Security Directory

A

ALBAform

albaform.com

58

ALBAform is a medium-sized, 100% women-owned manufacturing company specializing in metal fabrication, CNC wire forming, welding, and laser profiling for automotive, agriculture, and e-mobility sectors. Operating internationally with facilities in the USA, Czech Republic, and Mexico, the company holds multiple industry certifications and emphasizes quality and innovation. The website reflects a professional digital presence with multilingual support and clear business information. Technically, the website is built on WordPress with modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Microsoft Clarity, and reCAPTCHA v3 for security. The site is mobile optimized and SEO friendly, though some security headers are missing. Privacy and cookie policies are comprehensive and GDPR compliant, with an active consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies or incident response contacts is a gap. The domain WHOIS data is consistent with the business claims, showing a stable registration since 2011 without privacy protection, supporting legitimacy. Overall, ALBAform's website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security policy transparency and security headers.

M

momenti.cz

designovynabytek.cz

68

momenti.cz is a Czech Republic-based e-commerce retailer specializing in design furniture, home accessories, and lighting products. The website targets general consumers interested in stylish and unique home decor solutions. It operates on the Shoptet platform, integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Smartlook, demonstrating a mature digital infrastructure. The site features a professional design, clear navigation, and GDPR-compliant privacy and cookie policies, enhancing user trust and compliance. Security posture is solid with HTTPS enforced and secure login forms, though some security headers could be improved. The absence of WHOIS data limits domain ownership transparency, which is a moderate concern for trust but does not detract from the site's operational professionalism.

B

BAZENY.cz

bazeny.cz

60

BAZENY.cz is a Czech Republic-based e-commerce retailer specializing in pools, pool enclosures, and related accessories. The company positions itself as a significant seller in the Czech market, offering a wide range of products including in-ground pools, pool lights, and spare parts. The website is professionally designed, mobile-optimized, and provides clear contact information, supporting a trustworthy user experience. Technically, the site is built on the oXyShop platform and leverages modern web technologies such as Google Tag Manager, Algolia Autocomplete, and Cookiebot for cookie consent management. Security posture is solid with HTTPS enforced and CAPTCHA protections, though some security headers are not explicitly detected. Privacy compliance is partially addressed with cookie consent but lacks a visible privacy policy or terms of service pages. WHOIS data is unavailable, likely due to privacy protection, which is common for commercial sites. Overall, the site presents a moderate risk profile with good business credibility and technical implementation.

M

Mujkoberec.cz

mujkoberec.cz

43

Mujkoberec.cz is a Czech Republic based e-commerce retailer specializing in carpets and flooring products. The company offers a wide range of carpet types including handwoven, modern, oriental, and outdoor carpets, targeting consumers primarily in the Czech Republic and Slovakia. They emphasize customer-friendly policies such as free shipping and returns, sample sending, and visualization services, supported by a physical showroom in Prague. The website is recognized with a Heuréka Shop roku popularity award, indicating a strong market position and customer trust. Technically, the site is built on PrestaShop CMS with modern frontend technologies including Bootstrap and Tailwind CSS, and integrates multiple marketing and tracking tools such as Google Tag Manager, Facebook Pixel, and Criteo. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The WHOIS data is privacy protected, which is common for e-commerce sites, but reduces transparency. Overall, the site presents a professional and trustworthy online retail experience with moderate technical maturity and good compliance with privacy regulations.

A

AVANTI FLOORS s.r.o.

orac-dekorace.cz

62

AVANTI FLOORS s.r.o. operates avanti-dekorace.cz, an e-commerce website specializing in decorative interior products such as ceiling, floor, and lighting moldings, as well as decorative elements and accessories. The company targets homeowners, interior decorators, and construction professionals primarily in the Czech Republic. The website presents a professional and consistent brand image with clear navigation and relevant content focused on luxury interior decoration. The business is newly founded in 2024, with domain registration consistent with this timeline. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, Google Analytics, and Google reCAPTCHA for security and marketing purposes. The platform appears custom-built without a major CMS, using Bootstrap for responsive design. Performance and mobile optimization are good, though some security headers are missing. Privacy compliance is well addressed with cookie consent mechanisms and a GDPR policy. Security posture is moderate with HTTPS enforced and reCAPTCHA protecting forms, but lacks explicit security policies and incident response contacts. No critical vulnerabilities or suspicious content were detected. WHOIS data supports the legitimacy of the domain and business, showing no privacy protection or suspicious registration patterns. Overall, the website is a trustworthy and professional retail platform with good privacy and marketing practices but could improve security headers and incident response transparency.

E

Emco spol. s r.o.

emco.sk

57

Emco spol. s r.o. operates a professional e-commerce website focused on healthy breakfast and snack products in Slovakia. The company offers a broad product catalog including muesli, cereals, snacks, and related food items, supported by a membership club (Emco klub) that provides customer incentives. The website is well-structured, with clear navigation and a consistent brand presence, targeting general consumers interested in healthier food options. Technically, the site is built on the Shoptet e-commerce platform, leveraging modern JavaScript libraries, Google Analytics, and Facebook SDK for marketing and analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced, standard security headers, and CSRF protection on forms, though no explicit security policy or incident response information is published. WHOIS data confirms the legitimacy of the domain and company information, aligning with the website's business claims. Overall, the site demonstrates a mature digital presence with good privacy and security practices, suitable for its market segment.

P

Powerpop Team

powerpop.ai

64

Powerpop is a technology company offering an AI-driven visitor intelligence and engagement platform designed to help website owners track, analyze, segment, and engage visitors through behavior-based targeting and smart popups. The platform positions itself as a comprehensive SaaS solution for conversion optimization and real-time visitor engagement. The website is professionally designed using the Wix platform, integrating Google Analytics and Tag Manager for data collection. However, it lacks visible privacy and cookie policies, which impacts privacy compliance. The security posture is generally good with HTTPS enforced and some security hardening scripts, but explicit security headers and incident response information are missing. WHOIS data is unavailable due to malformed output, indicating privacy protection, which slightly reduces trust. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security transparency.

I

IZOPOL DVOŘÁK, s.r.o.

polystyrol-polypropylen.de

50

IZOPOL DVOŘÁK, s.r.o. is a well-established Czech manufacturer specializing in polystyrene and polypropylene insulation and packaging materials. Founded in 1992, the company serves various industrial sectors including automotive, electrical, construction, and glass industries. The website reflects a professional business presence with clear product categories and downloadable certifications, targeting primarily German-speaking business customers. Technically, the site uses modern frameworks such as Bootstrap and Three.js, with Google Tag Manager for analytics and a cookie consent mechanism, indicating moderate digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and vulnerability disclosures. Overall, the domain registration is consistent and trustworthy, matching the company’s Czech origins and business claims.

I

IZOPOL DVOŘÁK, s.r.o.

polystyrene-polypropylene.com

52

IZOPOL DVOŘÁK, s.r.o. is a Czech manufacturing company specializing in polystyrene (EPS) and polypropylene (EPP) insulation and packaging materials. Established in 1992, it serves multiple industrial sectors including automotive, electrical, construction, and glass industries. The company positions itself as a leading Czech manufacturer with a medium-sized operation and a focus on quality and traditional production methods. The website reflects a professional and consistent brand image with clear product categories and downloadable certifications and GDPR documentation. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Three.js, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security best practices like explicit security headers are not detected, and no dedicated security policy or incident response information is provided. From a security perspective, the site uses HTTPS and has a cookie consent mechanism compliant with GDPR, but lacks visible advanced security headers and incident response contacts. The WHOIS data is missing, which raises concerns about domain registration legitimacy, although the website content and business information appear authentic and consistent with a legitimate Czech manufacturing company. Overall, the website is professional and trustworthy in content and design but would benefit from improved domain registration transparency and enhanced security practices to strengthen its security posture and trustworthiness.

J

JUST a Nahrin

justnahrin.sk

67

JUST a Nahrin is a small retail business specializing in Swiss cosmetics and nutritional supplements, operating primarily in Slovakia and neighboring Czech markets. The company employs a direct sales model complemented by expert consulting tailored to customer needs. Their website reflects a niche market positioning with a focus on health and beauty products. Technically, the site is built on modern frameworks such as Next.js and React, integrating essential marketing and analytics tools like Google Tag Manager and Cookiebot for GDPR-compliant cookie management. The site is mobile-optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and employs a robust cookie consent mechanism, though it lacks visible security policy or incident response pages. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, indicating high legitimacy.

J

Just eObjednávka

justnahrin.eu

69

Just Nahrin's website (justnahrin.eu) serves as an online ordering platform primarily targeting the Czech market. The site facilitates e-commerce transactions for health and wellness products under the Just Nahrin brand. The business model focuses on direct online sales with regional partner domains supporting localized markets. The website content is professionally presented in Czech, with clear navigation and a consistent brand identity. The use of Cookiebot for cookie consent and New Relic for performance monitoring indicates a commitment to compliance and operational stability. Technically, the site is built on a Ruby on Rails framework, inferred from CSRF tokens and asset naming conventions. It integrates modern tools such as Google Tag Manager and Cookiebot, and is hosted by WEDOS Internet, a reputable Czech hosting provider. Performance is moderate with good mobile optimization, though accessibility features are basic. The site uses HTTPS with good SSL configuration and some security headers, though explicit CSP and other headers are not confirmed. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CSRF protection, and GDPR-compliant cookie management. However, there is no publicly visible security policy or incident response contact information, which could be improved. No critical vulnerabilities or suspicious patterns were detected. The domain registration is consistent with the hosting provider and business location, supporting legitimacy. Overall, the website is a secure, compliant, and professionally maintained e-commerce platform with room for improvement in security transparency and accessibility. The risk profile is low, with recommendations focusing on enhancing security headers, publishing security policies, and improving accessibility compliance.

KAREL KAŇÁK, S.R.O. is a small manufacturing company specializing in die cutting tools and related packaging components. The company offers a range of products including embossing dies, stripping tools, blanking tools, and rigid boxes, targeting B2B customers in the packaging and manufacturing sectors. The website reflects a professional business presence with clear product offerings and contact information, supported by certifications such as BOBST® certificates. Technically, the website uses legacy technologies like jQuery 1.9.0 and integrates Google Analytics and Tag Manager for tracking, alongside a Klaro cookie consent mechanism ensuring GDPR compliance. Security posture is moderate with no detected security headers and use of outdated libraries, which poses potential risks. The absence of WHOIS registration data is a significant concern, suggesting the domain may be unregistered or privacy protected, which impacts trustworthiness. Overall, the website is functional and business-focused but requires improvements in security and domain legitimacy verification.

P

PETROF, spol. s r.o.

muzeumpetrof.cz

45

PETROF, spol. s r.o. operates a museum and manufacturing facility specializing in pianos and musical instruments in Hradec Králové, Czech Republic. The website serves as a portal for visitors to learn about the company's history, book tours of the factory and museum, and purchase gift vouchers. The company has a strong market position with a heritage of over 160 years and offers cultural tourism experiences alongside its manufacturing business. Technically, the website is built on WordPress with modern JavaScript libraries, Google Maps integration, and tracking tools such as Google Tag Manager and Facebook Pixel. Security measures include HTTPS, reCAPTCHA on forms, and a cookie consent mechanism compliant with GDPR. However, there is room for improvement in security headers and explicit security policies. Overall, the website is professional, well-structured, and trustworthy, with a good balance of content quality and technical implementation.

P

PETROF, spol. s r.o.

petrofgallery.cz

45

PETROF Gallery is a cultural venue and showroom operated by PETROF, spol. s r.o., offering event spaces, a cafe, and a showroom primarily targeting visitors interested in music and cultural events. The website is professionally designed with consistent branding and provides comprehensive information about its services and event calendar. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and reCAPTCHA for security. The site demonstrates good privacy compliance with cookie consent mechanisms and GDPR-aligned privacy policies. Security posture is solid with HTTPS and anti-bot measures, though some improvements in security headers and library updates are recommended. The absence of WHOIS data is a concern for domain legitimacy verification but the website content and branding suggest a legitimate business presence. Overall, the site is well-maintained and trustworthy for its audience.

P

Papír Plojhar

papirplojhar.cz

56

Papír Plojhar is a Czech family-owned business with a long-standing tradition dating back to 1888, specializing in paper goods, gift wrapping, and stationery products. The company operates a professional e-commerce platform targeting consumers interested in quality and sustainable paper products, creative supplies, and office essentials. Their market position is that of a medium-sized retailer with a strong local presence and a focus on customer satisfaction and product quality. Technically, the website is built on the Shoptet e-commerce platform, utilizing common web technologies such as jQuery, Google Tag Manager, and analytics tools. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but could improve by adding additional security headers and updating legacy libraries. The absence of WHOIS data is a notable concern, reducing domain trustworthiness, though the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, and security posture, with room for improvement in domain registration transparency and security header implementation.

A

Autoservis PSG

autoservispsg.cz

48

Autoservis PSG is a small automotive service provider based in Otrokovice, Czech Republic, offering comprehensive vehicle care including servicing for personal and commercial vehicles, tire services, air conditioning maintenance, wheel alignment, vehicle towing, and technical inspections. The company positions itself as a local trusted service provider with a clear focus on quality and customer convenience. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to vehicle owners in the region. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Leaflet.js for maps, and Choices.js for enhanced form controls. It is hosted on Forpsi servers, a known Czech hosting provider. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features, though some improvements are possible. From a security perspective, the site uses HTTPS and secure form validation but lacks important security headers and does not provide a privacy or cookie policy, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. The domain registration data is consistent and transparent, supporting the legitimacy of the business. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

P

PSG betonárna

psgbeton.cz

53

PSG betonárna is a Czech Republic based company specializing in the production and sale of concrete and concrete mixtures for both small and large construction projects. Founded in 2022, the company operates with a modern, computer-controlled production system and offers additional services such as concrete delivery with its own fleet and concrete pumping. The website reflects a regional supplier focused on quality and customer service, targeting construction professionals and individual builders in the Zlín and Otrokovice areas. The business is part of the PSG group, indicating a connection to a larger parent company. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, reCAPTCHA, and Bootstrap for responsive design. The site is mobile-optimized and features good SEO practices, though it lacks a visible CMS or explicit hosting details. Performance is moderate with a clean, professional design and clear navigation. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact form, along with cookie consent mechanisms. However, it lacks explicit security headers, a published security.txt file, and incident response contact information. Privacy compliance is basic, with no dedicated privacy or cookie policy pages found, though cookie consent scripts are present. Overall, the security posture is adequate but could be improved with additional headers and transparency. The overall risk assessment is low, with no signs of malicious content or suspicious domain registration. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and improving GDPR compliance to strengthen trust and security culture.

P

Pricemania s.r.o.

pricemaniaacademy.sk

39

Pricemania Academy, operated by Pricemania s.r.o., is a Slovak-based educational platform offering the first comprehensive e-commerce and online marketing training program in Slovakia. The website provides interactive workshops, webinars, and tailored training sessions aimed at e-shops and online businesses. It positions itself as a trusted source with professional mentors, case studies, and a satisfaction guarantee. Technically, the website uses modern web technologies including JavaScript libraries, Vimeo API, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Mouseflow. The site is mobile optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and secure forms, but lacks some security headers and visible cookie consent mechanisms, which impacts GDPR compliance. Overall, the domain registration and business information are consistent and legitimate, supporting a high trust level.

B

BiznisWeb s.r.o.

biznisweb.sk

60

BiznisWeb s.r.o. operates a well-established e-commerce platform focused on enabling entrepreneurs and small to medium businesses in Slovakia and neighboring regions to quickly create and manage their own online stores. The platform offers customizable templates, multi-language support, and integration capabilities, positioning itself as a reliable SaaS provider since 2003. The website demonstrates a professional digital presence with good content quality, clear navigation, and consistent branding. Technically, it employs modern JavaScript frameworks, consent-based analytics, and privacy management tools, ensuring compliance with GDPR and user privacy expectations. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, business-focused, and compliant with relevant regulations, making it a credible service provider in the e-commerce domain.

F

Firemné Microsoft licencie - LicencePro

licencepro.sk

41

LicencePro is a Slovak-based company specializing in providing cost-effective Microsoft software licenses for businesses. Established in 2012, the company positions itself as an alternative to expensive official Microsoft licenses, offering the same quality at significantly reduced prices while maintaining compliance with licensing agreements and legal standards. The website targets business customers seeking affordable and legal software licensing solutions. Technically, the site is built on WordPress using the Divi theme, integrating modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Matomo Analytics, and Cookiebot for GDPR compliance. Security posture is solid with HTTPS enforced, security headers present, and use of reCAPTCHA on forms, although explicit security policies and incident response information are not published. Overall, the website is professional, well-structured, and trustworthy, with room for improvement in transparency of security and contact information.

G

Google LLC

google.com.tw

72

Google LLC operates the world's leading search engine and a broad portfolio of internet-related services and products. The company holds a dominant market position in online search and advertising, serving a global audience with localized content such as the German-language interface analyzed here. Google's business model primarily revolves around advertising revenue generated through its search engine and associated platforms. The website reflects Google's enterprise scale, with a consistent brand presence and comprehensive service offerings.

遠

遠時數位科技股份有限公司

friday.tw

65

The website ec-w.shopping.friday.tw is an established e-commerce platform operated by 遠時數位科技股份有限公司, a subsidiary of the Far EasTone Telecommunications Group in Taiwan. It offers a wide range of consumer products including electronics, beauty, fashion, and daily necessities, enhanced by AI-driven product recommendations. The platform targets general consumers in Taiwan and maintains a strong market position supported by its parent company. Technically, the site is built on modern frameworks such as Vue.js, integrates common marketing and analytics tools like Google Tag Manager and Facebook Pixel, and provides a mobile-optimized experience. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks some advanced security headers, which could be improved to enhance protection against common web threats. Privacy compliance is moderate with a clear privacy policy but no explicit cookie consent mechanism. Overall, the site demonstrates good business credibility and technical maturity with room for security and privacy enhancements.

盈

盈科泛利股份有限公司

accupass.com

60

ACCUPASS is a Taiwan-based technology company operating an online event registration and ticketing platform, positioning itself as Asia's leading event social platform. The website offers services including event discovery, hosting, online registration, ticket sales, and payment processing, targeting a general audience interested in various events such as forums, exhibitions, and lectures. The platform is branded consistently and professionally, with a medium-sized business profile under the parent company Accuvally Inc. Technically, the website employs modern web technologies such as React, Moment.js, and Cropper.js, with integration of Google Fonts, Google reCAPTCHA, Facebook Pixel, and Google Tag Manager for analytics and marketing. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security practices include HTTPS enforcement and bot protection via reCAPTCHA, but lack explicit security headers and published security policies. Security posture is generally good but could be improved by adding security headers, publishing privacy and cookie policies, and establishing vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, though the website content and branding suggest a legitimate business. Overall, the site is safe, professional, and trustworthy, with room for enhanced privacy compliance and security transparency. Recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, establishing incident response and vulnerability disclosure channels, and improving accessibility and privacy compliance to strengthen user trust and regulatory adherence.

F

Firemní Microsoft licence

licencepro.cz

37

LicencePro.cz is a Czech-based small business specializing in providing discounted Microsoft software licenses to corporate clients. Founded in 2012, the company offers a range of Microsoft products including Office, SQL Server, Windows Server, Exchange Server, SharePoint Server, Windows OS, and Microsoft 365 licenses. The website is built on WordPress using the Divi theme and incorporates modern web technologies such as Google Tag Manager, Matomo analytics, and Cookiebot for cookie consent management. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content tailored to business customers seeking cost-effective software licensing solutions. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, though additional security headers and explicit security policies could enhance protection. Privacy compliance is supported by a cookie consent mechanism and presence of privacy and terms pages, though more explicit GDPR-related disclosures would be beneficial. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

F

Fillamentum Manufacturing Czech s.r.o.

fillamentum.com

57

Fillamentum Manufacturing Czech s.r.o. is a Czech-based manufacturer specializing in high-quality 3D printing filaments. The company has established a strong market position with a focus on innovation, sustainability, and educational outreach. Their website reflects a medium-sized manufacturing business with a professional online presence and active engagement with the maker and industrial communities. Technically, the website is built on WordPress using Elementor and Astra theme, incorporating modern SEO and analytics tools. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the business demonstrates credibility and trustworthiness with room for improvement in compliance and security transparency.

E

EMEA s.r.o.

emea.cz

36

EMEA s.r.o. is a Czech-based company established in 2003, specializing in outsourced communication services including contact centers, active call centers, protected workshops, and software licensing solutions. The company serves business clients seeking professional customer communication and telemarketing services. Their market position is supported by a stable client base and a parent company, NWT a.s., one of the top 100 Czech firms. The website reflects a mature digital presence with good content quality and clear service offerings. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS, reCAPTCHA, and GDPR-compliant cookie management, though formal security policies and headers could be improved. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations.

S

SIKO

siko-bad.de

71

SIKO is a medium-sized retail company specializing in bathroom and kitchen products, operating primarily in Germany with a strong online presence supported by SAP Commerce Cloud and Angular frameworks. The website demonstrates a mature digital infrastructure with integrations for marketing, analytics, and user consent management, reflecting a modern e-commerce platform. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable platform for customers.

S

SIKO FÜRDŐSZOBÁK rt.

siko.hu

66

SIKO FÜRDŐSZOBÁK rt. operates a professional e-commerce platform specializing in bathroom and kitchen products, serving primarily the Hungarian market with regional presence in neighboring countries. The website offers a broad product range including tiles, flooring, bathroom furniture, lighting, and accessories, targeting consumers seeking stylish and functional home solutions. Technically, the site is built on modern frameworks such as Angular and SAP Commerce Cloud Spartacus storefront, integrating advanced analytics and marketing tools like Google Tag Manager and Exponea. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although a dedicated security policy and incident response contacts are absent. Overall, the site demonstrates good digital maturity, compliance with GDPR, and a trustworthy business presence.

S

SIKO

siko.sk

63

SIKO is a large retail company specializing in stylish bathroom and kitchen solutions, offering a wide range of quality products, project planning, and turnkey realization services. The company operates both online and through physical stores in Slovakia, targeting general consumers interested in home improvement. The website is built on a modern Angular framework integrated with SAP Commerce Cloud, indicating a mature digital infrastructure. Marketing and analytics tools such as Google Tag Manager and Exponea are used with consent-based script loading to respect user privacy. Security posture is good with HTTPS and some security best practices, though explicit security policies and vulnerability disclosures are absent. Overall, the website is professional and trustworthy but could improve privacy transparency and contact information visibility.

R

Royal Academy of Engineering

thisisengineering.org.uk

61

Thisisengineering.org.uk is an educational website operated under the Royal Academy of Engineering, focused on promoting engineering careers and providing resources for students and educators. The site offers rich multimedia content, career guidance, and profiles of engineers, positioning itself as an authoritative resource in the STEM education sector within the United Kingdom. The domain has been active since 2017, consistent with the maturity of the content and the organization's initiatives. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance. It is hosted by Easyspace Ltd, a reputable UK hosting provider. The site demonstrates good performance, mobile optimization, and accessibility standards, with a clean and professional design that enhances user experience. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. While some security headers are not explicitly detected, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The use of Google reCAPTCHA cookies indicates bot protection measures. Privacy policies and cookie declarations are comprehensive and transparent. Overall, the website presents a low risk profile with strong business credibility and compliance. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining regular audits of third-party scripts to sustain trust and security.

P

PROFIL NÁBYTEK, a. s.

profil-nabytek.cz

46

PROFIL NÁBYTEK, a. s. is a Czech-based medium-sized company specializing in the manufacturing of office furniture and comprehensive interior design services. With a strong emphasis on project consulting and custom solutions, the company targets businesses and organizations seeking quality furniture and interior realization. The website reflects a professional and well-established business with a consistent brand presence and extensive references. Technically, the site uses modern web technologies including Alpine.js, Google Tag Manager, and Matomo Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent management, though some security headers and explicit policies are missing. The absence of WHOIS data reduces domain trust, but the business content and contact information support legitimacy. Overall, the website is a strong digital asset for the company, supporting its market position and customer engagement.

P

PETROF, spol. s r.o.

petrof.cz

66

PETROF, spol. s r.o. is a leading European manufacturer of acoustic pianos and pianinas, operating globally with exports to over 65 countries. The company maintains a strong market position as the largest manufacturer in Europe, supported by a well-structured website that highlights its products, dealer network, and corporate information. The website is multilingual and professionally designed, targeting piano buyers, music professionals, and dealers worldwide. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager, alongside security measures like HTTPS and Google reCAPTCHA to protect user interactions. However, the absence of WHOIS data limits transparency regarding domain registration details.

Pars Komponenty s.r.o. is a Czech-based company specializing in the development and manufacturing of components for mass transportation vehicles such as trains, trams, metro, and buses. The company holds important industry certifications including ISO 9001, DIN 6701, and EN 15085, and collaborates with major transportation manufacturers like Škoda, Stadler, CAF, Alstom, Siemens, and České dráhy. Their business model focuses on B2B manufacturing and custom development services, targeting manufacturers and operators of public transport vehicles. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.

N

NEVA

neva.eu

49

NEVA is a Czech-based manufacturer specializing in outdoor shading solutions including venkovní žaluzie (external blinds) and fabric roller blinds, serving both domestic and international markets. The company positions itself as a leading Czech manufacturer with a strong emphasis on quality, short delivery times, and customer satisfaction. Their business model includes direct sales and a partner network, supported by a professional website with comprehensive product information, references, and partner programs. Technically, the website is built on WordPress with modern technologies such as Google Tag Manager, Microsoft Clarity, and Cloudfront CDN, ensuring fast performance and excellent mobile optimization. The site employs standard security best practices including HTTPS, security headers, and a cookie consent mechanism compliant with GDPR. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies or incident response information, which could be improved. WHOIS data is privacy protected, which is common for commercial entities, and does not raise immediate concerns given the professional nature of the site and consistent business information. Overall, NEVA's website reflects a mature, trustworthy business with solid technical infrastructure and good compliance with privacy regulations. Strategic recommendations include publishing security and incident response policies and enhancing transparency around data protection officer contacts to further strengthen trust and compliance.

K

K&V ELEKTRO a.s.

kvelektro.cz

60

K&V ELEKTRO a.s. is a Czech Republic-based company specializing in wholesale and retail distribution of electrical installation materials. The company operates 22 branches across the country and offers a broad product range through both B2B and B2C e-commerce platforms. Their market position is strong regionally, supported by physical stores and delivery services. The website reflects a professional business with clear navigation and relevant content tailored to both wholesale and retail customers. Technically, the website is built using modern frameworks such as Next.js and React, with integrations for Google Tag Manager and a web chat service. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be improved. Performance is moderate, with a good balance of modern technologies and user experience. From a security perspective, the site enforces HTTPS and includes standard security headers, contributing to a good security posture. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in transparency and readiness. The lack of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, the website is safe, professional, and business-focused, with no adult or questionable content. The main risk lies in the missing domain registration data, which should be verified to ensure full trustworthiness. Strategic recommendations include enhancing security transparency, verifying domain registration, and improving privacy and cookie consent mechanisms.

K

Kaňák Group, s.r.o.

kanakgroup.com

49

Kaňák Group, s.r.o. is a Czech Republic-based manufacturer specializing in die-cutting tools, certified by BOBST®, serving primarily packaging manufacturers across Europe. The company emphasizes high-quality tooling and production performance enhancement, targeting B2B clients in the manufacturing sector. The website is professionally designed, mobile-optimized, and provides detailed case studies and testimonials, reinforcing its market position as a leading European tooling manufacturer. Technically, the site uses modern tracking tools like Google Tag Manager and Klaro for cookie consent, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by implementing standard HTTP security headers and publishing explicit security policies. The absence of WHOIS registration data for the domain is a notable concern, potentially impacting trustworthiness, though the website content and certifications support legitimacy. Overall, the site is safe, GDPR compliant, and provides clear contact channels, but would benefit from enhanced transparency and security documentation.

J

Just a Nahrin

justnahrin.cz

67

Just a Nahrin is a Czech Republic based direct sales business specializing in Swiss wellness products. The company emphasizes expert consultation alongside product sales, targeting consumers interested in health and wellness. The website is built on a modern React/Next.js framework and integrates compliance tools such as Cookiebot for GDPR cookie consent management. The technical infrastructure includes Google Tag Manager and Smartsupp chat for marketing and customer engagement. Security posture is adequate with HTTPS enforced, but lacks some security headers and detailed WHOIS data, which slightly reduces trust. Overall, the website is professional, user-friendly, and compliant with privacy regulations, but would benefit from enhanced transparency and security hardening.

I

IZOPOL DVOŘÁK, s.r.o.

izopol.cz

52

IZOPOL DVOŘÁK, s.r.o. is a Czech manufacturing company specializing in polystyrene and polypropylene products, including packaging materials and construction insulation. The company positions itself as a leading domestic producer with a history dating back to 1992. Their website reflects a professional business presence with clear product categories and company information. Technically, the site uses modern frameworks like Bootstrap and integrates Google Tag Manager for analytics and marketing. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and visible privacy policies. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for businesses. Overall, the website is well-structured, content-rich, and suitable for its industrial audience.

House of Lobkowicz is a cultural heritage organization showcasing one of Central Europe's most distinguished noble families, their art collections, and historic sites. The website serves as a portal for visitors to explore museums, attend concerts, and rent event spaces. The organization targets tourists, history enthusiasts, and cultural event attendees, positioning itself as a prominent institution in the hospitality and real estate sectors related to heritage tourism. Technically, the website is built on modern frameworks such as Nuxt.js and uses popular libraries like Splide.js for UI components. It integrates common analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, alongside a cookie consent mechanism to address privacy concerns. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected, though the absence of explicit security headers and privacy policies suggests room for improvement. The lack of WHOIS data is a notable gap, impacting domain trustworthiness and requiring further verification. Overall, the site is professional, user-friendly, and content-rich, supporting a medium-sized cultural heritage business.

H

HOKR

hokr.cz

49

The website represents HOKR, a company specializing in supplying high-quality products and services for professional agriculture in the Czech Republic. The site is minimalistic, primarily serving as a redirect with language options, and lacks detailed content or contact information. Technically, it uses modern frameworks such as Nuxt.js and Tailwind CSS, with Google Tag Manager integrated for analytics. However, the site lacks critical privacy and security policies, contact details, and security headers, which limits trust and compliance. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website's digital maturity is basic, with room for significant improvements in content, security, and compliance.

H

Hobra - Školník s.r.o.

hobra.cz

61

Hobra - Školník s.r.o. is a well-established Czech manufacturing company specializing in filtration and insulation products with a history spanning over 85 years. The company holds a significant position in the European market, offering a broad range of industrial filtration and insulation solutions targeting various sectors such as food and beverage, chemical, pharmaceutical, and construction industries. Their website reflects a professional business model focused on manufacturing, distribution, and application support. Technically, the website employs legacy technologies like jQuery 1.10.2 alongside modern tools such as Google Tag Manager and Google Maps API, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and SEO practices but could benefit from modernization of its tech stack and enhanced accessibility features. Security posture is moderate; HTTPS is implied, but the use of outdated libraries and lack of visible security headers or explicit security policies present potential risks. Privacy compliance is basic with cookie consent mechanisms and a privacy-related page, but no comprehensive GDPR statements or terms of service are evident. Overall, the website is trustworthy and professional, with clear contact information and business legitimacy supported by WHOIS data. Strategic improvements in security and privacy policies would enhance the company's digital trust and compliance standing.

E

Emco.cz

emco.cz

61

Emco.cz is a Czech-based e-commerce retailer specializing in healthy food products such as muesli, porridges, cereals, bars, cookies, dried fruits, and beverages. The website presents a well-structured product catalog with multiple categories and promotional content targeting health-conscious consumers. The business operates primarily online, leveraging the Shoptet e-commerce platform, and offers membership benefits through the Emco club. Technically, the website uses modern web technologies including Google Analytics, Facebook SDK, and various marketing tools, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. WHOIS data is unavailable due to privacy protection, which is common for e-commerce sites. Overall, the site is professional, trustworthy, and accessible without blocking or WAF interference.

C

Cravt koupelny s.r.o.

cravtkoupelny.cz

52

Cravt koupelny s.r.o. is a Czech Republic-based bathroom studio with physical locations in Tábor and Prague, specializing in bathroom design and product sales. The company targets consumers and businesses seeking bathroom solutions locally. The website is built on WordPress using the Divi theme and integrates common analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The technical infrastructure is modern and well-maintained with HTTPS and security headers in place, reflecting a moderate to good digital maturity level. However, the absence of explicit privacy and cookie policies indicates a compliance gap with GDPR and related regulations. Security posture is solid with no detected vulnerabilities or exposed sensitive data, but incident response information is missing, which could impact readiness for security events. Overall, the website is professional and trustworthy, but improvements in privacy compliance and security transparency are recommended.

C

ComAp

comap-control.com

61

ComAp is a well-established company specializing in innovative control solutions for smart and sustainable energy generation and management. The company targets businesses and industries requiring advanced power generation and energy management technologies, positioning itself as a global leader with over 30 years of experience and a strong international presence through multiple subsidiaries. Their key services include power generation control, smart energy management, marine control solutions, and tailored training and cloud-based services. The website reflects a professional and comprehensive digital presence, leveraging modern technologies such as Vue.js, Kentico CMS, and Microsoft Azure hosting, complemented by robust analytics and tracking tools like Google Analytics and Microsoft Application Insights. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA, although explicit incident response and vulnerability disclosure policies are not publicly detailed. The absence of WHOIS registration data is a notable concern for domain legitimacy verification, but the overall website quality and business credibility remain high. Strategic recommendations include enhancing transparency around security policies and incident response, and verifying domain registration details to strengthen trust.

C

Cardion Cars a.s.

autopruhonice.com

49

Cardion Cars Průhonice, operated by Cardion Cars a.s., is an authorized Volvo car dealership and service center located in Čestlice, Czech Republic. The company specializes in selling new, demo, and used Volvo vehicles, offering servicing, parts, accessories, and financing options including leasing. The website reflects a professional and consistent brand presence aligned with Volvo's corporate identity, targeting customers interested in Volvo vehicles and related services in the Czech market. The business model focuses on direct sales and after-sales services, supported by digital tools such as online configurators and test drive bookings. Technically, the website employs modern web technologies including jQuery, Bootstrap, and CookieConsent for cookie management, alongside Google Analytics and Tag Manager for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, though accessibility features could be enhanced. The presence of multiple external partner domains and social media links indicates a well-integrated digital ecosystem. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers which could improve protection against common web attacks. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain reduces trustworthiness from a domain registration standpoint, though the website content and branding strongly suggest legitimacy. Overall, the website presents a solid digital presence for an authorized automotive dealer with good content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and domain registration visibility would enhance trust and security posture.

A

AVANTI FLOORS s.r.o.

avanti-koberce.cz

60

AVANTI FLOORS s.r.o. is a well-established Czech company specializing in the retail and import of floor coverings including carpets, vinyl floors, and PVC products. Operating since 1992, it holds a significant market position in the Czech Republic with a focus on quality and design. The company offers a comprehensive e-commerce platform complemented by physical showrooms and additional services such as 3D visualization and customer support. Technically, the website employs modern web technologies including Google Analytics, Tag Manager, Hotjar, and Google reCAPTCHA, ensuring a secure and user-friendly experience. Security posture is solid with HTTPS and form protections, though some advanced security headers are missing. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts overall trust. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve credibility and security.

A

ATREA

atrea.cz

56

ATREA is a family-owned company founded in 1990, specializing in innovative ventilation and heat recovery solutions across Europe. The company positions itself as a leader in the energy sector, offering a wide range of professional ventilation products tailored for schools, kitchens, commercial and domestic applications, apartment blocks, and swimming pools. Their business model focuses on manufacturing and distributing high-efficiency air handling units with a strong emphasis on certifications and quality. The website targets end-users, distributors, engineers, and installers, providing professional product selection tools and comprehensive product information. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Hotjar, and LinkedIn Insight Tag. The site is hosted by INTERNET CZ, a.s., and uses HTTPS with good SSL configuration. The website is mobile-optimized, accessible, and SEO-friendly, with clear navigation and multilingual support. From a security perspective, the site demonstrates good practices including HTTPS enforcement, use of reCAPTCHA on contact forms, and no visible exposure of sensitive data. However, it lacks explicit security policy documentation and incident response contact information. The privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism. Overall, ATREA's website reflects a professional and trustworthy business with a strong market position in the ventilation and energy sector. The site is secure, compliant, and technically sound, supporting the company's credibility and customer engagement effectively.

A

ALBAform

albaform.cz

57

ALBAform is a medium-sized, 100% women-owned manufacturing company specializing in metal fabrication, CNC wire forming, welding, and laser profiling for automotive, agriculture, and e-mobility sectors. Operating internationally with offices in the USA, Czech Republic, and Mexico, ALBAform holds multiple industry certifications and maintains a professional digital presence. The website reflects a mature business with clear service offerings and strong branding. Technically, the site is built on WordPress with modern analytics and marketing tools integrated, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

G

Green0meter ESG Studio

green0meter.com

59

Green0meter ESG Studio is a small technology company providing software solutions focused on ESG compliance, helping businesses adhere to regulations such as CSRD, EU Taxonomy, and SFDR, and generate reports aligned with GRI and CDP standards. The company targets organizations seeking to improve sustainability reporting and leverage ESG for cost savings or revenue generation. The website is built on the Wix platform, utilizing modern web technologies and third-party analytics and marketing tools, indicating a moderate level of digital maturity. Security posture is basic, with cookie consent implemented but lacking visible security headers or incident response contacts. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site is professional and functional but would benefit from enhanced transparency and security measures.

E

EAT SMART

eatsmart.cz

62

EAT SMART is a Czech Republic based company providing innovative smart corporate catering solutions. Their service offers fresh, high-quality meals available 24/7, targeting corporate clients and their employees. The website presents a modern, professional image with clear branding and a focus on smart food ordering technology. Technically, the site uses modern frameworks such as Next.js and React, integrates video streaming via Mux Player, and employs Google Analytics and Tag Manager for analytics. Security posture is good with HTTPS and security headers in place, though explicit privacy and terms policies are missing. Cookie consent is implemented, indicating some privacy compliance. Overall, the site is well designed and functional, but could improve transparency on privacy and security policies.