Security Directory

The website at aptum.com is currently inaccessible due to a Vercel Security Checkpoint page that blocks access to the actual content. This security mechanism prevents analysis of the site's business, security, and compliance posture. The domain is registered since 2002 with GoDaddy and uses Cloudflare DNS, indicating a legitimate and established domain. However, no business or contact information, privacy policies, or security headers are visible due to the content block. The site appears to be hosted on the Vercel platform with Astro framework usage indicated by scripts. Without access to the real content, the security posture cannot be fully assessed, but the presence of a security checkpoint suggests some level of protection against automated or malicious access. Overall, the site is currently not analyzable beyond domain registration and hosting details.

T

Free online timeline maker

time.graphics

50

Time.Graphics is an online timeline creation platform offering both free and premium services targeted primarily at educational institutions, businesses, and individual users. The platform enables users to create, analyze, and visualize timelines for historical, educational, and project management purposes. It integrates with popular Google services and supports social login via OAuth providers, enhancing user experience and functionality. The business model is freemium SaaS with premium subscriptions and educational discounts, positioning it as a niche player in the timeline and project planning market. Technically, the website employs a modern tech stack including Google Analytics, Google Tag Manager, jQuery, and Google Web Toolkit (GWT). It uses Stripe for secure payment processing and embeds multimedia content such as YouTube videos. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses SSL for payment security, but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partially addressed with a comprehensive privacy policy and GDPR indicators, but cookie consent is missing. WHOIS data is privacy protected, which is justified for this SaaS business, and no suspicious registration patterns were found. Overall, Time.Graphics presents a professional, trustworthy, and functional online service with minor gaps in privacy compliance and security best practices. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and user trust.

P

Privacy service provided by Withheld for Privacy ehf

allybot.io

55

AllyBot.io is a small technology company founded in 2020 that offers an inclusive language tool integrated as a Slackbot. The website targets Slack users and teams aiming to promote inclusive language and foster allyship within their organizations. The business model is SaaS-based, focusing on delivering value through Slack integration. The company uses privacy protection for domain registration, which is common for startups in the tech sector. The website is professionally designed with good content relevance and user experience, optimized for mobile devices. Technically, the site uses HTTPS with a reputable registrar and hosting provider, but lacks advanced security headers and formal privacy or cookie policies. No direct contact emails or phone numbers are provided, only contact forms. There is no evidence of vulnerability disclosure or incident response policies published on the site.

A

Action Media

actionmedia.fr

54

Action Media is a French communication agency specializing in the automotive aftermarket and building sectors, established since 1973. The company provides strategic communication and production services to major players in the automotive industry both domestically and internationally. The website reflects a professional and consistent brand presence, targeting automotive industry professionals and distributors. Technically, the site is built on the Wix platform using modern web technologies, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though some security headers and privacy compliance elements are missing. Overall, the site appears legitimate and trustworthy, though improvements in privacy and security policies are recommended.

A

Agence Tokster

tokster.fr

49

Agence Tokster is a specialized BtoB digital communication agency integrated within the Zepros group, focusing on content strategy and marketing services for industries such as building, automotive aftermarket, and restaurant sectors. The website presents a professional and consistent brand image with clear service offerings and client study-cases. Technically, the site is built on WordPress with Elementor and uses modern web technologies and Google Analytics for tracking. Security posture is solid with HTTPS and reCAPTCHA, but lacks some security headers and formal privacy/cookie policies, indicating room for compliance improvement. Overall, the domain registration and hosting are consistent with the business claims, supporting legitimacy.

A

Agence de communication Periwinkle

periwinkle.fr

44

Periwinkle is a small French communication agency based in Montauban, established in 2015. The company specializes in supporting businesses with communication and digital solutions, including web and print services. The website reflects a professional and consistent brand image, targeting businesses seeking digital communication expertise. The agency maintains an active social media presence on Facebook, Instagram, and LinkedIn, enhancing its market visibility. Technically, the website is built on WordPress using the Elementor page builder and Yoast SEO plugin, indicating a modern and maintainable infrastructure. The site employs HTTPS with good SSL configuration and includes a cookie consent mechanism with blocking enabled, demonstrating awareness of privacy compliance. Google Analytics is integrated with IP anonymization, reflecting moderate user tracking practices. From a security perspective, the site lacks some advanced security headers and does not provide a security.txt or incident response contact information, which are areas for improvement. The absence of a published privacy policy and terms of service represents a compliance gap under GDPR and related regulations. The WHOIS data is not publicly available, suggesting privacy protection for the domain registration, which is typical for small agencies. Overall, Periwinkle's website is professional and trustworthy with moderate technical and security maturity. Strategic enhancements in privacy disclosures, security policies, and incident response readiness would strengthen its compliance posture and trustworthiness.

D

DIGEEK

digeek.fr

48

DIGEEK is a small digital communication agency based in Toulouse, France, specializing in graphic design, website and mobile application development, video production, and digital marketing. The company targets businesses, startups, institutions, and associations primarily in the Toulouse region. Their website demonstrates a professional and consistent brand image supported by strong client testimonials and active social media engagement. Technically, the site is built on WordPress with modern technologies and performance optimizations, ensuring fast loading and excellent mobile responsiveness. Security posture is good with HTTPS and performance plugins, though some security headers and explicit incident response information are missing. Overall, the domain appears legitimate despite the absence of WHOIS registration details, likely due to privacy protection.

T

Typeform

videoask.it

55

VideoAsk by Typeform is a technology-driven SaaS platform specializing in interactive video communication tools designed to enhance business conversations and relationships at scale. The platform offers services such as video funnels, AI-powered chatbots, multimedia messaging, and video forms, targeting businesses in recruitment, sales, marketing, and customer support sectors. The website demonstrates a strong market position with over 10,000 companies as customers and consistent branding aligned with its parent company, Typeform. Technically, the website employs a modern tech stack including React and Next.js, with integrations for cookie consent (OneTrust), A/B testing (Optimizely), and analytics (Google Tag Manager). The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security best practices are observed with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not publicly available. The security posture is strong overall, with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data and direct contact information slightly reduces business credibility. No vulnerability disclosure or security.txt files were found, indicating room for improvement in transparency and security communication. Overall, VideoAsk presents a professional, secure, and privacy-conscious platform with a solid business foundation. Strategic recommendations include publishing detailed security policies, providing direct security contacts, and enhancing transparency through vulnerability disclosure programs to further strengthen trust and compliance.

D

Domstocks

domstocks.fr

34

Domstocks is a specialized online marketplace focused on providing quality expired domain names tailored for SEO and branding purposes. The platform targets SEO professionals, marketers, and domain investors seeking domains with strong metrics and Google indexing. The business model emphasizes fixed pricing and ease of acquisition, avoiding auction complexities. Technically, the website employs modern frontend frameworks such as Bootstrap and Material Design Bootstrap, integrates marketing and analytics tools like Facebook Pixel and Statcounter, and uses Brevo (Sendinblue) for form handling. The site is mobile-optimized and presents a professional user experience. Security posture is adequate with HTTPS enforced and secure form submissions; however, the absence of security headers and cookie consent mechanisms indicates room for improvement. The lack of WHOIS data raises concerns about domain legitimacy, impacting trust from a registration standpoint. Overall, Domstocks presents a credible business front with moderate technical maturity and some compliance gaps.

OnlineStrat.fr is a French digital marketing and internet strategy website managed by David Chelly. It provides news, guides, directories, and resources aimed at internet professionals, marketers, startups, and beginners interested in web technologies and e-business. The site features a variety of content including articles on SEO, e-commerce, startups, and digital tools, positioning itself as a niche resource in the French-speaking digital marketing community. Technically, the website uses standard HTML, CSS, and JavaScript with legacy Adobe Spry framework components and integrates Google services such as Analytics and Custom Search Engine. While the site is accessible and content-rich, it lacks modern security headers and explicit GDPR cookie consent mechanisms, which are areas for improvement. The WHOIS data for the domain is missing, which reduces transparency and trust but the active and professional nature of the site partially mitigates this concern. Overall, the site is moderately mature technically and business-wise, with room to enhance security and privacy compliance.

T

Table de massage : usage, types, avantages, prix

tabledemassage.fr

38

The website tabledemassage.fr is a newly registered French informational site focused on massage tables, their usage, types, advantages, and pricing. It targets professionals in massage therapy, physiotherapy, wellness centers, and individuals interested in massage equipment. The site provides detailed, well-structured content but lacks business contact information and formal policies. Technically, it uses a modern frontend stack including Bootstrap 4, jQuery, and various UI libraries, delivering a good user experience with mobile optimization. However, no CMS or backend technologies are detected, and performance is moderate. From a security perspective, the site lacks visible security headers, privacy policies, cookie consent mechanisms, and contact details for incident response. The domain is very new (registered in late 2024) but WHOIS data is transparent and consistent with the website content, indicating legitimacy. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences with no adult or explicit material. Overall, the website scores moderately on content quality and business credibility but scores low on privacy compliance and security posture due to missing policies and headers. There are no critical security issues detected, but improvements are needed to enhance trust and compliance. Strategic recommendations include implementing HTTPS with strong SSL, adding privacy and cookie policies, providing clear contact information, and enhancing security headers to improve the security posture and user trust.

A

Guide pour bien utiliser les antidépresseurs

antidepresseur.fr

37

The website www.antidepresseur.fr is an educational platform focused on providing detailed information about antidepressant medications, their categories, effects, and precautions. It targets a general French-speaking audience seeking mental health information. The site uses modern frontend technologies such as Bootstrap and various icon libraries, delivering a good user experience with mobile optimization and embedded multimedia content. However, the absence of privacy and cookie policies, lack of visible contact emails or phone numbers, and missing WHOIS registration data raise concerns about the site's legitimacy and compliance. Security posture is weak due to missing security headers and unknown SSL status. Overall, the site is functional and informative but requires improvements in transparency, security, and compliance to enhance trustworthiness.

O

Tout savoir sur le metier d'oculiste

oculiste.fr

34

The website www.oculiste.fr is an informational platform focused on educating visitors about the profession of oculists (ophthalmologists) in France. It provides detailed content on the role, training, income, and distinctions between oculists and opticians. The site targets a general audience interested in eye care professions and related health topics. Technically, the site uses a standard Bootstrap 4 framework with common JavaScript libraries, delivering a moderate performance and good mobile responsiveness. However, it lacks advanced SEO and accessibility features. Security posture is weak due to missing HTTPS verification, absence of security headers, and no visible privacy or cookie policies, which also impacts GDPR compliance. The WHOIS data is unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the site serves as a niche educational resource but requires significant improvements in security, privacy, and business transparency to enhance credibility and compliance.

P

premiers-secours.com

premiers-secours.com

45

The website premiers-secours.com is a newly created French-language educational platform focused on first aid guidance and emergency response techniques. It provides detailed textual content and multimedia resources to educate the general public on how to act in case of accidents or medical emergencies. The site positions itself as a niche informational resource with links to related first aid training services, targeting individuals seeking knowledge on lifesaving procedures. Technically, the site employs modern front-end technologies including Bootstrap 5, Google Fonts, and JavaScript libraries such as Swiper and Glightbox. It is hosted on AwardSpace servers with DNS managed via AwardSpace nameservers. The site is mobile optimized and has moderate performance but lacks advanced SEO and accessibility features. No CMS is detected, indicating a custom or static site build. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. There are no privacy or cookie policies present, and no explicit contact emails or phone numbers are provided, limiting transparency and compliance with GDPR. Analytics are implemented via Statcounter with minimal tracking. The domain registration is transparent and consistent with the website content, registered recently in 2024 with a reputable registrar. Overall, the site is a functional and informative resource with good content quality but requires improvements in privacy compliance, security hardening, and contact transparency to enhance trust and regulatory adherence.

F

Fullstack

fstck.co

59

Fullstack is a Paris-based digital agency specializing in comprehensive digital solutions including web design, development, e-commerce, mobile applications, and UX/UI design. Established in 2014, the agency serves a diverse clientele including major brands such as Disneyland Paris and EDF, positioning itself as a trusted partner in the French digital market. The website reflects a professional and user-centric approach with detailed service offerings and client testimonials. Technically, the site employs modern web technologies and privacy-conscious analytics, delivering fast and mobile-optimized experiences. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of explicit security policies and cookie consent mechanisms indicates room for compliance improvements. Overall, Fullstack presents a credible and mature digital presence aligned with its business claims.

A

Ankorstore

ankorstore.com

71

Ankorstore operates as a wholesale marketplace connecting over 25,000 unique brands with retailers across Europe. The platform focuses on providing a curated selection of high-quality brands, exclusive purchasing conditions, and simplified distribution to support a thriving retailer community. The website's market position is strong within the European wholesale retail sector, emphasizing brand discovery and streamlined wholesale purchasing. Technically, the website employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Google Tag Manager, Hotjar, Braze, and Amplitude, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and GDPR-compliant consent mechanisms, though explicit security headers and incident response policies are not evident. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given its professional presentation and compliance posture. Overall, Ankorstore presents a secure, professional, and user-friendly platform for wholesale retail operations.

M

Matter and Shape

matterandshape.com

60

Matter and Shape is a specialized design salon and curated product retailer based in Paris, organizing events in the Jardin des Tuileries during Paris Fashion Week. The company targets design professionals, exhibitors, and buyers, offering both physical event experiences and an online shop featuring design products. The website is built on WordPress with modern technologies and integrates Google Tag Manager for analytics and Cloudflare Turnstile CAPTCHA for form security. The security posture is solid with HTTPS and anti-bot measures, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the website is professional, accessible, and trustworthy with clear contact information and active social media presence.

W

WSN Community

wsn.community

57

The website at https://wsn.community/fr/pro/login is currently inaccessible beyond a minimal loading spinner, indicating that a Web Application Firewall (WAF) or other security mechanism is blocking full content access. Due to this, no meaningful business information, contact details, or policies are available for analysis. The site uses modern JavaScript frameworks such as Vue.js and Vuetify, but no metadata or structured data is present. The WHOIS data is restricted and does not provide registrant or domain creation details, limiting trust assessment. Overall, the site appears to be in a blocked or pre-load state, preventing comprehensive evaluation.

H

Huwise

opendatasoft.com

61

Huwise is a technology company specializing in providing a SaaS data product marketplace solution designed to centralize, govern, and distribute data assets for business teams, IT leaders, and data professionals. The company positions itself as a leading solution in the data product marketplace space, with recognition from Gartner and a strong customer base of over 350 clients across sectors such as energy, transport, banking, and government. Their platform offers a comprehensive suite of features including AI-enhanced search, metadata management, data lineage, and integration capabilities, aimed at accelerating data consumption and AI project success. Technically, the website is built on a modern WordPress CMS with Bootstrap 5, jQuery, and various JavaScript libraries for enhanced user experience and performance. The site is mobile-optimized, SEO-friendly, and integrates analytics via Matomo and marketing tools like Google Tag Manager. Privacy and cookie policies are well implemented with GDPR compliance, supported by a consent mechanism via Axeptio. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks visible HTTP security headers and a published security.txt file. No direct contact emails or phone numbers are publicly listed, which may limit immediate contact options. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness, although the professional website and customer testimonials provide mitigating trust signals. Overall, Huwise demonstrates a mature digital presence with strong business credibility and technical implementation. However, improvements in security header implementation, incident response transparency, and WHOIS registration clarity are recommended to enhance trust and compliance.

T

tolk.ai - Generative AI powered Chatbot and Livechat solutions

tolk.ai

65

tolk.ai is a French technology company specializing in generative AI-powered chatbots and livechat solutions for customer relations. Their platform offers no-code deployment, integration with various web services, and analytics capabilities to enhance customer experience and operational efficiency. The company targets businesses seeking advanced AI automation for pre- and post-sales customer support. The website demonstrates a professional digital presence with good SEO, structured data, and moderate use of analytics and marketing tools. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and cookie consent mechanisms are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is justified for this business type. Overall, tolk.ai presents as a credible and modern SaaS provider in the AI customer service space.

L

La Salamandre

salamandre.net

61

La Salamandre is an independent, non-profit French media publisher dedicated to nature education and appreciation. They produce three nature magazines targeting different age groups, alongside rich digital content including articles, podcasts, videos, and educational activities. Their market position is strong within the French-speaking nature enthusiast community, with a clear focus on family and educational content. Technically, the website is built on WordPress with modern libraries and frameworks, optimized for mobile and SEO, and integrates privacy-compliant analytics and consent management. Security posture is good with HTTPS and secure login mechanisms, though some HTTP security headers could be improved. Overall, the site is professional, trustworthy, and content-rich, supporting a sustainable business model based on subscriptions and product sales.

Fondation Hélène et Victor Barbour is a Swiss non-profit foundation dedicated to supporting social, educational, wildlife, church, and cultural initiatives primarily in Geneva. The website presents a clear focus on philanthropy with well-structured content and a professional design that targets a general audience interested in charitable activities. The foundation operates with a small organizational footprint and provides contact details including a physical address and phone number, enhancing trustworthiness. Technically, the website uses a custom-built frontend leveraging common JavaScript libraries such as jQuery, Modernizr, and GreenSock for animations, along with Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident, suggesting a bespoke solution. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. No forms or incident response policies are present, and no vulnerability disclosure mechanisms are found. The WHOIS data indicates privacy protection for the domain registrant, which is typical for small non-profits and does not raise immediate concerns. Overall, the website is functional, professional, and trustworthy for its intended philanthropic purpose but would benefit from enhanced security practices, privacy compliance improvements, and more transparent data protection measures.

Č

Česko-německý fond budoucnosti

fondbudoucnosti.cz

35

Česko-německý fond budoucnosti is a well-established non-profit organization dedicated to fostering Czech-German relations through project funding and cultural initiatives. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The organization targets individuals and groups involved in Czech-German cooperation, providing support and promoting mutual understanding. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data limits domain trust analysis but the overall professional presentation and social media presence support legitimacy.

A

Asociace nezávislých divadel ČR

andcr.cz

9

Asociace nezávislých divadel ČR is a Czech non-profit association representing over 60 independent cultural theater organizations across the Czech Republic. The website serves as an advocacy platform promoting the interests of independent theater, facilitating communication among members, and liaising with public administration. The organization positions itself as a key cultural ambassador domestically and internationally. The website content is professionally presented in Czech, targeting cultural organizations and stakeholders in the independent arts sector. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and policies could be improved. Privacy and cookie policies are absent, which is a compliance gap. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the site is trustworthy and professional but could enhance compliance and transparency aspects.

E

European Association of Independent Performing Arts

eaipa.eu

50

The European Association of Independent Performing Arts (EAIPA) is a small, pan-European umbrella organization founded in 2018 that represents independent performing arts groups and professionals across 17 countries. It operates primarily as a B2B membership association advocating for the sector, providing policy input, and raising visibility for independent performing arts communities. The website is built on WordPress using Elementor and integrates GDPR compliance tools such as Complianz and Mailjet for marketing. The technical infrastructure is modern and adequate, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly available. Overall, the site is professional, trustworthy, and compliant with European privacy regulations.

H

HYVOR

hyvor.community

67

HYVOR Community is a technology-focused online forum dedicated to discussions around HYVOR products. It serves as a platform for users and developers to engage in product support, feedback, and announcements. The site leverages the Discourse platform, a modern and secure community software, ensuring a robust technical infrastructure. The website demonstrates good digital maturity with fast performance, mobile optimization, and SEO-friendly metadata. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is basic with a privacy policy and terms of service present, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, suitable for its target audience of HYVOR product users and developers.

FortGuard, a product of HYVOR based in France, offers a state-of-the-art spam detection API designed for developers and website owners seeking to prevent spam content effectively. The service includes advanced features such as human-like accuracy through multiple large language models, language detection, sentiment analysis, and IP geolocation capabilities. The availability of a WordPress plugin facilitates easy integration for WordPress websites, enhancing its accessibility and market reach. The business model is subscription-based with a free trial, targeting a niche market in spam detection and content moderation services. Technically, the website is built using modern JavaScript frameworks, specifically Svelte, and is hosted on Cloudflare infrastructure, ensuring fast performance and good mobile optimization. The site demonstrates good SEO practices and basic accessibility features. The integration of Crisp Chat indicates a minimal level of user interaction tracking, aligned with privacy-first principles. However, some security best practices such as DNSSEC and security headers could be improved. From a security perspective, the website enforces HTTPS and maintains a privacy-first approach by not storing or sharing user data. The domain registration details are consistent with the business claims, enhancing trustworthiness. There is no evidence of security policy documentation or incident response contacts, which could be areas for future enhancement. No critical vulnerabilities or suspicious content were detected. Overall, FortGuard presents a professional, secure, and privacy-conscious service with a solid technical foundation. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance standing.

G

Graphic Solutions s.r.o.

grslt.sk

48

Graphic Solutions s.r.o. is a small Slovak company specializing in graphic design, web development, and online marketing services. Their website presents a professional image with a focus on creative solutions for local businesses, offering services such as logo creation, web presentations, and printed materials. The company emphasizes customer care and flexibility, targeting Slovak enterprises and entrepreneurs seeking tailored digital and graphic solutions. Technically, the website uses common web technologies including jQuery, Google reCAPTCHA v3, and responsive design elements, providing a moderate performance and good mobile optimization. Security measures include the use of reCAPTCHA to protect the contact form and a cookie consent banner, but lack advanced HTTP security headers and explicit security policies. The absence of a privacy policy and terms of service pages indicates room for improvement in compliance. Overall, the website is functional, trustworthy, and suitable for its business purpose but would benefit from enhanced security and privacy practices.

V

Vodácká navigace a kilometráž

vodackanavigace.cz

53

Vodáckanavigace.cz is a specialized Czech website providing detailed navigation, maps, and guides for water sports enthusiasts, particularly canoeists and kayakers navigating Czech rivers. The site offers comprehensive river kilometrage, information about rapids, campsites, rental services, and related amenities. It also supports a mobile Android application for offline use, enhancing user convenience. The business operates in a niche market with a focus on outdoor recreation and tourism within the Czech Republic. The website is well-branded and consistent, with partnerships evident through linked rental and sales companies. Technically, the site is built on ASP.NET Web Forms with Telerik UI components and uses older jQuery libraries. It integrates Google Analytics and Facebook SDK for tracking and social engagement. The site is mobile-optimized and provides a good user experience, though some technical debt is noted due to outdated libraries and lack of modern security headers. From a security perspective, the site uses HTTPS but lacks several security headers and explicit cookie consent mechanisms. No WHOIS data is available, which reduces domain trustworthiness, though the website content and partner links suggest legitimacy. No explicit security or incident response policies are published, indicating room for improvement in compliance and transparency. Overall, vodackanavigace.cz is a functional, content-rich site serving a specialized audience with good business credibility but could enhance its security posture and privacy compliance to align with best practices.

L

Letní kina v ČR - Letňáky.cz

letnaky.cz

54

Letnaky.cz is a Czech Republic-based online portal providing the largest comprehensive overview of summer outdoor cinemas across the country, listing 494 venues with detailed programming information. The website targets cinema enthusiasts and the general public interested in outdoor cultural events. The business model is informational, focusing on content aggregation and event promotion without direct transactional services. The domain has been active since 2015, indicating a stable presence in its niche market. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates Facebook SDK for social media features. Hosting is provided by a Czech hosting provider (Forpsi). The site shows moderate performance and basic mobile optimization. SEO practices are adequate with proper meta tags and Open Graph data, but accessibility features are minimal. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. There are no forms or data collection mechanisms on the homepage, reducing attack surface but also limiting user interaction. Privacy and cookie policies are absent, representing a compliance gap with GDPR requirements. No incident response or vulnerability disclosure information is provided. Overall, Letnaky.cz is a trustworthy and legitimate informational website with good content quality and business credibility but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

M

Město Vítkov

vitkov.info

55

The website www.vitkov.info serves as the official online presence for the town of Vítkov in the Czech Republic, providing comprehensive municipal information, public services, and community resources. It targets residents and visitors, offering access to administrative forms, local news, event calendars, and social services. The site is well-structured with clear navigation and consistent branding, reflecting its role as a trusted government portal. Technically, the site employs common web technologies including jQuery, Bootstrap, and Swiper.js, indicating a moderate level of digital maturity. The site is mobile-optimized and includes a cookie consent mechanism aligned with GDPR requirements, demonstrating attention to privacy compliance. However, no major CMS or hosting provider details are evident, suggesting a custom or proprietary platform. From a security perspective, the site uses HTTPS but lacks visible advanced security headers and explicit incident response or vulnerability disclosure information. The WHOIS data is unavailable due to privacy protection or malformed queries, but the domain and content align with an official municipal entity, supporting legitimacy. No WAF or blocking mechanisms were detected, and no suspicious external domains or tracking services were found. Overall, the site presents a secure and privacy-conscious government portal with good content quality and user experience. Strategic improvements in security headers, incident response transparency, and WHOIS data availability could further enhance trust and resilience.

K

Kraj blanických rytířů, z.s.

blanik.net

58

Kraj blanických rytířů, z.s. operates a well-established official regional tourism portal focused on the Blaník region in the Czech Republic. The website provides comprehensive information on local attractions, cultural events, school trips, regional products, and visitor services, targeting tourists, families, and educational groups. Supported by regional government and ministry partners, it serves as a trusted source for regional tourism promotion. Technically, the site is built on Drupal 9 with modern front-end frameworks and integrates Google Analytics, Microsoft Clarity, and CookieHub for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with a GDPR page and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

K

Kredance

kredance.cz

56

Kredance is a Czech cultural organization specializing in dance and movement arts, providing a variety of courses, workshops, artistic residencies, and cultural events. The website reflects a niche market position focused on arts education and community engagement within the Czech Republic. The digital infrastructure is built on WordPress with WooCommerce integration, indicating e-commerce capabilities for event ticketing or course registration. The site uses modern web technologies including jQuery, Swiper.js for sliders, and Google reCAPTCHA for bot protection, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is partially met with privacy and terms pages present, though cookie consent mechanisms are absent. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

C

CZECH.click

czech.click

58

CZECH.click is a small Czech digital agency founded in 2019, specializing in web design, graphic design, and digital marketing services. The company emphasizes a personal approach and creativity to help small businesses and entrepreneurs establish and grow their online presence. Their service offerings include WordPress web development, logo and visual identity design, PPC advertising, SEO, and animation. The website is professionally designed, mobile-optimized, and provides clear contact information including emails, phone numbers, and a contact form. Technically, the site runs on WordPress with common plugins and uses Google Analytics for tracking. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and explicit security headers. No privacy policy or terms of service were found, which could be improved for compliance. Overall, the site is trustworthy and well-positioned for its market segment.

P

PracevRegionu.cz - nabídky práce ve vašem regionu

pracevregionu.cz

43

PracevRegionu.cz is a Czech Republic regional job portal established in 2016, offering extensive job listings across multiple regions and municipalities. The platform targets both job seekers and employers, providing a marketplace for employment opportunities with over 155,000 job offers. The website is professionally designed with clear navigation and regional segmentation, supporting a focused business model of online job advertisement and regional employment facilitation. The business operates primarily in the Other industry sector, serving a small-sized market niche within the Czech Republic.

A

AmCham Slovenia

believeinslovenia.si

38

Believe in Slovenia is a cultural and promotional initiative managed by AmCham Slovenia, focusing on highlighting Slovenian ambassadors of friendship in the USA. The project aims to strengthen cultural ties and promote positive relations between Slovenia and the Slovenian diaspora in the United States. The website presents ambassador stories, regional selections, and partner collaborations, supported by government and chamber organizations. Technically, the website uses a standard open-source stack including jQuery, Bootstrap, and Google Analytics, with a cookie consent mechanism implemented. However, it lacks explicit privacy and terms of service policies, and security headers are not detected, indicating room for improvement in security posture. The domain is registered since 2014 with a reputable Slovenian registrar, consistent with the business history and legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.