Security Directory

S

Silné reči

silnereci.sk

61

Silné reči is a Slovak entertainment company specializing in stand-up comedy and theatrical performances, operating since 2009. The website showcases their events, formats, and corporate offerings, targeting a general audience interested in comedy and live shows. The company maintains a strong brand presence with active social media channels and a ticketing partner domain. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie consent, hosted by Websupport with DNSSEC and HTTPS enabled, indicating a mature digital infrastructure. Security posture is solid with Google reCAPTCHA and error tracking via Sentry, though some security headers are missing. Privacy compliance is partially addressed through a detailed cookie consent mechanism but lacks a dedicated privacy policy page. Overall, the site is professional, user-friendly, and trustworthy with no critical vulnerabilities detected.

S

Signal Technology Foundation

signal.org

65

Signal Technology Foundation operates the Signal messaging platform, a nonprofit organization dedicated to providing secure, private, and encrypted communication services globally. The website reflects a strong commitment to privacy, offering end-to-end encrypted messaging, voice, and video calls without ads or trackers. The platform targets privacy-conscious users seeking a trustworthy alternative to mainstream messaging apps. Technically, the website employs modern web technologies such as Bulma CSS, jQuery, and Lottie animations, hosted behind Cloudflare DNS, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some security policies like vulnerability disclosure and incident response contacts are not publicly documented. Overall, the website is professional, trustworthy, and aligns well with the nonprofit's mission.

B

Blizzard Entertainment

worldofwarcraft.com

75

World of Warcraft's official website, hosted under the Blizzard Entertainment domain, serves as a comprehensive portal for one of the most popular MMORPGs globally. The site targets gamers and fans of fantasy online games, offering game information, updates, and community engagement. As part of the Activision Blizzard group, it benefits from strong brand recognition and a large enterprise infrastructure. The website is professionally designed with excellent content quality and clear navigation, optimized for both desktop and mobile users. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and OneTrust for cookie consent management, indicating a mature digital infrastructure. Performance is fast, and SEO and accessibility practices are well implemented. However, explicit security headers are not visibly present in the HTML, and no public security policy or incident response information is found, which could be improved. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with comprehensive privacy and cookie policies and GDPR compliance indicators. Business credibility is high due to clear branding, association with Blizzard Entertainment, and professional presentation. WHOIS data is unavailable due to the domain being a subdomain of blizzard.com, which is typical for large enterprises and privacy protected domains. Overall, the website presents a low risk profile with strong trust indicators, though it could enhance transparency by publishing security policies and vulnerability disclosure information.

The website eu.shop.battle.net is the official e-commerce platform for Blizzard Entertainment, a leading global gaming company and subsidiary of Activision Blizzard. It offers digital game licenses, in-game content, and merchandise targeting gamers worldwide. The site demonstrates a mature digital infrastructure with modern web technologies, CDN usage, and strong performance optimizations. Security posture is robust, featuring HTTPS, comprehensive security headers, and cookie consent mechanisms aligned with GDPR compliance. While WHOIS data for the subdomain is unavailable, this is consistent with corporate subdomain management practices and does not detract from the site's legitimacy. Overall, the platform is professional, secure, and trustworthy, serving a large enterprise audience effectively.

B

Blizzard Entertainment

blizzard.com

74

Blizzard Entertainment is a globally recognized video game developer and publisher, known for iconic franchises such as Warcraft, Diablo, StarCraft, and Overwatch. The company operates as a major player in the digital entertainment industry, targeting gamers worldwide with high-quality gaming experiences. Their website reflects a mature digital presence with professional design, comprehensive privacy and cookie policies, and integration of modern marketing and analytics technologies. The technical infrastructure leverages cloud-based content delivery and advanced tracking tools, ensuring fast performance and good user experience across devices. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. Overall, Blizzard's website demonstrates a high level of professionalism and trustworthiness, consistent with its enterprise status and market position.

O

Odyzeo Services

odyzeo.com

58

Odyzeo Services operates as a small UX/UI design and development studio based in Slovakia, focusing on helping companies achieve their vision through design, prototyping, testing, and algorithmic solutions. The website presents a professional image with consistent branding and clear service offerings targeted at businesses seeking digital design and development expertise. The technical infrastructure includes modern tracking tools such as Google Analytics and Lead Forensics, with a custom CMS (ZeoCMS) powering the site. The site is mobile-optimized and uses reCAPTCHA to secure its contact form, indicating attention to user experience and basic security. However, the absence of visible security headers and privacy/cookie policies suggests room for improvement in compliance and security transparency. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy, although the active and professional website mitigates some risk. Overall, the site scores moderately on security and privacy, with recommendations to enhance policy disclosures and security headers to improve trust and compliance.

G

Gransy, s.r.o.

saiffer.net

8

The website saiffer.net is a personal blog and portfolio site primarily focused on creative writing including poetry, short stories, and personal reflections. It is operated by an individual known as Saiffer and has been active since at least 2005, consistent with the domain registration date. The site targets general internet users interested in Slovak language literary content and personal blogs. Technically, the site is built with basic HTML and CSS without modern frameworks or CMS, hosted on Websupport.sk. The design and navigation are functional but dated, with basic mobile optimization and accessibility. Security posture is weak, lacking HTTPS enforcement, security headers, and privacy or cookie policies, which poses risks for user data protection and compliance. No analytics or tracking scripts are detected, indicating minimal user tracking. WHOIS data shows privacy-protected registration, which is justified for a personal site. Overall, the site is safe for general audiences but requires improvements in security and privacy compliance to enhance trust and protect visitors.

Z

Zvláštne.sk

zvlastne.sk

9

Zvláštne.sk is a Slovak language media website specializing in reviews related to geek culture, including films, series, comics, PC games, and standup comedy. The site targets Slovak-speaking enthusiasts of geek culture and operates as a small niche content publisher. The business model revolves around content creation and publishing without visible e-commerce or subscription services. The website uses WordPress CMS with common plugins such as Yoast SEO and EWWW Image Optimizer, indicating a moderate level of technical maturity. Google Analytics is integrated for visitor tracking, but no explicit cookie consent mechanism or privacy policy is present, which may pose compliance risks. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and incident response contacts. Overall, the site is safe for general audiences and professionally presented, but improvements in privacy compliance and security practices are recommended.

M

meetnlearn s.r.o.

doucma.sk

55

DoučMa.sk is an established Slovak online platform operated by meetnlearn s.r.o. that connects students and tutors for personalized tutoring services across various subjects including languages and sciences. The platform offers both online and in-person tutoring options, enriched with user reviews, study questions, and educational blog content. It holds a solid market position in Slovakia with partnerships across multiple European countries, supported by recognized partners including European Union funding. Technically, the website employs modern web technologies such as React, Bootstrap, and integrates third-party services like Google Analytics and Facebook SDK, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though it lacks explicit security policies and some security headers. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable educational resource.

P

Počítačové a manažérske kurzy a školenia - Macrosoft

macrosoft.sk

10

Macrosoft is a reputable Slovakian company specializing in computer and managerial training courses, offering both in-person and online education. The company holds ISO 9001:2015 certification, underscoring its commitment to quality management. Its website targets individuals and organizations seeking professional development in IT and business skills, positioning itself as a leading training and certification center in Bratislava and online. The business model revolves around delivering educational services, including certification preparation and summer camps.

A

Aj Ty v IT o.z.

ajtyvit.sk

40

Aj Ty v IT is a Slovak non-profit organization dedicated to empowering girls and women by providing education, motivation, and community support in the field of information technology. The organization offers workshops, courses, motivational events, and mentorship programs targeting various age groups including school girls, adult women, and educators. Their market position is strong within Slovakia as a recognized entity promoting women in IT. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and tracking tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Hotjar. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and vulnerability disclosure. Overall, the website is professional, trustworthy, and compliant with GDPR regulations.

C

Cinema Storck

cinemastorck.be

54

Cinema Storck is a small, Belgium-based cinema venue focused on providing film screenings, weekly programs, and cultural film events. The website is built on Drupal 9 and integrates modern web technologies including Google Analytics and a cookie consent mechanism, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its target audience of general cinema enthusiasts. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with accessible privacy and cookie policies. Overall, the business appears legitimate and well-positioned locally with strong cultural partnerships.

Galerija Kapelica is a small, niche art gallery website primarily focused on presenting cultural and artistic exhibitions through an interactive Adobe Flash experience. The website's market position is local and specialized, targeting general audiences interested in art and culture. The business model appears non-commercial or cultural with no visible e-commerce or transactional services. Technically, the site relies on outdated Flash technology, which severely limits accessibility and performance on modern devices. The site lacks mobile optimization, accessibility features, and modern SEO practices. Security posture is weak, with no HTTPS enforcement, no security headers, and no visible privacy or cookie policies despite using Google Analytics for tracking. The domain is old and registered with a reputable registrar, indicating legitimacy, but the technical and security aspects require significant modernization. Overall, the site presents a low trustworthiness profile and poor user experience.

BioTehna is a Slovenian platform dedicated to artistic research of living systems, fostering collaboration between artists and scientists to explore innovative intersections of nature and technology. The platform operates as a non-profit entity supported by governmental and European institutions, positioning itself as a niche cultural and scientific hub in Slovenia. The website provides information about projects, events, news, and opportunities, targeting artists, researchers, and the interested public. Technically, the site is built on WordPress with common plugins such as LayerSlider and WP Google Maps, and uses Google Maps API for geolocation features. The site is moderately performant, mobile-optimized, and has good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

M

Mgr. Marek Sivčo

mareksivco.sk

56

The website mareksivco.sk represents the personal and professional portfolio of Mgr. Marek Sivčo, a Slovak teacher, web developer, poet, and podcaster. The site highlights his extensive experience in web development, teaching engagements, creative works, and supported projects. It targets individuals interested in IT education, Slovak geek culture, and creative arts. The business model is centered on personal branding and educational content delivery, with a niche market position in Slovakia and the broader Slovak-speaking community. Technically, the website employs a modern tech stack including PHP, WordPress, JavaScript, and various Adobe creative tools. Hosting is provided by Websupport, with DNSSEC enabled and HTTPS properly configured, indicating a secure and reliable infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. No analytics or tracking scripts are present, reflecting a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks security headers and formal security policies. No vulnerability disclosure or incident response information is provided, and no privacy or cookie policies are found, which are notable compliance gaps. The absence of forms reduces attack surface but also limits user interaction. Overall, the website is professional, trustworthy, and content-rich, with strong business credibility but room for improvement in privacy compliance and security best practices. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a vulnerability disclosure policy to enhance trust and compliance.

S

Spinkids.cz

spinkids.cz

47

Spinkids.cz is a Czech Republic-based e-commerce retailer specializing in creative and interactive children's toys, including popular brands such as Tlapková patrola, Bakugan, Rubik, Batman, and Harry Potter. The website targets parents and children seeking branded toys with fast delivery services. The business is relatively new, founded in 2023, and operates on the PrestaShop platform with a moderate digital maturity level. The site employs multiple analytics and marketing tools including Google Analytics, Matomo, Microsoft Clarity, and CJ.com affiliate tracking, indicating a focus on data-driven marketing and customer insights. Security posture is adequate with HTTPS enforced and tokenized forms, but lacks explicit security headers and published privacy or cookie policies, which are critical for GDPR compliance and user trust. No contact emails or phone numbers are directly available, which may impact customer support perception. Overall, the site is professionally designed, mobile-optimized, and safe for general audiences, but improvements in privacy compliance and security best practices are recommended.

S

Soare sekt a.s.

nassad.cz

50

Náš sad is a Czech-based producer and retailer of traditional fruit wines, operating under the company Soare sekt a.s. The website presents a professional and well-structured digital presence focused on promoting their fruit wine products, targeting adult consumers in the Czech Republic. The business model includes manufacturing and distribution through multiple retail chains and online sales. The website content is rich, localized in Czech, and includes detailed product descriptions and legal compliance information such as age verification and privacy policies. Technically, the site uses modern web technologies including Google Tag Manager and Google Fonts, with good mobile optimization and SEO practices. Security posture is moderate with age verification and cookie consent implemented, but lacks visible advanced security headers or explicit security policies. WHOIS data is unavailable, limiting domain trust assessment, but the website's contact information and content suggest legitimacy. Overall, the site scores well on content quality, privacy compliance, and business credibility, with room for improvement in security best practices and technical enhancements.

S

Soare sekt a.s.

soaresekt.cz

61

Soare sekt a.s. is a well-established Czech wine company founded in 1991, offering a broad portfolio of alcoholic and non-alcoholic wine products under multiple brands. The company holds a strong market position in the Czech Republic and exports internationally, supported by a German parent company. The website is built on modern frameworks (Nuxt.js and Vue.js) and features comprehensive privacy and cookie policies, including GDPR compliance and an age verification mechanism for alcohol-related content. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and user-friendly, targeting adult consumers and wine enthusiasts.

R

ROZBUBLEJ ZÁBAVU | ROBBY BUBBLE

robbybubble.cz

54

Robby Bubble is a well-established brand specializing in non-alcoholic sparkling beverages designed for children and family parties. The website presents a professional and visually appealing platform targeting Czech and Slovak markets, emphasizing fun and fruit-flavored party drinks. The domain has been registered since 2001, indicating a mature presence in the market. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with Google Tag Manager integrated for analytics. However, explicit privacy policies and terms of service are missing, which could impact compliance and user trust. Security headers and advanced security policies are not evident, suggesting room for improvement in security posture.

Bouygues is a large French multinational conglomerate operating in diverse sectors including construction, telecommunications, media, and real estate. The website serves as a corporate portal and magazine to communicate news and updates about the group. The site is professionally designed, mobile-optimized, and uses modern web technologies such as WordPress, Google Tag Manager, Matomo Analytics, and Cookiebot for consent management. Security measures include HTTPS enforcement, reCAPTCHA integration, and comprehensive cookie consent mechanisms. However, the absence of publicly available WHOIS data and registrant information slightly reduces domain trustworthiness. No explicit security policy or incident response contact information is published, which could be improved to enhance transparency and compliance. Overall, the website reflects a mature digital presence consistent with a large enterprise.

C

Communauté d'agglomération Seine-Eure

agglo-seine-eure.fr

9

The website represents the Communauté d'agglomération Seine-Eure, a regional government entity in Normandy, France, serving 60 communes and over 100,000 inhabitants. It provides local government information, community services, event announcements, and administrative resources to residents and businesses in the Seine-Eure territory. The site is built on WordPress, leveraging modern SEO practices and analytics tools such as Google Analytics and Tag Manager, and includes push notification capabilities with user consent via OneSignal. The design is professional, mobile-optimized, and accessible, reflecting a mature digital presence for a public sector organization. However, the absence of WHOIS data and registrant information is a notable anomaly that impacts domain trustworthiness from a registration perspective. Security posture is generally good with HTTPS enforced, but the site lacks explicit privacy, cookie, and security policies, which are important for compliance and user trust. Overall, the site is functional, informative, and trustworthy from a content and business perspective but would benefit from enhanced transparency and security documentation.

L

La Fédération Nationale des Agences d'Urbanisme

fnau.org

10

La Fédération Nationale des Agences d'Urbanisme (FNAU) is a French national network of approximately 50 urban planning agencies focused on territorial planning and development. The organization serves as a collaborative platform for public entities, local authorities, and state partners to coordinate urban development efforts. The website reflects a mature, professional presence with a focus on publications, events, and networking among urban planning professionals. Technically, the site is built on WordPress with common plugins and hosted by OVH sas, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance. Overall, the site is trustworthy and well-aligned with its stated mission and audience.

T

Terres d'Argentan

terresdargentan.fr

50

Terres d'Argentan is a French local government community portal serving 49 communes with approximately 34,000 inhabitants. The website provides comprehensive information about community services, events, public announcements, and citizen resources. It positions itself as an essential public service platform for residents and stakeholders in the Argentan area. The site is well-branded and consistent with official government communications. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, jQuery, Leaflet.js for maps, and integrates Google Fonts and Google reCAPTCHA for security. It employs Matomo for privacy-conscious analytics and uses the Complianz GDPR plugin to manage cookie consent, demonstrating a good level of digital maturity and compliance with European privacy regulations. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Cookie consent is actively managed, and analytics cookies are disabled by default. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with privacy laws. It serves its community audience effectively with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and continuing regular updates to maintain security posture.

V

Ville de Montreuil

montreuil.fr

11

The website www.montreuil.fr is the official digital presence of the city of Montreuil, France. It provides comprehensive municipal information, services, and citizen engagement tools. The site is well-branded, professionally designed, and targets a broad audience including residents, families, professionals, and associations. It offers multilingual support and a rich set of resources including news, events, and administrative procedures. Technically, the site is built on Drupal 11, leveraging modern web technologies and privacy-conscious analytics via Matomo. The site is mobile-optimized and accessible, with clear navigation and structured content. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data is typical for .fr domains managed by AFNIC and does not detract from the site's legitimacy. Overall, the site demonstrates a mature digital infrastructure suitable for a large municipal government entity. It balances user experience, privacy, and security effectively, though it could enhance transparency by publishing explicit security policies and incident response contacts.

B

Bouygues Immobilier Corporate

bouygues-immobilier-corporate.com

59

Bouygues Immobilier Corporate is a well-established real estate company with a strong presence in France and internationally. The website reflects a mature digital presence with comprehensive content about their activities, references, news, and corporate commitments. The technical infrastructure is modern, leveraging Drupal 10, Bootstrap 5, and privacy-focused analytics tools such as Matomo. The site implements GDPR-compliant cookie consent mechanisms and provides clear contact information and social media links. However, the WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy, though the website content and branding strongly support authenticity. Security posture is good with HTTPS and privacy SDKs, but explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for users.

L

L'Union sociale pour l'habitat

union-habitat.org

53

L'Union sociale pour l'habitat is a prominent French non-profit organization dedicated to supporting social housing entities (Hlm) and contributing to national housing policy development. The website serves as a comprehensive resource hub offering thematic content, publications, event information, and professional support to stakeholders in the social housing sector. The organization maintains a strong market position as a key actor in France's social housing ecosystem, with a large-scale presence and multiple affiliated entities. Technically, the website is built on Drupal CMS, employs modern web technologies such as lazy loading and Matomo analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security and privacy policies are not prominently published. The absence of WHOIS data limits domain trust verification but does not detract significantly from the site's legitimacy given its professional presentation and content. Overall, the site is well-designed, content-rich, and trustworthy for its target audience.

VINCI is a global leader in concessions, energy services, and construction, operating in over 120 countries with a workforce of approximately 285,000 employees. The company focuses on sustainable development, energy transition, and social progress, positioning itself as a key player in infrastructure and mobility solutions. The website reflects a mature digital presence with comprehensive corporate information, investor relations, and newsroom updates, supporting transparency and stakeholder engagement. Technically, the site is built on Drupal 10, uses Matomo for privacy-conscious analytics, and includes cookie consent mechanisms, indicating good privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response details are absent. The WHOIS data is unavailable, which slightly reduces transparency but does not detract from the site's legitimacy given the strong corporate branding and content. Overall, VINCI's website demonstrates professionalism, good technical implementation, and a strong business credibility profile.

V

VALHOR

valhor.fr

51

VALHOR is a French interprofessional organization dedicated to supporting and representing professionals in the horticulture, floristry, and landscaping sectors. Established in 2005, it serves as a key industry body in France, providing accompaniment and support to horticulture professionals. The website reflects a professional and consistent brand image, targeting industry stakeholders with relevant content and services. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, integrates Google Tag Manager and Matomo for analytics, and uses Axeptio for cookie consent management, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced, but lacks visible security headers and formal security policies, which could be improved. Privacy compliance is basic, with no explicit privacy or cookie policies detected in the provided content. Overall, the domain registration data aligns well with the organization's profile, supporting its legitimacy and trustworthiness.

S

SUEZ

toutsurmoneau.fr

68

The website www.toutsurmoneau.fr is a professionally maintained portal operated by SUEZ, a major player in the water and energy sector in France. It provides comprehensive information about water services in local communes, customer account management, contract subscription, and support services. The site targets residents and customers seeking water-related services and information. Technically, the website employs modern technologies including React, Cloudflare Turnstile captcha, Cookiebot for consent management, and integrates analytics and monitoring tools such as Google Tag Manager and New Relic. The site is hosted likely behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response contacts are not published, and no vulnerability disclosure or security.txt file is found. Overall, the site is trustworthy, secure, and professionally operated, reflecting the reputation of SUEZ.

A

Agence Nationale pour la Rénovation Urbaine

anru.fr

73

The Agence Nationale pour la Rénovation Urbaine (ANRU) is a French public agency dedicated to financing and supporting the transformation of urban neighborhoods under the national urban policy. The website serves as an authoritative resource hub offering detailed information on programs, recent projects, publications, and innovation initiatives related to urban renewal across France. It targets public sector stakeholders, journalists, startups, beneficiaries, and job candidates. Technically, the site is built on Drupal 10, employs Matomo for analytics, and uses a cookie consent mechanism compliant with GDPR. The site is well-structured, mobile-optimized, and professionally designed, reflecting its government agency status. Security posture is good with HTTPS enforced and privacy policies in place, though some HTTP security headers could be improved. WHOIS data is unavailable due to AFNIC policies for .fr domains but the domain and content strongly indicate legitimacy. Overall, the site is a reliable and professional digital presence for ANRU.

C

Caux Seine agglo

cauxseine.fr

61

Caux Seine agglo is a French regional government entity providing local community services and information to residents and businesses in the Caux Seine area. The website serves as an official portal for announcements, events, and public services, targeting a regional audience. The site is built on WordPress and leverages modern web technologies including Matomo for analytics and Google Fonts for typography. The technical infrastructure is moderately optimized with good mobile responsiveness and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of a privacy policy and WHOIS data reduces compliance and trust scores. Overall, the site is professional and trustworthy but could benefit from enhanced privacy disclosures and security hardening.

E

Efficacity

efficacity.com

52

Efficacity is a French R&D institute dedicated to the decarbonation of cities, providing innovative software solutions, consulting, and labels to support sustainable urban development. Established in 2014 at the initiative of the French State, it serves a broad audience including local governments, urban planners, industrial clients, and state operators. The organization is well-positioned in the energy and government sectors with over 300 partners and clients nationally and internationally. Technically, the website is built on WordPress with Elementor and integrates modern SEO and analytics tools, hosted by Scaleway SAS. Security posture is solid with HTTPS and domain locking, though improvements can be made in DNS security and security headers. Privacy compliance is moderate due to the absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, supporting its business credibility.

L

Laval Agglomération

agglo-laval.fr

63

Laval Agglomération operates as the official regional government body for the Laval area in the Mayenne department of France. The website serves as a comprehensive portal offering information and services related to economic development, urban planning, public services, tourism, and community engagement for approximately 100,000 residents and over 6,000 businesses. The site is well-structured with clear navigation and targets local residents, businesses, and visitors. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery and Google Fonts, and employs Matomo for analytics with privacy-conscious configurations such as Do Not Track support and explicit cookie consent management via tarteaucitron.js. Security posture is moderate with room for improvement in HTTP security headers and SSL configuration transparency. The absence of WHOIS data limits domain registration transparency but does not detract from the site's legitimacy given its official nature and content quality. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, supporting user privacy rights. Overall, the site demonstrates a solid digital presence for a government entity with good content quality and user experience.

F

France Ville Durable

sustainablecitybyfrance.org

51

Sustainable City by France is a French non-profit association dedicated to accelerating the transition of cities and territories towards sustainability and resilience. It brings together local authorities, state entities, companies, and experts to collaborate on sustainable urban development projects. The website reflects a medium-sized organization with strong government and private sector partnerships, offering resources, project mapping, and events to its audience. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and is hosted by OVH sas. Security posture is good with HTTPS and reCAPTCHA implemented, though there is room for improvement in DNS security and HTTP headers. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche.

L

La Corac

corac.fr

44

La Corac is a regional non-profit network coordinating international volunteer workcamps in the Provence-Alpes-Côte d’Azur region of France. The organization promotes cultural heritage preservation, ecological practices, and community engagement through volunteer projects involving participants from over 60 nationalities. The website is professionally designed, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins and integrates multimedia content such as Vimeo videos and Google Maps. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly reduces domain trust but the active social media presence and detailed content support legitimacy. Overall, the site effectively serves its target audience of volunteers and associations, providing clear navigation, contact information, and community testimonials.

S

Statik

statik.be

52

Statik is a medium-sized digital agency based in Leuven, Belgium, specializing in sustainable business strategies, web development, digital products, and online marketing. The company positions itself as a force for good, targeting impact organizations and businesses preparing for a sustainable future. Their client portfolio includes reputable institutions and organizations, reinforcing their market credibility. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site uses modern JavaScript frameworks, SVG graphics, and integrates analytics tools such as Piwik PRO and Google Tag Manager, indicating a well-rounded digital infrastructure. Security-wise, the site enforces HTTPS and includes privacy and cookie policies with consent mechanisms, though it lacks some advanced security headers and explicit incident response information. Overall, the domain appears legitimate despite the absence of detailed WHOIS data, likely due to privacy protection. The site demonstrates good privacy compliance and business credibility, with room for security enhancements.

P

Pricemania Academy

ecommerce-katalog.sk

42

Pricemania Academy operates the ecommerce-katalog.sk website, a Slovak-language online catalog of verified e-commerce suppliers and service providers. The site targets e-commerce businesses seeking trusted partners and offers detailed service descriptions, references, and benefits. The business model is a niche directory with a focus on quality and trust, leveraging over a decade of experience in online business. Technically, the site uses modern JavaScript libraries, Google Analytics, and Google reCAPTCHA for form security, indicating moderate digital maturity. However, there is no visible privacy or cookie policy, and security headers are not detected, which are areas for improvement. Overall, the security posture is moderate with basic protections in place but lacking advanced security policies. The domain registration is consistent and legitimate, supporting the trustworthiness of the site. Strategic recommendations include adding comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response contacts to improve compliance and trust.

P

Pricemania s.r.o.

pricemania.cz

46

Pricemania.cz is a well-established Czech price comparison platform operated by Pricemania s.r.o., providing consumers with access to millions of product offers from hundreds of online stores. The website offers services including price comparison, e-shop quality verification, and advertising programs, positioning itself as a trusted intermediary in the Czech e-commerce market. The platform targets general consumers seeking to find the best prices and reliable sellers. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, and Bootstrap, with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is basic with visible cookie and privacy policies, but no explicit security or incident response policies are found. WHOIS data is privacy protected, which is common but reduces transparency. Overall, the site is professional, trustworthy, and safe for general audiences.

V

vshosting~

vshosting.sk

63

vshosting~ is a Czech-based managed cloud and dedicated server provider established in 2006, offering high-performance cloud solutions tailored for enterprise clients. They provide a broad portfolio of services including GPU dedicated servers, private cloud, managed Kubernetes, and managed AWS, targeting B2B customers requiring scalable, secure, and reliable IT infrastructure. The company operates under the Contabo Group umbrella, leveraging a global network of datacenters to ensure high availability and low latency. Their website reflects a mature digital presence with modern technologies and strong branding. Security posture is solid with HTTPS, CAPTCHA protections, and certified administrators, though public security policies are not explicitly published. Privacy compliance is robust with GDPR-aligned policies and consent mechanisms. Overall, vshosting~ demonstrates a strong market position in the European managed cloud sector with a professional and trustworthy online presence.

A

Adbros s.r.o.

adbros.cz

58

Adbros s.r.o. is a well-established Czech digital agency founded in 2005, specializing in web and mobile application development, digital marketing, data integration, and custom software products. The company serves a B2B market with a strong portfolio including major clients like Philip Morris International and McDonald's Cup. Their website reflects a professional and modern digital presence, leveraging advanced technologies such as NuxtJS and Vue.js. Security posture is solid with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with a comprehensive GDPR policy and cookie consent mechanism. Overall, the company demonstrates a mature digital infrastructure and trustworthy business operations.

M

Mucha Foundation

muchafoundation.org

45

The Mucha Foundation is a well-established non-profit organization dedicated to preserving and promoting the legacy of Alphonse Mucha, a renowned Czech Art Nouveau artist. The foundation operates a comprehensive website offering access to its extensive art collection, educational timelines, exhibitions, and news updates. It targets art enthusiasts, cultural institutions, and the general public interested in Mucha's work and Art Nouveau. The foundation's market position is that of a leading authority and custodian of Mucha's legacy, supported by a consistent brand presence and active social media engagement. Technically, the website employs a custom or proprietary CMS with a technology stack including jQuery, Nivo Slider, Google Analytics, and social media SDKs. The site is hosted under the domain registered with IONOS SE since 2000, indicating a mature digital presence. Performance is moderate with basic mobile optimization and accessibility features. SEO practices are good, with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and modern security headers, and it uses an outdated jQuery version that could pose vulnerabilities. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. No explicit incident response or security policy pages are found. The site does not expose sensitive data and uses secure forms with validation. Overall, the website is professional, trustworthy, and content-rich, with minor technical and security improvements recommended. The risk level is low, but upgrading libraries, enabling DNSSEC, and adding security headers would enhance the security posture and compliance further.

V

VINO-KLUB

vino-klub.cz

73

Vino-klub.cz is a Czech Republic based luxury online wine retailer specializing in wines from Czechia, Moravia, and international sources. Established in 2006, the company operates a Magento-based e-commerce platform offering thematic wine collections targeting mature wine consumers. The website demonstrates a good level of digital maturity with modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot for cookie consent management. SEO is enhanced by structured data (JSON-LD) and proper meta tags. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Privacy compliance is partial, with cookie consent mechanisms present but no explicit privacy policy or terms of service found in the provided content. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

A

ADAM VELKOOBCHOD, s.r.o.

adam-velkoobchod.cz

45

ADAM VELKOOBCHOD, s.r.o. is a Czech Republic-based company specializing in wholesale and retail distribution of food, alcoholic beverages, non-alcoholic drinks, tobacco products, confectionery, and small drugstore items. The company primarily serves the Moravian region with a network of retail stores and a delivery system. Their website reflects a mature business with a clear market position in regional retail and wholesale sectors, supported by partnerships with numerous well-known suppliers and brands. The company maintains an active social media presence and offers customer engagement through newsletters and promotions. Technically, the website is built on WordPress using Bootstrap and jQuery, with additional plugins for contact forms and responsive image galleries. The site is HTTPS secured and includes cookie consent mechanisms compliant with GDPR. Performance and mobile optimization are good, though accessibility features are basic. Analytics are implemented via Google Analytics, and marketing tools include Facebook SDK for retargeting. From a security perspective, the site uses HTTPS but lacks advanced security headers and explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces domain trustworthiness, but the website content and business operations appear legitimate and professional. Overall, the website presents a solid business presence with good technical implementation and privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the security posture and user trust.

F

FLOSMAN a.s.

flosman.cz

39

FLOSMAN a.s. is a Czech Republic-based medium-sized company specializing in wholesale food distribution and operating its own retail network including brands like Flop and Potraviny CZ. Established in 2000, it serves southern, western, and central Czech regions as well as Vysočina and southern Moravia. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, it is built on WordPress with a range of plugins and uses Google Analytics and Tag Manager for tracking. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its market niche.

T

Tamda Foods

tamda.eu

53

Tamda Foods is a subsidiary of the TAMDA Group, operating primarily in the retail and e-commerce sectors focused on food products for Vietnamese-speaking consumers in Europe. The website presents a professional and consistent brand image with clear navigation, membership programs, and promotional campaigns. The business model revolves around retail sales, promotions, and customer engagement through membership and store locator services. Technically, the site is built on modern frameworks such as Next.js and React, with integrations for Google Tag Manager and Facebook Pixel for analytics and marketing purposes. Hosting is provided by OVH SAS, a reputable registrar and hosting provider. Security posture is adequate with HTTPS enabled but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible GDPR consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

P

PENNY Market Česká republika

penny.cz

67

PENNY Market Česká republika operates as a major retail supermarket chain in the Czech Republic, providing grocery and household products to a broad consumer base. The website serves as a digital storefront and information portal, featuring store locations, promotions, and company information. It is part of the REWE Group, a large European retail conglomerate, which supports its market position and brand recognition. The site targets general consumers in the Czech market with a focus on retail grocery shopping. Technically, the website employs modern frontend technologies such as Vue.js and uses Google Fonts and Material Icons for UI consistency. The site is mobile-optimized and demonstrates moderate performance with good SEO and accessibility basics. Security best practices are observed with HTTPS enforcement and standard security headers, though some advanced security disclosures and policies are absent. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Contact information is clearly provided, enhancing business credibility. However, the lack of WHOIS transparency due to privacy protection limits domain registration visibility. Overall, the website presents a professional, trustworthy, and secure digital presence for PENNY Market in the Czech Republic. Strategic improvements could include publishing explicit security policies, incident response contacts, and vulnerability disclosure mechanisms to further enhance trust and compliance.