their industrial clientele. Recommendations include enhancing security headers, publishing a security policy and incident response information, and considering a vulnerability disclosure program to further strengthen trust and compliance.

S

South Bohemia Convention Bureau

sbcb.cz

44

South Bohemia Convention Bureau is a regional organization dedicated to supporting event organizers in the South Bohemia region of the Czech Republic. It provides independent assistance in planning and executing conferences, congresses, and incentive events. The website reflects a professional and regionally focused business model, targeting event planners and corporate clients seeking venues and programs in South Bohemia. The organization positions itself as a key regional player with partnerships and a clear service offering.

T

TETRONIK - výrobní družstvo Terezín, družstvo

qtcloud.cz

48

QTCloud is a Czech Republic-based technology company specializing in cloud-based queue management system enhancements. Founded in 2017, it offers modular applications including reservation systems, statistics, central kiosk management, mobile apps, and monitoring tools. The company targets both private sector businesses and public sector offices, with notable clients such as T-Mobile and government agencies. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site uses modern frameworks like Bootstrap and jQuery, hosted likely on Wedos infrastructure, and integrates Google services for analytics and spam protection. Security posture is solid with HTTPS and reCAPTCHA, but lacks published privacy and cookie policies, which impacts compliance. Overall, the site is accessible, well-structured, and trustworthy, though improvements in privacy transparency and security headers are recommended.

G

GRASPO CZ, a.s.

graspo.store

60

GRASPO CZ, a.s. operates the website www.graspo.store as a Czech manufacturer and retailer specializing in diaries, planners, notebooks, and related stationery products. The company emphasizes environmental responsibility, demonstrated by ISO 140001:2004 certification and the use of FSC® certified paper. The website targets general consumers interested in quality stationery and offers both retail and custom manufacturing services. Technically, the site uses modern web technologies including UIkit, jQuery, Google Tag Manager, and analytics tools like Google Analytics and Smartlook, providing a moderate to good performance and mobile optimization. Security posture is strong with HTTPS enforcement, secure forms, and standard security headers, though a dedicated security policy and incident response information are absent. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website presents a professional and trustworthy e-commerce platform with good business credibility and technical maturity.

G

G-Notes / Tiskárna GRASPO

gnotes.cz

55

G-Notes, operated by Tiskárna GRASPO, is a Czech-based manufacturer and retailer specializing in diaries, notebooks, and calendars with a strong emphasis on eco-friendly materials and custom printing services. The company targets both corporate clients and individual consumers, offering bespoke branding options and a wide product range accessible via their e-commerce platform. Their market position is that of a niche, quality-focused stationery provider with a commitment to sustainability. Technically, the website is built on the Shoptet e-commerce platform, utilizing common web technologies such as jQuery, Bootstrap, and Google Analytics, ensuring a modern and responsive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site presents a professional and trustworthy front, though the lack of WHOIS transparency slightly reduces domain trust. Strategic recommendations include enhancing security headers, updating legacy libraries, and publishing explicit security policies to further strengthen trust and compliance.

C

CleverCherry

clevercherry.com

52

CleverCherry is a well-established creative and digital agency based in Birmingham, United Kingdom, with a domain age dating back to 2000. The company positions itself as a leading agency in the Midlands, offering a range of marketing, digital, and creative services targeted primarily at businesses seeking professional digital solutions. The website reflects a professional and consistent brand image, supported by structured contact information and active social media presence. Technically, the website employs modern web technologies including Google reCAPTCHA for bot protection, Google Tag Manager for analytics, and Font Awesome for iconography, hosted on DigitalOcean infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies, which poses a compliance risk. Overall, the website is trustworthy and credible but would benefit from enhanced privacy and security policies to align with best practices.

K

Kloeber UK Ltd

kloeber.co.uk

51

Kloeber UK Ltd is a well-established bespoke glazing solutions provider founded in 2006, specializing in made to measure doors and windows including bifold, sliding, French, and front doors. The company targets self-builders, home improvers, architects, and developers across the UK, offering a comprehensive product range and services such as technical surveys, showroom visits, and participation in exhibitions. Their market position is strengthened by multiple industry certifications and awards, reflecting a strong reputation in the real estate sector. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Facebook Pixel, and VWO for analytics and marketing optimization. The site is hosted with Cloudflare, uses HTTPS with DNSSEC enabled, and implements cookie consent mechanisms, demonstrating a mature digital infrastructure. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS, uses DNSSEC, and manages cookie consent properly. However, explicit security headers like Content-Security-Policy are not detected, and no public security policy or incident response contacts are provided. No vulnerabilities or exposed sensitive data were found, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with GDPR. The business credibility is high, supported by clear contact information, certifications, and consistent branding. Recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen the security and compliance posture.

Klöberfinder.com is a specialized configurator platform operated by BMI Deutschland GmbH, focusing on roofing accessories such as ventilation, roof penetrations, and drainage solutions for pitched and flat roofs. The site targets roofing professionals and end customers seeking tailored product solutions. The business operates in the manufacturing sector with a medium-sized profile and a relatively recent domain registration dating back to 2021. Technically, the website employs modern JavaScript technologies including jQuery and module scripts, with Google Tag Manager for analytics. The site is mobile optimized and presents a professional user experience with clear navigation and consistent branding. Security posture is adequate with HTTPS enforced and nonce usage in scripts, but lacks DNSSEC and visible security headers, which are recommended for improvement. Privacy compliance is basic, with a cookie consent mechanism present but no privacy policy or terms of service found. No contact emails or phone numbers are explicitly provided on the analyzed page, which could be improved for better user trust and compliance. Overall, the website is safe, professional, and trustworthy with moderate technical and security maturity.

G

Grant Cardone

grantcardone.com

60

Grant Cardone is a well-established business and real estate coaching brand, founded in 1998, with a strong market position as a leading sales trainer and real estate investor managing billions in assets. The website reflects a mature digital presence with extensive use of modern technologies, marketing tools, and analytics platforms, supporting a robust online education and coaching business model. The technical infrastructure is solid, leveraging WordPress with performance optimizations and integrations with major marketing and analytics services. Security posture is good with HTTPS and domain protections, though improvements like DNSSEC and security headers could enhance it further. Privacy compliance is a notable gap, lacking visible privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional, trustworthy, and well-optimized for its audience.

F

FAPI

fapi.cz

63

FAPI is a Czech-based SaaS platform specializing in automated online sales and payment processing for digital products, courses, memberships, and physical goods. The company targets small businesses and freelancers seeking an easy-to-use solution to manage orders, invoicing, payments, and product delivery without programming knowledge. Established in 2012, FAPI has positioned itself as a reliable and professional player in the Czech e-commerce automation market, supported by a well-designed website and positive customer testimonials. Technically, the website is built on WordPress and leverages a modern tech stack including jQuery, Google Tag Manager, multiple analytics and tracking pixels (Google Analytics, Facebook Pixel, TikTok Pixel, Hotjar, Microsoft Clarity), and Vimeo for video content. Hosting is provided via AWS infrastructure, ensuring scalability and reliability. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no suspicious registration patterns. Overall, FAPI demonstrates a mature digital presence with strong business credibility and privacy compliance. The main areas for improvement include enhancing security posture by adding security headers, publishing a security policy, and providing clear incident response contacts to strengthen trust and compliance further.

D

Dave Design

davedesign.cz

43

Dave Design is a Czech-based graphic and web design studio established in 1998, specializing in custom web design, graphic design, corporate identity, SEO, e-shops, and related digital services. The company serves a diverse client base ranging from small businesses to large corporations such as Vítkovice Steel. Their website reflects a professional and consistent brand image with a portfolio showcasing various projects and client references. Technically, the website uses traditional web technologies including HTML, CSS, JavaScript, and jQuery, supplemented by Google Analytics and Tag Manager for tracking. While the site is functional and well-structured, it lacks modern security headers and privacy compliance features such as a privacy policy or cookie consent mechanism. Security posture is moderate with room for improvement, especially in enforcing HTTPS and updating outdated libraries. Overall, the website is trustworthy and credible but would benefit from enhanced security and privacy practices.

O

Obchodní a technologický holding a.s.

otholding.cz

40

Obchodní a technologický holding a.s. is a Czech investment holding company focused on technology and startups. The company provides a portfolio of services including lead management, mobile app development, web notifications, LED panel rentals, and digitalization solutions for municipalities. Their market position is that of an innovator and quality leader in their sectors, targeting businesses and startups primarily in the Czech Republic and Slovakia. The website content is professional and well-structured, supporting their business model and market positioning. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and popular libraries such as jQuery, Swiper.js, and BaguetteBox.js. Google Analytics and Google Tag Manager are used for tracking, but no explicit privacy or cookie policies are present, indicating a gap in privacy compliance. The site shows moderate performance and basic mobile optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, no security headers were detected, and there is no visible incident response or security policy information. The lack of WHOIS data reduces trust and transparency, which is a concern for legitimacy. Overall, the security posture is moderate but could be improved with better privacy compliance and security best practices. The overall risk assessment suggests a generally trustworthy and professional business website with some compliance and transparency gaps. Strategic recommendations include implementing privacy and cookie policies, adding security headers, improving mobile and accessibility features, and enhancing contact and incident response information to strengthen trust and security posture.

A

APPKEE s.r.o.

appkee.sk

55

APPKEE s.r.o. is a technology company specializing in custom mobile application development for iOS and Android platforms, serving a diverse clientele including businesses, municipalities, and retail sectors primarily in Central Europe. The company offers a comprehensive suite of services including app creation, management via their APP manager platform, push notifications, coupon distribution, and advanced features like iBeacon and integrated analytics. Their market position is solidified by over 750 deployed applications and a presence in multiple countries with regional offices. Technically, the website employs modern web technologies and analytics tools, with good mobile optimization and SEO practices. Security posture is generally strong with HTTPS and secure forms, though it lacks some advanced security headers and formal security policies. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, APPKEE demonstrates a professional and trustworthy digital presence aligned with its business objectives.

A

APPKEE s.r.o.

appkee.pl

54

APPKEE s.r.o. is a technology company specializing in custom mobile application development for iOS and Android platforms, targeting businesses and municipalities primarily in Central Europe. The company offers a comprehensive app management platform and premium features such as push notifications, coupons, analytics, and iBeacon technology. Their market position is supported by a portfolio of over 750 apps and multiple regional offices. Technically, the website employs modern analytics and tracking tools, is mobile-optimized, and uses HTTPS with secure forms compliant with GDPR. However, the absence of WHOIS data and explicit security policies slightly impacts trust. Overall, APPKEE demonstrates a solid digital presence with good business credibility and technical maturity.

A

APPKEE s.r.o.

appkee.eu

60

APPKEE s.r.o. is a Czech-based technology company specializing in the development of custom mobile applications for iOS and Android platforms. The company targets a diverse audience including municipalities, businesses, restaurants, hotels, and e-commerce stores, offering a comprehensive app management platform called APP manager. With over 750 mobile applications deployed, APPKEE holds a solid regional market position supported by clear pricing models and premium features such as push notifications, app vouchers, and payment gateway integration. The company is part of the OT Holding group, enhancing its business credibility. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and YouTube APIs, ensuring good SEO and mobile optimization. The site is well-structured with multi-language support and a responsive design. Security posture is strong with HTTPS enforced and secure form handling, though some security headers are missing. Privacy compliance is evident with a comprehensive privacy policy, cookie consent mechanisms, and GDPR notices on data collection forms. Security-wise, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response information suggests room for improvement in transparency and preparedness. The WHOIS data is privacy protected, which is common for small tech firms, but limits domain ownership visibility. Overall, the website and business present a trustworthy and professional front with minor technical and security enhancements recommended. Strategically, APPKEE should focus on implementing security headers, publishing incident response details, and enhancing accessibility to further strengthen trust and compliance. Continued monitoring of third-party scripts and maintaining GDPR compliance will support sustainable growth and risk mitigation.

E

EnvoThemes

envothemes.com

56

EnvoThemes is a specialized provider of free and premium WordPress themes, focusing primarily on WooCommerce and multipurpose themes for businesses and eCommerce stores. Established in 2017, the company offers a variety of themes compatible with popular page builders such as Elementor, Brizy, Visual Composer, and KingComposer. Their market position is that of a niche player catering to WordPress users seeking customizable and fast-loading themes. The website demonstrates a good level of technical maturity, leveraging WordPress 6.6.2, WooCommerce 7.8.0, and modern JavaScript libraries, along with integration of Google Analytics and Tag Manager for marketing insights. Hosting appears to be Czech-based, consistent with the registrant information.

C

Corel Corporation

wordperfect.com

67

The website www.wordperfect.com serves as the official portal for the WordPerfect family of productivity software products, including office suites and PDF tools. It targets individuals, businesses, government, and educational institutions with a variety of licensing options. The site is professionally designed, with clear navigation and a consistent brand presence aligned with Corel Corporation and its parent company Alludo. The business model focuses on software sales and licensing, maintaining a niche but established market position in office productivity software. Technically, the site employs modern web technologies such as jQuery, Bootstrap, and Google Tag Manager, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS enforcement and trusted certification badges, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure mechanisms, and enhancing accessibility.