Security Directory

B

Bergam

bergam.cz

59

Bergam.cz is a Czech Republic-based e-commerce retailer specializing in merino clothing and accessories for children and adults. The company positions itself as an exclusive distributor for several Norwegian and European brands, serving the Czech and Slovak markets. Their product range includes merino apparel, footwear, and related accessories, targeting customers interested in high-quality natural fiber clothing. The website is professionally designed, with clear navigation and multi-language support, enhancing user experience for their target audience. Technically, the site is built on the Shoptet e-commerce platform, utilizing modern analytics and marketing tools such as Google Analytics, Facebook SDK, and Smartlook, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected. The absence of WHOIS data is a notable concern for domain transparency but does not detract significantly from the overall legitimacy of the business. Strategic recommendations include enhancing security headers, publishing a security policy, and improving domain registration transparency.

B

BlueWinston.com automation tool

bluewinston.pl

60

BlueWinston.com is a technology-driven SaaS provider specializing in automated product advertising campaigns for Google Ads and Microsoft Ads. The company targets e-commerce businesses and PPC specialists, offering innovative AI-supported campaign types including Product Search and Performance Max. The website demonstrates a strong market position with international reach across 96 countries and a medium-sized business profile founded around 2020. Technically, the site is built on WordPress with the Avada theme and integrates multiple modern marketing and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or WAF interference.

B

BlueWinston

bluewinston.sk

65

BlueWinston is a Slovakia-based technology company specializing in automated PPC product advertising campaigns, primarily for Google Ads and Microsoft Ads platforms. Their SaaS solution enables e-commerce businesses to quickly create and optimize product search ads and shopping campaigns using XML feeds and AI-powered tools. The company positions itself as a niche player offering advanced automation and optimization features, including AI bidding and keyword generation, targeting online retailers and advertisers seeking efficiency and performance improvements. Technically, the website is built on WordPress with a modern tech stack including Avada theme, various JavaScript libraries, and integrations with major analytics and marketing platforms. The site demonstrates good SEO and mobile optimization, though some accessibility features could be enhanced. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but explicit security and privacy policies are lacking. Overall, the business appears legitimate and professional with consistent WHOIS data and a clear market focus. Strategic recommendations include adding comprehensive privacy and terms of service pages, implementing a security.txt file, and enhancing incident response transparency to improve trust and compliance.

M

MAPSFY s. r. o.

mapsfy.com

59

MAPSFY s. r. o. is a Slovak company specializing in advanced geospatial and satellite data services tailored for municipalities, agronomists, farmers, project planners, and golf course managers. The company offers a comprehensive map portal with over 200 layers, enabling efficient asset management, flood risk management, construction analysis, and precision agriculture. Their partnership with ZMOS underscores their regional market presence and commitment to integrating geospatial services into everyday decision-making for local governments. Technically, the website is built on the Tilda CMS platform, leveraging modern JavaScript libraries, Google Analytics, and Weglot for multilingual support, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and incident response information, which could be improved. The absence of WHOIS registration data is a concern for domain legitimacy verification, though the website content and business information appear professional and trustworthy. Overall, MAPSFY demonstrates a solid business and technical foundation with room for enhanced security transparency.

Ú

Ústredný automotoklub Slovenská republika (ÚAMK)

uamksr.sk

58

Ústredný automotoklub Slovenská republika (ÚAMK) is a well-established Slovak motorist club focused on road safety, education, and member benefits. The organization operates as a non-profit with a strong emphasis on traffic safety education for children, youth, and seniors, and provides insurance and discounts to its members. The website reflects a mature digital presence with modern WordPress infrastructure, SEO optimization, and integration of analytics and advertising tools. Security posture is good with HTTPS and basic security practices, though there is room for improvement in security headers and explicit security policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service. Overall, the site is professional, trustworthy, and aligned with the organization's public identity.

E

EneDom a.s.

enedom.sk

46

EneDom a.s. is a Slovak-based company specializing in photovoltaic solar energy systems, offering end-to-end solutions including design, financing, installation, and after-sales service. The company targets residential, commercial, and municipal customers, emphasizing fast and quality turnkey projects with subsidy support. The website reflects a medium-sized enterprise with a professional online presence, leveraging modern web technologies such as WordPress and Elementor, and integrating marketing and analytics tools like Google Analytics, Facebook Pixel, and Microsoft Clarity. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is well-structured, user-friendly, and trustworthy, supporting the company's market position as a reliable provider of solar energy solutions in Slovakia.

S

Zálohujte. Oplatí sa to vám aj prírode - Slovenskozalohuje

slovenskozalohuje.sk

52

The website slovenskozalohuje.sk is a Slovak initiative focused on promoting a deposit return system for beverage containers to reduce litter and promote recycling. It targets the general Slovak public, producers, retailers, and educational sectors. The site provides information on collection points, alternative collection methods, and educational resources. Technically, it is built on WordPress using modern frameworks like Bootstrap and Swiper, with SEO optimization via Yoast and cookie compliance through Cookiebot. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR cookie consent requirements, but lacks explicit privacy and terms of service pages and direct contact information.

T

T-MAPY spol. s r.o.

tmapy.sk

56

T-MAPY spol. s r.o. is a Czech technology company specializing in geoinformation systems and IT solutions primarily serving public administration, emergency services, and commercial sectors. With over two decades of market presence, the company offers a broad portfolio including GIS applications, digital technical mapping, facility and asset management software, crime analytics, and smart city solutions. Their client base includes municipalities, government agencies, and commercial enterprises, positioning them as a trusted provider in the regional geospatial technology market. Technically, the website is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. The site is well-structured, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security-wise, HTTPS is enforced and reCAPTCHA is used for forms, but the absence of security headers and published security policies indicates room for improvement. The lack of visible privacy and cookie policies and missing WHOIS transparency slightly reduce trust. Overall, the website and business appear legitimate and professional, but enhancing transparency and security documentation would strengthen their compliance and trust posture.

K

KOMUNÁLNA poisťovňa, a.s. Vienna Insurance Group

kpas.sk

56

KOMUNÁLNA poisťovňa, a.s. Vienna Insurance Group is a Slovak insurance company primarily serving municipalities, businesses, and individual clients with a broad portfolio including life, accident, property, and liability insurance. As part of the Vienna Insurance Group, it holds a solid market position in the regional finance sector. The website reflects a professional digital presence with clear navigation, comprehensive product information, and integration of modern tracking and consent mechanisms. Technically, the site uses a mix of jQuery, Bootstrap, and custom HSCore framework components, hosted on a CMS platform by Lomtec.com, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking explicit security headers and incident response contacts. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

P

Prima banka Slovensko, a.s.

primabanka.sk

67

Prima banka Slovensko, a.s. is a regional banking institution in Slovakia with a strong presence across all districts. The website clearly communicates its core banking services including personal accounts, loans, mortgages, savings, and investment products. The bank targets a broad audience including individuals, businesses, and municipalities. The digital infrastructure employs modern JavaScript libraries and integrates Google marketing and analytics tools, reflecting a moderate level of digital maturity. The website is accessible, professionally designed, and provides clear navigation and cookie consent mechanisms, supporting GDPR compliance. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a trustworthy and professional online presence aligned with the bank's business identity.

S

Sdružení tajemníků městských a obecních úřadů ČR, z. s.

tajemnici.cz

57

Sdružení tajemníků městských a obecních úřadů ČR, z. s. is a professional association representing over 500 secretaries of municipal and city offices in the Czech Republic. The organization focuses on professional development, knowledge exchange, and supporting effective public administration. It offers accredited educational seminars, conferences, and training, and actively participates in advisory bodies of various Czech government ministries. The website is well-structured, professionally designed, and provides comprehensive information about membership, events, and organizational bodies. Technically, the website uses a modern CMS (Vismo6), integrates Google services such as Analytics, Tag Manager, reCAPTCHA v3, and Google Translate. It is served over HTTPS with good security practices, although some security headers are missing. The site is mobile-optimized and accessible, with clear navigation and relevant metadata for SEO. From a security perspective, the site demonstrates a solid baseline with HTTPS and bot protection but lacks explicit security policies and incident response contacts. The absence of WHOIS data reduces trustworthiness assessment, but the professional presentation and external partnerships support legitimacy. Privacy compliance is addressed with cookie consent and a privacy policy. Overall, the site is a credible, professional platform for a government-related non-profit association, with recommendations to enhance security headers and publish security policies to improve trust and compliance.

G

G SERVIS

gservis.cz

71

G SERVIS is a Czech Republic based company specializing in architectural project design for family houses and civil buildings. The company positions itself as a market leader in the Czech family house project design sector, offering a wide range of services including project design, professional services for developers, project modifications, consultations, and an online house configurator. The website is professionally designed, mobile optimized, and provides clear navigation and relevant content targeting individuals and developers interested in residential construction projects. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, SVG, and integrates Google Tag Manager, Smartsupp Chat, and CookieHub for analytics, chat support, and cookie consent management respectively. Security posture is good with HTTPS enabled and cookie consent implemented, but lacks visible security headers and explicit security policies. WHOIS data is unavailable, indicating privacy protection which slightly reduces transparency but is common for business domains. Overall, the website is trustworthy, professional, and well-positioned in its market niche.

321 CREATIVE CREW s.r.o. operates the website www.321web.cz, offering a Czech-language content management system (CMS) designed for easy web page creation and administration without installation. The company targets small to medium-sized businesses and individual users in the Czech Republic, providing a SaaS model with features such as responsive design, SEO tools, multimedia integration, and technical support. The website is professionally designed with clear navigation and mobile optimization, reflecting a consistent brand image and trust signals including customer testimonials and demo offers. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Google Analytics, with SSL encryption ensuring secure communications. However, some security best practices like security headers and cookie consent mechanisms are not visibly implemented. WHOIS data is unavailable, which slightly impacts trustworthiness but does not detract from the overall professional presentation. The site is free from adult or questionable content and complies with GDPR through a dedicated privacy policy page.

A

Arkema

arkema.com

70

Arkema is a global leader in specialty materials, serving major societal and ecological challenges with a broad portfolio of chemical and material products. The company targets industrial clients, investors, job seekers, and media professionals, positioning itself as a key player in manufacturing and specialty chemicals. The website reflects a mature digital presence with comprehensive investor relations, career opportunities, and market sector information. Technically, the site uses modern analytics and consent management technologies, including Google Tag Manager, Piwik PRO, and Didomi, integrated within a Jahia CMS framework. The site is mobile optimized, accessible, and SEO friendly, providing a good user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent compliance, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data is a notable anomaly, reducing domain trustworthiness despite the professional corporate presentation. Overall, the site is reliable and professional, with recommendations to enhance transparency around security and domain registration.

S

Sciendo

sciendo.com

69

Sciendo is a reputable academic publishing solutions provider, part of the De Gruyter Brill Group, offering a broad range of services including publishing, distribution, and library support for scholarly journals, books, and conference proceedings. The company serves a global audience with a strong presence in academic institutions and professional organizations. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Sciendo presents a professional, trustworthy, and well-maintained digital presence.

Naše zdravotnictví is an online magazine focused on delivering news, stories, and expert opinions related to the Czech healthcare sector. The website targets healthcare professionals such as doctors and nurses, as well as the general public interested in healthcare topics. It operates as a niche media outlet providing specialized content in the healthcare domain within the Czech Republic. The business was established around 2017, consistent with the domain registration date, and maintains a focused editorial approach without apparent parent or subsidiary companies.

EscapeDiem is a specialized live escape room provider based in Hamburg, Germany, offering immersive and professionally designed escape room experiences. The company holds a strong market position locally, supported by multiple awards and a top Tripadvisor ranking. Their target audience includes friends, families, and teams seeking entertainment and team-building activities. Technically, the website is built on a modern stack using UIkit and ProcessWire CMS, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is basic with visible cookie consent and privacy policy, but no explicit data protection officer or incident response contacts. Overall, the website is professional, trustworthy, and content-rich, supporting the business's credibility and customer engagement.

R

Ravensberg Basecamp GmbH

ravensbergbasecamp.de

53

Ravensberg Basecamp GmbH operates a multi-faceted business in Bad Sachsa, Germany, combining an indoor climbing arena (Clip 'n Climb Harz), a burger restaurant (Backwood Burger), a coffee shop (Backwood Coffee), and an outdoorshop retail store. The company targets families, outdoor enthusiasts, and local visitors, offering entertainment, food, and retail products. The website is well-structured, professionally designed, and provides clear information about services, pricing, and contact details. Social media integration and SEO optimization are evident, supporting digital presence and customer engagement. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile responsiveness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, suitable for its business scope.

T

Teambreakout Hamburg

teambreakout.de

49

Teambreakout Hamburg operates as a well-established live escape game provider offering immersive indoor and outdoor escape experiences, as well as interactive crime games for home use. The company targets a broad audience including families, friends, and corporate teams, positioning itself as a leading entertainment venue in Hamburg with multiple positive customer reviews and awards. The business model centers on event-based entertainment with online ticket sales and team event hosting. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Modernizr, and integrates Google Analytics and Facebook Pixel for marketing and analytics. Hosting is provided by rzone.de, with proper HTTPS encryption and moderate performance. The site is mobile-optimized and SEO-friendly, with clear navigation and professional design. From a security perspective, the site enforces HTTPS, uses secure forms with validation, and maintains good privacy compliance including GDPR-aligned privacy and cookie policies. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and continuous monitoring of third-party scripts.

T

THE ROOM

the-room-berlin.com

58

THE ROOM is a small hospitality business based in Germany specializing in immersive escape room experiences in Berlin. The company has established a strong market position with multiple industry awards and a professional online presence. Their website is built on WordPress with Elementor and includes modern tracking and consent management technologies. The site is well-designed, mobile-optimized, and provides clear information about their escape room offerings, targeting groups of 2-6 players interested in live entertainment. Security posture is good with HTTPS and cookie consent, though some security headers and policies could be improved. No privacy policy or terms of service were found, which is a compliance gap. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

C

Crime Runners | Escape the Room Wien

crimerunners.at

51

Crime Runners is a well-established escape room entertainment business based in Vienna, Austria, operating since at least 2015. They offer immersive live-action escape room experiences, including premium and outdoor variants, targeting escape room enthusiasts, tourists, and corporate team-building clients. The website is professionally designed using WordPress with a modern tech stack and includes rich structured data for SEO. The business holds a strong market position with notable awards and media coverage. Technically, the site uses HTTPS, multiple tracking pixels with a cookie consent mechanism, and standard WordPress plugins. However, explicit privacy and security policies are not found, which could be improved for compliance and trust. Overall, the security posture is good but could benefit from enhanced security headers and incident response disclosures.

E

Escape Room Theater - OPOLUM

twistedrooms.com

50

OPOLUM is a specialized entertainment business operating in Hamburg, Germany, offering modern escape room experiences with live actors. The company targets groups ranging from small parties to large groups (2-120 persons) and provides both indoor and outdoor escape games. It holds a strong market position supported by over 1,700 positive Google reviews and an award (1. Platz ADAC Tourismuspreis), indicating high customer satisfaction and recognition. The business model focuses on immersive, interactive entertainment experiences, appealing to tourists and locals alike. Technically, the website is built on WordPress using Elementor, with integrations including Google Tag Manager, Sendinblue, and Borlabs Cookie for marketing and consent management. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Hosting and domain registration are stable and consistent with the business profile, registered through IONOS SE. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks advanced DNS security (DNSSEC) and security policy disclosures. No critical vulnerabilities or exposed sensitive data were detected. Tracking and marketing tools are extensively used, with a moderate to extensive user tracking level. Privacy compliance is basic, with no explicit privacy policy found in the provided content. Overall, OPOLUM presents a professional, trustworthy online presence with strong business credibility and good technical implementation. Strategic improvements include publishing a privacy policy, enhancing DNS security, and adding security and incident response information to strengthen compliance and trust.

S

SATJAM, s.r.o.

satjam.sk

57

SATJAM, s.r.o. is a medium-sized manufacturing company specializing in metal roofing products and accessories, serving primarily the Slovak and Czech markets. The company emphasizes quality Czech manufacturing standards and offers a broad product portfolio including steel and aluminum roof coverings, trapezoidal sheets, and roofing accessories. Their website reflects a professional digital presence with clear navigation, mobile optimization, and integration of marketing and analytics tools. However, the absence of a dedicated privacy policy and terms of service pages indicates room for improvement in compliance and transparency. Security posture is solid with HTTPS and cookie consent mechanisms, but could be enhanced with additional security headers and published security policies. Overall, the website supports the company's market position as a trusted regional player with recognized certifications and active customer engagement.

N

Nitrianska organizácia cestovného ruchu

visitnitra.eu

44

The website visitnitra.eu serves as the official regional tourism portal for the Ponitrie region in Slovakia, managed by the Nitrianska organizácia cestovného ruchu. It provides comprehensive information about local destinations, cultural experiences, events, and regional products, targeting tourists and visitors interested in exploring the area. The site is multilingual and includes detailed navigation for planning visits, accommodations, and activities, positioning itself as a key regional tourism authority. Technically, the website is built on WordPress with WooCommerce integration for product cataloging. It employs modern web technologies such as jQuery, Google Tag Manager, and Fancybox for enhanced user experience. The site is hosted by Webglobe, a.s., and demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and uses asynchronous loading for analytics and tracking scripts. However, it lacks visible security headers and does not provide explicit security policies or vulnerability disclosure information. Privacy compliance is partial, with a cookie consent mechanism present but no privacy policy or terms of service pages found. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and well-suited for its purpose but would benefit from enhanced security practices and comprehensive privacy documentation to improve compliance and user trust.

B

Bluewinston.com

bluewinston.com

73

BlueWinston.com is a specialized technology company offering automated product advertising tools for Google and Microsoft Ads platforms. Their services focus on automating XML feed-driven product search and shopping ads, including Performance Max campaigns, dynamic search ads, and AI-powered optimization tools. The company targets e-commerce businesses and advertisers seeking to improve ad performance and efficiency. The website demonstrates a professional digital presence with integrations of multiple marketing and analytics tools, including Google Tag Manager, Hotjar, and Facebook Pixel, indicating a mature digital marketing infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though explicit security policies and incident response information are absent. The lack of WHOIS registration data raises some concerns about domain legitimacy, but the active business presence and social media links support credibility. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in privacy compliance and transparency.

I

INPORTANTE s.r.o.

orac.sk

51

INPORTANTE s.r.o., operating under the brand Artica Décor, runs the e-commerce website orac.sk, specializing in decorative home products such as moldings, 3D panels, and related accessories. The company targets general consumers in Slovakia seeking home improvement and decorative solutions. The website presents a professional and consistent brand image with a clear business focus on retail decorative elements. The domain has been registered since 2015, supporting a stable business presence in the regional market. Technically, the website is built on WordPress using WooCommerce and Elementor, hosted on DigitalOcean. It employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with good SEO practices and a moderate performance profile. Security is well-managed with HTTPS and a cookie consent mechanism that complies with GDPR principles, although explicit privacy and terms of service pages are missing. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and incident response contact information indicates room for improvement. The cookie consent implementation is comprehensive, but privacy compliance could be enhanced by publishing detailed policies. Overall, the site demonstrates a moderate to good security and privacy maturity suitable for a small retail business. The overall risk is low, with recommendations focusing on enhancing privacy transparency, adding security policies, and improving security headers. These steps will strengthen trust and compliance, supporting business growth and customer confidence.

A

ARICOMA

autocont.cz

68

ARICOMA is a leading enterprise IT service provider based in the Czech Republic, offering a broad range of end-to-end IT solutions and digital transformation services primarily targeting commercial firms and the public sector across Europe. The company positions itself as the number one player in its market segment, supported by a large professional workforce and extensive certifications. Technically, the website is built on a modern stack including Kentico CMS, Bootstrap, jQuery, and integrates multiple analytics and marketing tools such as Microsoft Clarity, Google Tag Manager, and Facebook Pixel. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. Security-wise, the site enforces HTTPS, uses reCAPTCHA for forms, and implements cookie consent mechanisms, though it lacks some security headers and explicit incident response contacts. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy given the strong business presence and certifications. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving direct contact availability.

I

Immersive Technologies s.r.o.

imm-tech.eu

47

Immersive Technologies s.r.o. is a Czech Republic-based company specializing in Extended Reality (XR) solutions aimed at enhancing business efficiency and innovation. Their services include consulting, testing, and deploying XR technologies across various business sectors such as service and maintenance, training, marketing, production, and communication. The company targets businesses seeking to leverage XR for operational improvements and competitive advantage. The website presents a professional image with clear service offerings and customer testimonials, positioning the company as a specialized XR solutions provider. Technically, the website employs a combination of legacy and modern technologies including jQuery 1.11.1, GSAP, Google Tag Manager, and reCAPTCHA, managed via a CMS named HAPPY admin. The site is served over HTTPS with cookie consent mechanisms in place, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility and SEO could be improved. From a security perspective, the site benefits from HTTPS and bot protection but lacks visible security headers and published security policies. The use of an outdated jQuery version presents a potential risk. No privacy policy or terms of service are found, which impacts compliance posture. Contact information is clearly provided, and social media presence adds to credibility. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, updated security practices, and improved accessibility. Strategic recommendations include publishing privacy and security policies, updating libraries, and implementing security headers to strengthen the security posture and regulatory compliance.

G

GEOSAN DEVELOPMENT s.r.o.

geosan-development.cz

47

GEOSAN DEVELOPMENT s.r.o. is a Czech real estate developer specializing in residential projects primarily in Prague and its surroundings. Established in 1998, the company has completed over 2300 new apartments and currently offers several premium projects with approximately 1200 new units planned. The website reflects a professional business with clear project presentations, contact information, and a focus on customer engagement through a contact form and client center. Technically, the site uses modern JavaScript libraries, Google Analytics, Google Tag Manager, and Sentry for error monitoring, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and incident response policies suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness but does not detract from the professional appearance and business legitimacy of the site.

S

Sekyra Group, a. s.

sekyragroup.cz

71

Sekyra Group is a well-established Czech real estate developer with over 25 years of experience, focusing on residential and commercial projects primarily in Prague. The company has a strong market position with large urban development projects and serves a diverse clientele including international corporations and individual property buyers. The website reflects a professional digital presence with good content quality and clear business information. Technically, the site uses modern JavaScript libraries and analytics tools, with a cookie consent mechanism implemented, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent, but lacks visible security policies and advanced security headers. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security transparency are recommended.

O

Ordem dos Engenheiros

ordemdosengenheiros.pt

60

Ordem dos Engenheiros is the official professional association for engineers in Portugal, providing a comprehensive range of services including membership management, professional certifications, training, events, and advocacy. The website serves as a central hub for engineering professionals and students, offering access to news, events, job boards, and regulatory information. The organization holds a leading position in the Portuguese engineering sector with a strong focus on professional development and international cooperation. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and YouTube APIs, delivering a good user experience with responsive design and clear navigation. Security posture is solid with HTTPS enforced and basic security headers present, though there is room for improvement in adding advanced security headers and incident response disclosures. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR requirements fully. Overall, the site is professional, trustworthy, and well-maintained, serving its target audience effectively.

C

Contabo

contabo.com

65

Contabo GmbH is a Germany-based cloud and dedicated server hosting provider established in 2003, offering affordable VPS and bare metal servers across multiple global regions. The company positions itself as a cost-effective hosting solution with a strong uptime record and award-winning customer support. The website reflects a mature digital presence with good content quality and consistent branding. Technically, the site employs modern JavaScript libraries and tracking tools, including Google Tag Manager, LinkedIn Insight, and Bing Ads, supported by a cookie consent mechanism. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not evident in the provided data. The WHOIS data aligns well with the business claims, indicating legitimacy and stable domain ownership. However, the absence of explicit privacy and terms of service policies in the analyzed content suggests room for improvement in privacy compliance. Overall, the website is professional, trustworthy, and serves its target audience effectively.

W

WBENC

buywomenowned.com

57

BuyWomenOwned.com is a professionally maintained website operated by the Women’s Business Enterprise National Council (WBENC), a leading non-profit organization focused on certifying and advocating for women-owned businesses in the United States. The site serves as a platform to promote women entrepreneurs, provide certification services, and offer a curated directory of women-owned brands. It also features educational content such as podcasts and campaigns to raise awareness and support for women-owned businesses. The website targets consumers and businesses interested in supporting women entrepreneurs and fosters a community around this mission. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Slick Carousel for interactive features. It integrates Google Analytics and Google Tag Manager for user tracking and marketing analytics. The site is hosted by GoDaddy and uses HTTPS with a valid SSL certificate, though DNSSEC is not enabled. The website is mobile optimized with good SEO practices and basic accessibility features. From a security perspective, the site follows standard best practices including HTTPS enforcement and cookie consent mechanisms. However, it lacks advanced security headers and does not provide explicit incident response or vulnerability disclosure information. No security contact emails or security.txt files were found. The domain registration is consistent with the business claims, showing no suspicious patterns. Overall, the security posture is solid but could be improved with additional security headers and transparency around incident response. Overall, BuyWomenOwned.com is a trustworthy and credible platform with excellent content quality and a clear mission. It effectively supports women-owned businesses through certification, advocacy, and consumer engagement. Strategic improvements in security transparency and DNS security could further enhance its trustworthiness and resilience.

E

Hlavná stránka - Energoland.sk

energoland.sk

45

Energoland.sk is a Slovak website focused on providing educational and entertaining content related to energy. The site appears to target a general audience interested in energy topics, leveraging interactive and engaging content to fulfill its mission. The business model is primarily content-driven, likely supported by advertising and informational services. The domain has been active since 2014, indicating a stable presence in its niche. Technically, the website is built on WordPress, utilizing popular plugins such as Yoast SEO and Booked for functionality. It integrates standard analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, reflecting a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS, ensuring encrypted communications. However, it lacks several important security headers and does not provide visible security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected, but improvements in security best practices and privacy compliance are recommended. Overall, Energoland.sk presents a trustworthy and professional platform within its sector but would benefit from enhanced privacy disclosures, security policies, and contact transparency to improve user trust and compliance with regulations.

E

energetickesluzby

energetickesluzby.sk

61

Energetickesluzby.sk is a Slovak energy services provider specializing in flexibility of consumption, heating and cooling solutions, lighting, photovoltaics, electromobility, and other related energy services. The website targets a general Slovak audience interested in energy solutions. The business model appears to be service-oriented, focusing on energy commodities and related technologies. The company maintains a consistent brand presence with a professional website built on WordPress using Elementor and Jet plugins, indicating a moderate level of digital maturity. The technical infrastructure includes modern web technologies and third-party integrations such as Google Tag Manager and Cookiebot for analytics and consent management. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks published privacy policies, terms of service, and incident response information, which are areas for improvement. Overall, the website is functional, moderately optimized for mobile, and presents a trustworthy business image with no detected malicious or suspicious elements.

E

eBIZ a.s.

verejnesutaze.sk

57

Verejné súťaže is a Slovak public procurement portal operated by eBIZ a.s., providing users with access to current public tenders, detailed information, and personalized notifications. The platform targets businesses and individuals interested in public procurement opportunities in Slovakia, offering both free and premium services. The website is professionally designed with a modern tech stack including Vue.js and integrates analytics and support tools such as Google Tag Manager and LiveAgent. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and privacy policies. The domain registration data is consistent and indicates a legitimate and established business presence.

C

CNRS année de l'ingénierie

anneeingenierie.fr

47

The website anneeingenierie.fr represents a public scientific and educational initiative led by CNRS to promote engineering careers and scientific knowledge during the 2025-2026 engineering year. It targets schools, companies, and the general public in France, aiming to bridge education, research, and industry through events, resources, and outreach activities. The site is well-branded with official CNRS logos and partner institutions, reflecting a strong market position in the educational and governmental sector. Technically, the website is built on WordPress using Elementor and several modern plugins, ensuring good performance, mobile optimization, and SEO readiness. Hosting and domain registration are consistent with the project's timeline and geographic focus. Analytics via Google Tag Manager and Google Analytics are implemented with privacy considerations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No vulnerabilities or exposed sensitive data were detected. Privacy policies are comprehensive and GDPR compliant, but incident response and vulnerability disclosure information are absent. Overall, the website is a trustworthy, professional platform with excellent content quality and user experience, suitable for its educational mission. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining up-to-date software to sustain security and compliance.

V

Verein Deutscher Ingenieure e.V.

vdi.de

67

Verein Deutscher Ingenieure e.V. (VDI) is the largest technical-scientific association in Europe, serving approximately 130,000 engineers and technical professionals. The organization provides membership services, technical publications, career advice, and hosts events and conferences, targeting engineers primarily in Germany and Europe. The website is professionally designed, consistent in branding, and offers comprehensive content relevant to its audience. Technically, the site is built on TYPO3 CMS with modern libraries and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response information are not published. Overall, the site demonstrates a mature digital presence with good privacy and security practices, supporting the organization's credibility and trustworthiness.

E

eBIZ Corp s.r.o.

ebiz.sk

42

eBIZ Corp s.r.o. is a Slovak company specializing in electronic public procurement systems and services, with over two decades of experience. The company serves government organizations, universities, local authorities, healthcare providers, and other entities requiring public procurement solutions. Their offerings include electronic tools such as eZakazky, eAukcie, and eProcurement, alongside consulting and process optimization services. The website reflects a professional and consistent brand image, targeting organizations involved in public procurement in Slovakia. Technically, the website is built on WordPress with Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. It uses Google Analytics and Tag Manager for tracking, and the site is mobile-optimized with good SEO practices. However, some security best practices such as security headers and explicit security policies are missing. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. No privacy or cookie policies were found, which is a compliance gap. The WHOIS data is consistent with the website's claims, showing a legitimate and established business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

A

Automattic

crowdsignal.com

71

Crowdsignal is a mature and well-established SaaS platform specializing in creating surveys, polls, quizzes, and ratings, backed by Automattic, the company behind WordPress.com. The website clearly targets businesses and individuals seeking flexible and powerful survey tools, offering a comprehensive suite of features including customization, sharing, analytics, and data export. The brand benefits from strong market positioning due to its association with Automattic and WordPress.com, enhancing trust and reliability. Technically, the website is built on the WordPress.com platform using modern technologies such as Jetpack, Gutenberg, and FontAwesome. It employs Google Analytics and Google Tag Manager for data collection and marketing optimization. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS, uses domain status locks to prevent unauthorized transfers or deletions, and implements cookie consent mechanisms compliant with GDPR. However, it lacks DNSSEC and explicit security policies or vulnerability disclosure pages, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, Crowdsignal presents a low-risk profile with strong business credibility, good privacy compliance, and a professional online presence. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and providing a vulnerability disclosure channel to further enhance trust and security posture.

T

The European Wergeland Centre

theewc.org

63

The European Wergeland Centre (EWC) operates as a specialized educational resource center focused on promoting intercultural understanding, human rights, and democratic citizenship across Europe. Established in 2008 and based in Norway, the organization targets educators, policymakers, and stakeholders interested in democratic education. The website serves as a platform to disseminate educational resources and information aligned with its mission. Technically, the site is built on WordPress with modern plugins such as Yoast SEO Premium for search optimization, Cookiebot for GDPR-compliant cookie consent management, and Google Tag Manager for analytics integration. The infrastructure reflects a moderate level of digital maturity with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and uses domain status locks to prevent unauthorized transfers or updates. However, it lacks DNSSEC and additional security headers, and does not publicly disclose security policies or incident response procedures. Privacy compliance is supported by a robust cookie consent mechanism, though no explicit privacy policy or terms of service were detected in the provided content. Overall, the website presents a professional and trustworthy front for the organization, with room for improvement in transparency and security hardening.

T

TITANS freelancers

titans.sk

71

TITANS freelancers is a Slovak-based IT outsourcing company specializing in providing reliable IT freelancers for various projects. With over a decade of experience, they position themselves as a leader in the Slovak IT outsourcing market, targeting both IT specialists seeking freelance work and companies needing skilled IT professionals. The website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and integrates multiple analytics and marketing tools such as Google Tag Manager, Hotjar, and Cookiebot for GDPR-compliant cookie consent. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though explicit security policies and headers could be enhanced. Overall, the site demonstrates a good balance of professional design, usability, and compliance, though lacks visible contact information and formal privacy or terms of service pages in the analyzed content.

The website www.avonizdravim.cz serves as the official e-commerce platform for Dr. Müller Pharma and Megafyt Pharma, offering a range of health-related products including dietary supplements, cosmetics, teas, and medical devices. It targets consumers interested in personal health and wellness, positioning itself as a trusted source for products developed and manufactured by the associated pharmaceutical companies. The site demonstrates a solid market position as an official brand store with a medium-sized business profile in the Czech Republic. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, and various UI libraries, hosted on a platform likely provided by Webseller. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in security headers could be made. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and use of Google reCAPTCHA for form protection. However, no explicit security policy or incident response contacts are published. The domain WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for commercial sites. Overall, the website is professional, secure, and compliant with GDPR, making it a reliable platform for its target audience.

B

Bathroom2kitchen

bathroom2kitchen.co.uk

63

Bathroom2kitchen is an established e-commerce retailer specializing in sanitary and kitchen equipment, offering a wide range of products from leading brands such as Grohe, Axor, and Duravit. The website targets both consumers and professionals seeking quality bathroom and kitchen fixtures. The platform is built on Prestashop and incorporates modern web technologies including jQuery, Google Tag Manager, and various marketing and analytics tools. The site demonstrates good digital maturity with responsive design, clear navigation, and comprehensive product categorization. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms implemented. However, the domain WHOIS data is unavailable due to a domain naming violation, which raises concerns about domain legitimacy and should be addressed by the domain owner. Overall, the website presents a professional and trustworthy front with minor technical and compliance improvements recommended.

Livea is a French e-commerce retailer specializing in sanitary equipment, bathroom fixtures, WC, and kitchen products. The website offers a wide range of over 20,000 references from major brands such as Grohe, Axor, Geberit, Franke, and Duravit. The company targets both professional and consumer markets, providing an extensive catalog and a physical store presence in Woippy, France. Technically, the website is built on the Prestashop CMS platform, utilizing modern JavaScript libraries and modules to enhance user experience and functionality. The site is mobile-optimized, has good SEO practices, and includes privacy and cookie policies compliant with GDPR. Security posture is strong with HTTPS enforced and appropriate security headers present. No critical vulnerabilities or suspicious WHOIS data were detected, although WHOIS information is privacy protected. Overall, Livea presents a professional, trustworthy, and well-structured online retail platform.

S

Swiss Aqua Technologies

swiss-aqua.com

63

Swiss Aqua Technologies is a company focused on water-related technological solutions, likely targeting businesses and industries requiring innovative water treatment or management services. The website presents basic corporate information with moderate branding consistency but lacks detailed business or contact information. Technically, the site uses modern tracking tools such as Google Tag Manager and Google Analytics and is hosted behind Cloudflare DNS, indicating a standard digital infrastructure. However, the domain is very new, which may affect perceived credibility. From a security perspective, the website employs HTTPS but lacks visible security headers and does not provide privacy or cookie policies, which are critical for compliance and user trust. There is no evidence of incident response or vulnerability disclosure mechanisms, which suggests a low maturity in security governance. The absence of contact information and policies limits transparency and user confidence. Overall, the site is accessible and free from WAF or blocking mechanisms, but it requires significant improvements in privacy compliance, security best practices, and business transparency to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, enabling DNSSEC, and publishing vulnerability disclosure information.

E

EMEFKA

emefka.sk

61

Emefka.sk is a prominent Slovak community entertainment portal offering daily humor, quizzes, memes, and news content. It holds a strong market position as the largest entertainment community site in Slovakia, supported by a premium subscription model integrated with the Startitup platform. The website targets a general audience seeking lighthearted and engaging content. Technically, the site is built on WordPress with a modern tech stack including various plugins for social sharing, advertising, and user engagement. Performance is moderate with good mobile optimization and SEO practices. Security posture is solid with HTTPS, anonymized analytics, and consent management, though explicit privacy and terms policies are missing. The site extensively uses third-party advertising and tracking services, reflecting a mature digital marketing approach. Overall, Emefka.sk presents a professional and trustworthy media presence with room for improvement in privacy transparency and contact accessibility.

Y

Yes In My Bratislava

yimba.sk

60

The website 'Yes In My Bratislava' is a Slovak local media portal dedicated to providing information about urban projects, construction, and architecture in Bratislava. It targets residents and stakeholders interested in the city's development, offering news articles, project listings, videos, and photo galleries. The business model is primarily media and information dissemination focused on real estate and urban planning topics within Slovakia. The site demonstrates consistent branding and good content quality tailored to its niche audience. Technically, the website employs a modern tech stack including jQuery, Bootstrap, FontAwesome, and various advertising and analytics tools such as Google Tag Manager, Google Analytics, Gemius, and Adform. It uses HTTPS and has implemented cookie consent mechanisms via CookiePro, indicating a reasonable level of digital maturity. Mobile optimization and SEO practices are good, though accessibility is basic. From a security perspective, the site enforces HTTPS and uses cookie consent with script blocking, but lacks explicit security headers like Content-Security-Policy and does not provide a security.txt or vulnerability disclosure. No privacy policy or terms of service pages were found, and no direct contact information for security incidents is available. These gaps reduce privacy compliance and security posture scores. Overall, the website is functional, professionally designed, and serves its target audience well. However, it would benefit from enhanced privacy and security disclosures, explicit security headers, and clearer contact information to improve trust and compliance. There is no indication of malicious content or blocking mechanisms, and the domain registration data aligns well with the website's focus, supporting its legitimacy.

S

SH.cz s.r.o.

superhosting.cz

59

SH.cz s.r.o. is a Czech-based technology company specializing in dedicated and managed server hosting services. With over 20 years of experience, it serves demanding business customers and manages infrastructure for a significant portion of the Czech internet. The company offers a range of services including dedicated servers, managed Linux servers, server housing, and datacenter connectivity, positioning itself as a trusted provider for high-traffic websites and enterprises. The website reflects a mature digital presence with professional design and clear service offerings. Technically, the site uses modern frameworks such as Next.js and React, and integrates Google Tag Manager and Analytics for tracking. The site is fast, mobile-optimized, and accessible, providing a good user experience. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is partially addressed with a GDPR policy available, but lacks a cookie consent mechanism. WHOIS data is unavailable, which slightly reduces trust but does not negate the evident legitimacy of the business. Overall, SH.cz demonstrates a strong market position and technical maturity with room for improvement in security transparency and privacy compliance.

G

Georgia Department of Economic Development

georgia.org

67

The Georgia Department of Economic Development operates as the official state agency promoting business growth, investment, and economic development within Georgia. The website serves as a comprehensive resource for businesses seeking to locate, expand, or start operations in the state, offering detailed information on incentives, workforce development, infrastructure, and industry sectors. The agency positions itself as a leading economic development authority with a strong market presence and government backing. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrations such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight for analytics and marketing. The site is hosted with reputable providers and uses Cloudflare DNS, ensuring good performance and security. Mobile optimization and accessibility are well addressed, providing a positive user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and maintains a clean domain registration profile consistent with a government entity. While DNSSEC is not enabled, the overall security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and compliance, making it a reliable platform for its target audience. Strategic recommendations include enabling DNSSEC, publishing a formal security policy, and adding vulnerability disclosure information to further enhance security transparency.