Security Directory

C

Cognito.CZ, s.r.o.

pincity.cz

60

PinCity is a Czech Republic-based platform focused on aggregating municipal sentiment data and urban development information on a single map. The platform is supported by European Union funding and targets municipalities, regional planners, and government entities. The website is professionally designed, multilingual, and provides a contact form for inquiries. Technically, the site uses Cloudflare for DNS and CDN services, Google Analytics and Tag Manager for tracking, and is generated using Winston 4. Security posture is good with HTTPS enabled, but lacks security headers and explicit privacy and cookie policies, which are compliance gaps. No vulnerabilities or suspicious activities were detected. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

P

POVED - Plzeňský organizátor veřejné dopravy

idpk.cz

49

The website www.idpk.cz serves as the official portal for POVED - Plzeňský organizátor veřejné dopravy, the integrated public transportation organizer for the Plzeň region in the Czech Republic. It provides comprehensive information on public transport schedules, fare calculations, service updates, and related news. The site targets residents and visitors of the region seeking reliable transit information. The business operates as a regional transportation authority with a medium-sized footprint and a focus on public service. Technically, the website employs modern web technologies including HTTPS, Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management. The site is well-structured with good mobile optimization and basic accessibility features. Performance is moderate with no significant technical debt detected. The use of reCAPTCHA indicates attention to bot mitigation. From a security perspective, the site enforces HTTPS and uses a Content-Security-Policy header to upgrade insecure requests. Cookie consent is actively managed, and tracking scripts are loaded with user consent. However, additional security headers such as HSTS, X-Frame-Options, and Referrer-Policy could enhance security posture. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website demonstrates a solid security and privacy posture appropriate for a public transportation service. The lack of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen trust and compliance.

C

CAZER s.r.o.

cazer.cz

57

CAZER s.r.o. is a Czech Republic-based company specializing in industrial automation, custom machinery, and robotization since 1992. The company positions itself as a leading provider of tailored production technologies and services including design, manufacturing, servicing, and training. Their target audience includes industrial manufacturers seeking automation and precision mechanical solutions. The website reflects a medium-sized enterprise with a professional online presence, clear contact information, and active social media engagement. Technically, the website employs modern web technologies, is mobile optimized, and includes cookie consent mechanisms indicating GDPR awareness. Security posture is good with HTTPS enforced, though security headers could be improved. No WHOIS data was found, which slightly impacts trust but the website content and contact details support legitimacy. Overall, the site is well-structured, professional, and safe for general audiences.

A

Altic Point s.r.o.

altic.cz

59

Altic Point s.r.o. is a small Czech manufacturing company specializing in professional shelving and storage systems for industrial, commercial, and service sectors. Their offerings include industrial shelving, archival and office shelving, warehouse mezzanines, and automated pallet storage solutions, complemented by expert installation services. The company targets businesses requiring reliable and customized storage solutions, emphasizing quality, safety, and space optimization. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and responsive design techniques ensuring good performance and accessibility across devices. The presence of cookie consent mechanisms and privacy policies indicates awareness of GDPR compliance. However, the absence of a robust Content-Security-Policy and explicit security or incident response policies suggests areas for improvement in security posture. Security-wise, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Tracking scripts from Google and Seznam are used responsibly with user consent. The lack of WHOIS data reduces domain trustworthiness slightly, but the website's professional content and contact information support legitimacy. Overall, the site demonstrates a solid security baseline but would benefit from enhanced security headers and published security policies. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing a strict Content-Security-Policy, publishing security and incident response information, and maintaining regular audits of third-party scripts. These steps will enhance trust and security culture, supporting long-term business credibility and compliance.

V

Vinařství Herůfek

vinarstviherufek.cz

58

Vinařství Herůfek is a modern winery based in Zaječí, Czech Republic, offering a range of services including wine production, an e-shop for direct sales, accommodation, wine tastings, and corporate wine gifts. The website targets wine consumers, tourists, and corporate clients seeking quality wine and hospitality experiences. The business operates in the hospitality and retail sectors with a small company size and a regional market position. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and cookie consent scripts, with a responsive design optimized for mobile devices. Performance is moderate, and SEO practices are good. However, no CMS or hosting provider information was detected. The site enforces HTTPS and includes an age verification modal to comply with alcohol sales regulations. From a security perspective, the site has a good SSL configuration and cookie consent mechanisms but lacks visible security headers and explicit incident response or security policies. No WHOIS data was available, which reduces transparency and trustworthiness. Social media presence and professional design contribute positively to the site's credibility. Overall, the website is functional, professional, and compliant with basic privacy and age verification requirements but would benefit from enhanced security headers, visible contact information, and WHOIS transparency to improve trust and security posture.

B

BrandCloud s.r.o.

brandcloud.pro

66

BrandCloud s.r.o. operates a sophisticated SaaS platform designed to streamline brand asset management for businesses globally. The platform offers comprehensive services including file management, content creation, sharing, user and team management, and version control, targeting marketing teams and brand managers. Positioned as a secure and compliant solution, BrandCloud emphasizes security standards suitable for banking and insurance sectors, enhancing its market credibility. Technically, the website leverages modern frameworks such as React and Next.js, delivering a responsive, accessible, and well-structured user experience. Security posture is strong with HTTPS enforcement, two-factor authentication, audit logging, and GDPR compliance, although public incident response and vulnerability disclosure information are absent. Overall, BrandCloud presents a professional, trustworthy, and technically mature digital presence with room for improvement in transparency around incident handling and vulnerability reporting.

M

Martin Winkler

martinwinkler.cz

45

Martin Winkler is a seasoned freelance web developer based in Brno, Czech Republic, offering professional web design, responsive HTML coding, WordPress CMS development, and custom e-shop creation services. With 17 years of experience, the business emphasizes reliability, speed, and clarity in delivering client projects. The website showcases a comprehensive portfolio of completed projects and client references, positioning the company as a trusted local expert in web development services. Technically, the website is built on WordPress with modern web technologies including HTML5, CSS3, JavaScript, and SVG graphics. It integrates Google Analytics for visitor tracking and Google reCAPTCHA for form security. The site is well-optimized for mobile devices, fast loading, and includes a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy page was found. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements best practices such as automated backups and quarterly manual updates. However, explicit security headers are not detected, and no published security or incident response policies exist. The absence of WHOIS data limits domain registration transparency but does not detract from the professional presentation and trustworthiness of the business. Overall, the website demonstrates a high level of professionalism, technical maturity, and security awareness suitable for a small freelance business. Strategic improvements include publishing privacy and security policies, enhancing security headers, and improving transparency around domain registration to further strengthen trust and compliance.

O

Orwin s.r.o.

orwin.cz

57

Orwin s.r.o. is a Czech-based technology company specializing in custom web development, including B2C e-commerce shops, B2B portals, and comprehensive web solutions. The company targets businesses requiring tailored online platforms integrated with ERP and CRM systems, emphasizing service guarantees and expert project management. The website reflects a professional and consistent brand image with clear business offerings and client references. Technically, the site uses modern JavaScript libraries such as Swiper.js and Plyr.js, with a custom CMS implied. Hosting is managed via a Czech registrar with stable name servers. Security posture is moderate, with no visible HTTPS or security headers data provided, and no privacy or cookie policies present, indicating compliance gaps. Contact information is clearly displayed, but no social media or analytics tools are detected. Overall, the site is accessible, well-designed, and business credible but would benefit from enhanced privacy and security disclosures.

The website www.jagermeister.com is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. This prevents access to any substantive content, metadata, or business information. The domain WHOIS data is unavailable, indicating either the domain is unregistered, privacy protected, or there is a mismatch in the queried domain name. The site appears to be related to the Jägermeister brand, a well-known alcoholic beverage, but no direct content confirms this due to the block. The technical infrastructure relies on Cloudflare for security and performance, but the inability to access the site limits assessment of the technology stack and security posture. Overall, the site’s security posture cannot be fully evaluated, and the lack of accessible business and compliance information reduces trust and transparency.

M

Městské informační centrum Kolín

kolinzije.cz

49

Kolín žije is an official municipal portal dedicated to tourism, culture, and leisure activities in the city of Kolín, Czech Republic. It provides comprehensive information about local events, gastronomy, accommodation, and practical tips for visitors and residents. The website is operated by the city's information center and serves as a key digital touchpoint for promoting local culture and tourism. The portal maintains a consistent brand identity aligned with the city and integrates social media channels to enhance community engagement. Technically, the site is built on the Vismo CMS platform, leveraging modern web technologies including Google Tag Manager, Google Analytics, and OpenWeatherMap API for weather updates. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience across devices. Security-wise, the website enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. However, it lacks a published security policy and incident response contacts, which are recommended for enhanced trust and compliance. Overall, the site demonstrates a solid digital presence with moderate tracking and good privacy practices, suitable for its government and tourism-focused mission.

S

smsticket - Ticket sales

smsticket.cz

65

The website www.smsticket.cz is an online ticket sales platform primarily serving the Czech Republic market. It offers a wide selection of event tickets, including concerts, theater, and cultural events, with a user-friendly interface and mobile optimization. The platform supports user account management and social login via Facebook, enhancing user convenience. The business model focuses on facilitating event attendance through online ticket purchases, targeting general consumers interested in entertainment and cultural activities. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and templating with Handlebars.js. It uses HTTPS with good SSL configuration and includes security measures such as CSRF tokens in forms. The site is mobile optimized and has a moderate performance profile. However, it lacks some advanced security headers and accessibility features. From a security and compliance perspective, the site demonstrates basic security hygiene but lacks visible privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy, although the site content and HTTPS presence suggest legitimate operations. There is no evidence of incident response or vulnerability disclosure mechanisms. Overall, the site is functional and professionally presented but would benefit from enhanced transparency, privacy compliance, and security best practices to improve trust and regulatory adherence.

D

DATALAN, a.s.

digitalnemesto.sk

46

Digitálne mesto is a Slovak online portal providing electronic services primarily for municipalities and citizens. Operated by DATALAN, a.s., the platform offers a range of e-services and information relevant to local governments and residents. The website is professionally designed, targeting Slovak municipalities with a clear focus on government digital transformation. The company holds recognized ITAPA awards, indicating a reputable market position in the regional government technology sector. Technically, the site uses standard web technologies including jQuery, Font Awesome, and Google Fonts, with a custom CMS or platform. While the site is functional and moderately optimized for mobile, there is room for improvement in accessibility and performance. Security posture is adequate with HTTPS assumed, but lacks explicit security headers and policies. Privacy compliance is partial, with no cookie consent mechanism or detailed privacy policy visible. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security transparency.

W

wflow.com

wflow.cz

67

wflow.com is a technology company specializing in digital accounting automation and corporate expense management. The platform leverages AI to extract data from invoices and receipts, automates approval workflows, and integrates with popular ERP and banking systems. It targets a broad audience including startups, SMEs, large enterprises, and accounting firms primarily in the Czech Republic and Slovakia. The company positions itself as a modern alternative to traditional accounting software, emphasizing time and cost savings for its clients. The website is professionally designed, multilingual, and rich in content including case studies and client testimonials, reflecting a mature digital presence. Technically, the website is built on Webflow CMS with modern JavaScript libraries for UI components and sliders. It uses Google Fonts and CDN hosting for performance optimization. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. Security posture is strong with HTTPS enforced, ISO 27001 certification, and mention of penetration testing and two-factor authentication. However, explicit security headers are not detected, and no public incident response or vulnerability disclosure policies are found. Overall, the security and privacy compliance are well addressed with GDPR adherence and clear privacy and cookie policies. Contact information is transparent, including emails, phone numbers, and social media channels. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional appearance and trust signals on the website. Strategically, wflow.com is well positioned in the accounting technology market with a comprehensive SaaS offering. The company should enhance transparency around security incident response and vulnerability disclosure to further build trust. Adding explicit security headers and publishing data retention policies would improve security posture and compliance visibility.

A

Asociace soukromého zemědělství ČR

asz.cz

47

The website www.asz.cz represents the Asociace soukromého zemědělství ČR, a Czech association dedicated to private farming and family farms. It serves as an information hub providing news, events, advocacy, and educational resources for farmers and agricultural stakeholders in the Czech Republic. The site is professionally designed with a clear navigation structure and regularly updated content, targeting a medium-sized audience within the agricultural sector. Technically, the website employs modern web technologies including Google Tag Manager for analytics, Leaflet.js for mapping, and a consent management platform to comply with cookie regulations. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security posture is good with HTTPS enforced, but lacks advanced security headers and explicit security policies. From a security and compliance perspective, the site does not expose sensitive data and uses a consent mechanism for cookies, but lacks visible privacy policy and terms of service pages, which could be improved for better GDPR compliance. No WHOIS data is available, likely due to privacy protection, but the website content and structure indicate a legitimate and established organization. Overall, the website is a trustworthy and professional platform for its target audience, with recommendations to enhance security headers, publish clear privacy and security policies, and provide incident response contacts to strengthen its security posture and compliance.

S

SKI Bižu s.r.o.

skibizu.cz

51

SKI Bižu s.r.o. operates the SkiJizerky.cz website, providing winter sports services in the Jizera Mountains region of the Czech Republic, including ski areas Tanvaldský Špičák, Severák, and Bedřichov. The company offers ski passes, ski schools, equipment rentals, and transportation services such as skibus. The website targets winter sports enthusiasts and tourists seeking family-friendly ski resort experiences. The business appears to be a small regional operator with a focus on hospitality and tourism services. Technically, the website uses modern web technologies including jQuery and Adform tracking scripts, with a responsive design and good SEO practices. The site is served over HTTPS, includes cookie consent mechanisms, and provides multilingual support. However, no CMS or hosting provider details were identified, and some security headers appear to be missing. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website is professional and trustworthy in appearance, with good content quality and user experience. The main risk lies in the unknown domain registration status and limited publicly available contact information. Strategic improvements in security headers, incident response transparency, and WHOIS registration clarity are recommended.

E

ENVItech Bohemia s.r.o.

envitech-bohemia.cz

65

ENVItech Bohemia s.r.o. is a Czech-based company specializing in environmental monitoring services and products, particularly air quality monitoring. Established in 1992, the company offers a comprehensive portfolio including monitoring systems, meteorological equipment, emission measurement, calibration, detection systems, and related software solutions. The company holds multiple certifications such as ISO 9001 and ISO 14001, reinforcing its credibility and compliance with industry standards. Their market position is solid within the environmental technology sector in the Czech Republic and broader EU region, supported by a network of subsidiaries and partner institutions. Technically, the website is built on the ByznysWeb.cz CMS platform, utilizing modern web technologies including Google Analytics for user tracking and consent management compliant with GDPR. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content. However, there is room for improvement in security headers and explicit incident response information. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern, potentially impacting trustworthiness and domain legitimacy verification. Overall, the website presents a professional and trustworthy front for ENVItech Bohemia s.r.o., with strong compliance and business credibility indicators. Strategic improvements in domain registration transparency and enhanced security headers would further strengthen their security posture and trust signals.

Č

Český horolezecký svaz

horosvaz.cz

55

The Český horolezecký svaz (Czech Mountaineering Association) operates as a national non-profit organization dedicated to supporting climbers, mountaineers, and skialpinists in the Czech Republic. The website serves as an information hub offering membership services, insurance products, event organization, educational resources, and maintenance of climbing areas. It holds a strong market position as the official governing body for climbing sports in the country, supported by partnerships with recognized brands and international federations. Technically, the website is built on a modern CMS platform (Vizus CMS) with standard web technologies and includes integrations such as Google Tag Manager and EmbedSocial for social media content. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy and terms of service documentation. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the organization's public presence and affiliations. Overall, the website is professional, trustworthy, and serves its community effectively.

S

Sport in Art

sportin.art

52

Sport in Art is a specialized online platform that uniquely combines the worlds of sport and visual art. It operates as an online magazine, a sales gallery for original artworks, and an initiator of art projects inspired by sports. The platform targets art collectors, sports enthusiasts, investors, and cultural audiences, offering curated content, exhibitions, and a print magazine with international design awards. The business model integrates content publishing, e-commerce, and event organization, positioning Sport in Art as a niche leader in its sector within the Czech Republic.

Z

Zucchetti Hospitality s.r.l.

ovosodo.net

37

Ovosodo is a digital agency specializing in UI/UX, web design, and development services, operating as a business unit of Zucchetti Hospitality s.r.l., part of the larger Zucchetti Group. The company targets businesses seeking comprehensive digital solutions, emphasizing equal attention to code and design. Their market position is that of a specialized subsidiary within a reputable technology and hospitality group, founded in 2003. The website reflects a professional and consistent brand image with clear service offerings and recent project showcases. Technically, the website employs modern web technologies including jQuery, Vimeo Player integration, and Iubenda for cookie consent management, alongside Google Analytics and Tag Manager for tracking. The site is mobile optimized with good SEO and basic accessibility features. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, ensuring GDPR compliance. However, it lacks explicit security policies and incident response contacts, and no advanced security headers were detected. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and business information are credible and professionally presented. Overall, the website presents a low risk with good privacy compliance and business credibility, but the missing WHOIS data and lack of explicit security policies suggest areas for improvement to enhance trust and security posture.

P

PERI, spol. s r.o.

peri.cz

33

PERI, spol. s r.o. is a leading Czech supplier of construction equipment specializing in formwork, scaffolding, and engineering services. With over 50 years of experience, the company offers innovative and efficient solutions tailored to meet diverse project requirements. The website reflects a mature digital presence with comprehensive product portfolios, customer portals, and active communication channels. Technically, the site employs modern web technologies, including JavaScript frameworks, SVG icons, and consent management tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be further confirmed. The absence of WHOIS data is likely due to privacy protection, common for enterprises of this scale. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

R

Rodinné centrum BABOČKA

rcbabocka.cz

58

Rodinné centrum BABOČKA is a small family-oriented center based in Prague, Czech Republic, focused on providing educational and recreational activities for children aged from 6 months to 8 years and their parents. Established since 2009, it offers a variety of services including a preschool program (Školička), diverse courses, parenting academy, coaching, events, family stays, and birthday celebrations. The center targets families seeking a safe, friendly, and developmentally supportive environment for their children. Technically, the website is built on the Webnode CMS platform, hosted via Amazon Cloudfront CDN, and uses modern web technologies such as HTML5, CSS3, and JavaScript. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal privacy or security policies. The WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces transparency but is consistent with a small non-profit entity. Overall, the website is professional, content-rich, and safe for general audiences.

K

AdZilla: The Ad-Eating Dino of Solana

karlovarsky-kraj.cz

54

AdZilla is a small-scale cryptocurrency project centered around a Solana-based meme coin featuring a dinosaur mascot that 'eats' online ads. The website provides clear instructions for users to create a wallet, acquire Solana tokens, and swap them for the ADZILLA token via decentralized exchanges. The business model focuses on engaging both crypto and non-crypto users through creative advertising campaigns and token ecosystem participation. The site is moderately well designed with good mobile optimization and user experience, but lacks comprehensive privacy, cookie, and security policies. No contact information or formal business credentials are provided, which limits trust and credibility. Technically, the site uses standard web technologies and integrates with popular Solana wallets and exchanges, but lacks advanced security headers and HTTPS verification details.

T

TYROMONT Alpin Technik GmbH

tyromont.com

39

TYROMONT Alpin Technik GmbH is a specialized manufacturer and trader of alpine rescue equipment with a history spanning approximately 70 years. The company serves a global clientele including mountain rescue, ski patrol, air rescue, and height rescue organizations. Their website presents a professional and comprehensive product catalog, clear contact information, and relevant business documentation such as terms of business and data protection policies. Technically, the website employs modern JavaScript libraries like jQuery and Flickity, and uses Google Analytics with consent-based loading. The site is mobile-optimized and well-structured, providing a good user experience. However, the absence of WHOIS registration data for the domain www.tyromont.com is a notable inconsistency that impacts domain trustworthiness. Security headers are not visibly implemented, and no explicit cookie consent mechanism is present, which are areas for improvement. Overall, the website is professional and trustworthy from a business perspective but could enhance its security posture and privacy compliance.

A

Alpine Rettung Schweiz

alpinerettung.ch

52

Alpine Rettung Schweiz is a well-established Swiss non-profit foundation specializing in alpine rescue operations. Supported by key partners such as Rega and the Swiss Alpine Club (SAC), it operates a network of 84 rescue stations and approximately 3,400 volunteer rescuers. The organization serves as the primary terrestrial alpine rescue entity for most Swiss cantons, providing rapid response and comprehensive training programs. The website reflects a mature digital presence built on TYPO3 CMS, offering clear navigation, multilingual support, and professional content including news, publications, and organizational information. Security posture is solid with HTTPS and secure external linking, though it lacks explicit security policies and cookie consent mechanisms. Overall, the site demonstrates high trustworthiness and professionalism, aligning well with the organization's mission and market position.

The website www.parkovanivbrne.cz serves as the official information portal for the new parking system in Brno, Czech Republic. It provides comprehensive details about parking zones, regulations, payment options, and mobility funds targeted at residents, subscribers, and visitors. The site is positioned as a municipal service platform, aiming to simplify parking management and user experience in the city. Technically, the site employs modern web technologies including HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, Smartlook, and Cookiebot for analytics and marketing purposes. The site is mobile optimized and features a cookie consent mechanism compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent to manage user privacy. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data reduces trust slightly but does not negate the official nature of the site. Overall, the website presents a professional, trustworthy, and user-friendly platform for parking information in Brno. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and providing clearer contact information to improve business credibility and user trust.

I

International Commission for Alpine Rescue

alpine-rescue.org

66

The International Commission for Alpine Rescue (ICAR) is a globally recognized non-profit organization dedicated to alpine rescue and mountain safety. The website serves as a comprehensive platform for disseminating recommendations, event information, organizational details, and collaboration tools for mountain rescue professionals worldwide. The presence of numerous reputable partners and sponsors underscores its authoritative position in the alpine rescue community. Technically, the website employs modern web technologies including the Unpoly.js framework and Matomo analytics, ensuring a responsive and user-friendly experience across devices. The site is well-structured with clear navigation and professional design, supporting excellent content quality and user engagement. From a security perspective, the site enforces HTTPS and implements CSRF protections in forms, with privacy-conscious analytics settings. However, the absence of explicit security headers and vulnerability disclosure mechanisms suggests room for improvement in security posture. The lack of WHOIS data limits domain trust verification, though the website's professional presentation and partner ecosystem mitigate some concerns. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic enhancements in security headers, vulnerability disclosure, and WHOIS transparency would further strengthen trust and compliance.

M

Město Kolín

mukolin.cz

48

The website mukolin.cz is the official online presence of the city of Kolín, Czech Republic. It serves as a comprehensive municipal portal providing residents and visitors with information about city administration, social services, local news, events, and public resources. The site is well-structured and targets the general public, especially local citizens seeking government services and updates. The business model is that of a government service portal, with no commercial intent, focusing on transparency and accessibility. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, and integrates Google Analytics and Google Tag Manager for visitor insights. It uses the vismo CMS platform and is hosted by Active24. The site is mobile-optimized, accessible, and includes multilingual support via Google Translate. Security measures include HTTPS, Google reCAPTCHA on forms, and cookie consent mechanisms compliant with GDPR. From a security perspective, the site demonstrates good practices such as encrypted connections, anti-bot protections, and privacy controls. However, explicit security policies and incident response contacts are not published, which could be improved. No vulnerabilities or suspicious activities were detected in the content or scripts. The domain registration is consistent with the official city entity, with a long-established domain age supporting legitimacy. Overall, mukolin.cz is a trustworthy, well-maintained municipal website with good content quality, technical implementation, and privacy compliance. Strategic recommendations include publishing a formal security policy, adding vulnerability disclosure information, and enhancing security headers to further strengthen the security posture.

O

Obec Kořenov

korenov.cz

54

The website www.korenov.cz serves as the official online presence for the municipality of Kořenov in the Czech Republic. It provides comprehensive information about local government activities, public notices, tourism, and community services. The site targets residents, tourists, and local stakeholders, offering a well-structured navigation system and multilingual support via GTranslate. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with a focus on accessibility and responsive design. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected in the provided data. Privacy and cookie policies are present and appear comprehensive, though no explicit cookie consent mechanism was found. The absence of WHOIS data reduces the domain trust score, but the website content and structure strongly indicate legitimacy as a municipal government site.

W

WEBHOUSE s.r.o.

webhouse.cz

52

WEBHOUSE s.r.o. is a well-established Czech company specializing in the development and maintenance of websites and related digital services primarily for public administration, including municipalities and cities. Founded in 1997, the company holds a strong market position serving over 2,000 websites and more than 30% of Czech towns. Their offerings include responsive and accessible web design, custom graphic solutions, and mobile applications, supported by their proprietary Vismo CMS platform. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript frameworks including Vue.js and Mustache.js, and integrates advanced analytics and tracking tools like Google Analytics, Facebook Pixel, and Smartlook. The site is mobile-optimized and demonstrates good accessibility compliance. Security measures include HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, although explicit security headers and a formal security policy are not evident. From a security perspective, the site maintains a solid posture with no visible vulnerabilities or exposed sensitive data. However, improvements could be made by publishing a dedicated security policy, incident response contacts, and implementing additional security headers. Privacy compliance is well addressed through comprehensive privacy and cookie policies with GDPR-aligned consent mechanisms. Contact information is complete and transparent, enhancing business credibility. Overall, WEBHOUSE s.r.o. presents a trustworthy and professional digital presence aligned with its business focus. The website is secure, compliant, and user-friendly, supporting the company’s leadership in the Czech public sector web services market.

R

Raiffeisenbank a.s.

rb.cz

71

Raiffeisenbank a.s. is a well-established Czech banking institution providing a broad range of retail and corporate financial services including accounts, loans, mortgages, and investments. The website reflects a mature digital presence with modern design, mobile optimization, and comprehensive content tailored to individual and business customers. The bank leverages advanced web technologies such as Angular and Material Design, integrated with analytics and user behavior tracking tools like Google Tag Manager and Hotjar, indicating a focus on user experience and data-driven insights. Security posture is strong with HTTPS enforcement, security headers, and secure login mechanisms, although the absence of WHOIS data for the domain introduces a minor trust concern. Overall, the site is professional, secure, and compliant with privacy regulations, supporting Raiffeisenbank's market position as a trusted financial services provider in the Czech Republic.

K

Kuřimsko

modrozelene-kurimsko.cz

53

The website modrozelene-kurimsko.cz represents a regional government or community initiative focused on environmental sustainability and climate resilience projects in the Kuřim area of the Czech Republic. It provides news updates, project information, and community engagement content targeting local residents and stakeholders. The site is professionally designed with good navigation and mobile optimization, leveraging modern web technologies including Google Tag Manager and CookieHub for analytics and cookie consent management. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership, which slightly reduces trustworthiness. Security posture is moderate with no visible security headers detected and no explicit privacy policy or terms of service pages, indicating room for compliance improvements. Overall, the site is functional and relevant for its audience but would benefit from enhanced transparency and security practices.

A

Agentura regionálního rozvoje Nisa, příspěvková organizace

platebniportallk.cz

51

The Platební portál Libereckého kraje is a government-operated online payment portal designed to facilitate convenient payment of municipal fees for citizens of the Liberecký region in the Czech Republic. The portal consolidates various local fees such as waste disposal, public space usage, residence fees, entrance fees, and dog ownership fees into a single platform, enhancing user convenience and operational efficiency for municipalities. The business is relatively new, with the domain registered in July 2024, aligning with the launch of this regional service. The portal is operated by the Agentura regionálního rozvoje Nisa, a regional development agency, under the auspices of the Liberecký kraj government.

E

ENVItech Bohemia s.r.o.

envitech.eu

56

ENVItech Bohemia s.r.o. is a Czech Republic-based company specializing in environmental monitoring services, particularly air quality measurement. Established in 1992, the company offers a comprehensive portfolio including monitoring systems, meteorological equipment, emission measurement, calibration, detection systems, and related software solutions. The company holds multiple certifications such as ISO 9001 and ISO 14001, reinforcing its credibility and compliance with industry standards. Their market position is solid within the environmental technology sector, targeting professional and governmental clients. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the website is built on the ByznysWeb.cz platform, utilizing modern web technologies including Google Analytics for tracking and FontAwesome for icons. The site is mobile-optimized with good SEO practices and clear navigation. Privacy and cookie policies are well implemented with consent mechanisms, indicating compliance with GDPR requirements. However, the absence of explicit security headers and incident response information suggests areas for security enhancement. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data limits domain trust assessment, but the website content and certifications support legitimacy. Overall, the site demonstrates a mature digital infrastructure with room for security improvements and enhanced transparency in incident response. Strategically, the company should focus on improving security headers, publishing incident response contacts, and resolving WHOIS data visibility to strengthen trust and compliance. These steps will enhance their security posture and business credibility in the competitive environmental monitoring market.

H

Horská služba ČR, o.p.s.

horskasluzba.cz

62

Horská služba ČR, o.p.s. is a Czech non-profit organization dedicated to mountain rescue and safety services. The website serves as an official information portal providing updates on rescue operations, avalanche warnings, and safety guidelines for mountain visitors. It is supported by government funding and partnerships with recognized entities, positioning it as a trusted national mountain rescue service. The site targets outdoor enthusiasts and the general public seeking safety information in mountainous regions of the Czech Republic. Technically, the website employs modern web technologies including Leaflet.js for interactive maps and Google Tag Manager for analytics, with a basic but functional mobile experience. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, but the absence of WHOIS data introduces some uncertainty in domain legitimacy.

S

SKI Bižu s.r.o.

skijizerky.cz

62

SKI Bižu s.r.o. operates the SkiJizerky.cz website, providing winter sports services in the Jizera Mountains region of the Czech Republic. The company focuses on ski areas including Tanvaldský Špičák, Severák, and Bedřichov, offering ski passes, ski schools, equipment rentals, and transportation services such as ski buses. The website targets winter sports enthusiasts, families, and school groups, positioning itself as a regional ski resort operator with a clear service offering and seasonal promotions such as discounted pre-sale ski passes. Technically, the website uses modern web technologies including jQuery and Adform tracking scripts, with a responsive design optimized for mobile devices. The site implements HTTPS and cookie consent mechanisms, demonstrating compliance with GDPR and privacy regulations. However, there is room for improvement in security headers and explicit security policies. The website performance is moderate, with good SEO and accessibility basics in place. From a security perspective, the site benefits from HTTPS encryption and cookie consent but lacks advanced security headers and explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is not publicly available, likely due to privacy protection, which is common for small businesses. The overall security posture is good but could be enhanced with additional security best practices. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic recommendations include implementing security headers, publishing detailed security and incident response policies, and auditing third-party scripts regularly to maintain security and compliance. These steps will strengthen the site's security posture and enhance user trust.

Janov nad Nisou operates an official municipal website serving residents and visitors with comprehensive local government information, news, and public services. The site provides access to official documents, contact details for municipal offices and police, and tourism-related content, positioning itself as a trusted source for community engagement and information dissemination. The domain has been registered since 2000, reflecting a stable and established online presence consistent with a government entity. Technically, the website utilizes a CMS Made Simple platform with Foundation 5.0.2 framework, jQuery, and standard web technologies. The site is hosted by WEDOS and enforces HTTPS, ensuring secure communications. While the site is moderately optimized for mobile and accessibility, there is room for improvement in performance and modern SEO practices. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data but lacks important security headers and publicly available security policies or incident response contacts. The absence of a cookie consent mechanism is a compliance gap under GDPR. Overall, the security posture is adequate but could be enhanced with standard best practices. The website is safe for general audiences, with no adult or questionable content detected. Contact information is clearly presented, and the WHOIS data confirms legitimacy and consistency with the municipal nature of the site. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and updating technical components to improve security and compliance.

M

Muzeum skla a bižuterie v Jablonci nad Nisou

msb-jablonec.cz

45

Muzeum skla a bižuterie v Jablonci nad Nisou is a specialized cultural institution in the Czech Republic dedicated to the preservation and exhibition of glass and bijouterie artifacts. It holds unique and extensive collections, including the world's largest public collection of glass Christmas ornaments. The museum operates under the auspices of the Czech Ministry of Culture, positioning it as a significant governmental and non-profit entity in the cultural sector. The website reflects a professional and comprehensive digital presence, offering detailed information about exhibitions, events, and visitor services, targeting a broad audience including families, tourists, and researchers. Technically, the website employs modern web standards with responsive design, accessibility considerations, and integration of Google Tag Manager for analytics and marketing. Cookie consent mechanisms are implemented, demonstrating awareness of privacy regulations such as GDPR. However, some security best practices like explicit security headers and published security policies are absent, representing areas for improvement. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but the lack of WHOIS data limits domain registration trust analysis. Despite this, the website's affiliation with the Ministry of Culture and consistent business information support its legitimacy. Overall, the site is well-maintained, user-friendly, and trustworthy, serving its cultural mission effectively.

The website tvrzoziva.cz serves as an informational portal for the Čelákovice fortress and museum, highlighting the ongoing reconstruction project and cultural exhibitions. It targets general visitors and history enthusiasts, providing detailed historical context and visitor information. The business operates as a small government/non-profit cultural institution with a local/regional focus. Technically, the site is built on WordPress with modern web standards and includes GDPR-compliant cookie consent management. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could improve in security documentation and contact transparency.

U

Úvod | ÚP

uradprace.cz

68

The website www.uradprace.cz is the official online portal for the Czech Republic's public employment service, providing job seekers and employers with access to employment-related information and services. The site targets citizens seeking employment assistance and labor market data. Technically, the site employs modern web technologies such as StencilJS and web components, offering a responsive and accessible user experience. However, the site lacks publicly available WHOIS registration data, which reduces transparency and trust. Security posture is moderate with no detected security headers or explicit policies, and privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

L

Останні новини України та світу. Війни в Україні

liga.net

67

LIGA.net is a prominent Ukrainian news portal delivering up-to-date news on Ukraine and global events, with a focus on the ongoing conflict involving Russia. The website offers comprehensive news coverage, multimedia content, and live updates, targeting a broad general audience interested in current affairs. It holds a strong market position as a leading media outlet in Ukraine. Technically, the site employs modern web technologies including JavaScript, Google Analytics, Google Tag Manager, and AMP for performance and tracking. The site is mobile-optimized and SEO-friendly, with consistent branding and professional design. Security-wise, the site uses HTTPS but lacks explicit security headers and visible privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and professionally maintained, though it would benefit from enhanced privacy compliance and security measures.

B

Агенти крові — все про донорство крові в Україні

bloodagents.com

58

Bloodagents.com is an informational website dedicated to blood donation in Ukraine, providing details about projects and initiatives related to blood donors. The site targets Ukrainian donors and organizations involved in blood donation, positioning itself as a niche platform in the non-profit sector. The website was established in 2020 and maintains a consistent branding and good content quality focused on its mission. Technically, the site is built using the Weblium website builder, employs modern web standards, and integrates Google Tag Manager for analytics. Hosting and DNS services are managed through reputable providers including NS1 and Squarespace DNS. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe, professional, and serves its informational purpose well but would benefit from enhanced security and privacy practices.

Cyklisté vítáni is a Czech certification brand focused on promoting cycling-friendly accommodations and services such as hotels, guesthouses, cafes, campsites, museums, and wineries. The website serves as an informational portal providing an interactive map of certified facilities, certification application forms, and contact details for coordinators. The business targets cyclists and service providers aiming to enhance cycling tourism experiences in the Czech Republic. The domain has been registered since 2005, supporting the legitimacy and longevity of the brand. Technically, the website is a simple, well-structured HTML page with CSS styling and embedded Google Maps content. It is mobile-optimized and provides clear navigation and relevant content. However, it lacks advanced technical frameworks, CMS, or analytics tools. The site does not implement privacy or cookie policies, nor does it display security headers, which limits its compliance and security posture. From a security perspective, the site uses HTTPS (assumed from the URL provided), but no additional security headers or incident response information are present. There are no visible vulnerabilities or exposed sensitive data. The absence of privacy and cookie policies and security best practices reduces the overall security and privacy compliance score. Overall, the website is functional and trustworthy for its informational purpose but would benefit from enhanced privacy compliance, security headers, and transparency policies to improve user trust and regulatory adherence.

B

BippesBrandão GmbH

bippesbrandao.de

65

BippesBrandão GmbH is a small, professional digital agency based in Offenbach, Germany, specializing in tailored digital solutions including strategy, user experience, visual design, and development. The company targets national and international clients seeking high-quality digital agency services. Their market position is supported by a portfolio of notable clients and a consistent, professional web presence. Technically, the website employs modern web standards, including HTML5, CSS3, JavaScript, and integrates multimedia content via Vimeo. The use of a headless CMS (Directus) for media management indicates a modern content infrastructure. Security-wise, the site enforces HTTPS, implements cookie consent for analytics, and anonymizes IPs in Google Analytics (though GA is currently commented out). However, security headers are not explicitly detected, and no incident response or vulnerability disclosure policies are published. Overall, the site is well-designed, user-friendly, and trustworthy, with minor improvements recommended in security headers and explicit security policies.

M

Magistrát města Hradec Králové

mmhk.cz

41

The website www.hradeckralove.org is the official municipal portal for the city of Hradec Králové in the Czech Republic. It serves as a comprehensive information hub for residents, visitors, and businesses, providing access to city news, public services, cultural events, social programs, and administrative resources. The site is well-positioned as the authoritative source for local government information and community engagement. Technically, the site employs a custom CMS platform (VismoWeb), uses modern web technologies including HTML5, CSS3, and JavaScript, and integrates Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate to enhance functionality and user experience. The website is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site enforces HTTPS, implements standard security headers, and uses reCAPTCHA to protect forms, indicating a solid security posture. However, the absence of a visible security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. The WHOIS data is unavailable due to a malformed query response, limiting domain registration trust assessment, but the official nature of the site and consistent branding mitigate concerns. Overall, the site is professional, trustworthy, and serves its public function effectively.

L

Landeshauptstadt Kiel

kiel.de

62

The website kiel.de serves as the official digital portal for the Landeshauptstadt Kiel, providing extensive information and services related to the city’s governance, culture, health, environment, education, and public administration. It targets residents, visitors, and stakeholders interested in the city’s offerings and developments. The site is well-structured with comprehensive content in German, reflecting a mature and professional public sector digital presence. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Matomo analytics for visitor tracking. The CMS identified is PANSITE (TM), indicating a specialized content management system for municipal websites. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and Open Graph data. Security posture is adequate with HTTPS enabled and deferred script loading, but lacks visible security headers and explicit security policies or incident response contacts. Privacy compliance is limited due to absence of explicit privacy and cookie policies or consent mechanisms. WHOIS data aligns well with the official city identity, confirming legitimacy and trustworthiness. Overall, the site is a reliable and authoritative source for city-related information but would benefit from enhanced privacy and security disclosures.

K

KRÁLOVSTVÍ PERNÍKU, z. s.

pernikova-chaloupka.cz

54

KRÁLOVSTVÍ PERNÍKU, z. s. is a small non-profit cultural organization operating the Perníková chaloupka museum and offering experiential programs and accommodation in the Pardubice region of the Czech Republic. The website promotes traditional events such as the Svatováclavská tlačenice perníku and provides detailed information about these cultural activities. The organization targets families, tourists, and cultural enthusiasts interested in traditional Czech heritage. Technically, the website uses a modern frontend stack including jQuery and Bootstrap, with good mobile optimization and SEO practices. However, it lacks advanced security headers and privacy/cookie policies, which are important for compliance and user trust. The WHOIS data is missing, which reduces domain trustworthiness despite the legitimate and consistent content. Overall, the site is functional, informative, and safe for general audiences.

T

Tomáš Kořínek

tomaskorinek.cz

54

Tomáš Kořínek is a seasoned web developer and consultant based in the Czech Republic, offering custom web development, website improvements, and consulting services with over 19 years of experience. The website showcases a professional portfolio of over 170 projects, emphasizing personalized service and technical expertise. The business operates as a small entity focused on delivering tailored web solutions to clients seeking quality and reliability. Technically, the website is well-built using modern web standards, responsive design, and optimized images, hosted by a reputable Czech provider. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and published policies. Overall, the site is trustworthy, professional, and user-friendly, with clear contact channels and a transparent business presence.

Indexhibit.org is a niche technology website offering an open source portfolio content management system (CMS) targeted at artists, photographers, and designers. The site provides access to the CMS software via GitHub and community support through a forum. The business model centers on providing a lightweight, customizable portfolio CMS solution for individual users and small creative professionals. The website has been active since 2006, indicating a stable presence in its niche market. Technically, the website uses standard HTML5, CSS3, and JavaScript with a custom CMS named Indexhibit. Hosting is provided by DreamHost, a common provider for small to medium websites. The site shows basic mobile optimization and SEO practices but lacks advanced technical features or frameworks. No analytics or advertising scripts were detected, indicating a minimalistic approach to tracking and monetization. From a security perspective, the domain is registered with eNom, LLC since 2006 with clientTransferProhibited status, which is a positive trust indicator. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There is no visible privacy policy, cookie policy, or terms of service, which are important for compliance and user trust. No incident response or vulnerability disclosure information is published. The site does not appear to be behind a WAF or security challenge, and no vulnerabilities or exposed sensitive data were found. Overall, the website is functional and trustworthy for its niche but lacks comprehensive privacy and security policies. Strategic improvements in security headers, policy publication, and DNSSEC implementation would enhance its security posture and compliance. The site’s minimal tracking and advertising footprint support a privacy-respecting user experience.

B

Bürocratik

burocratik.com

65

Bürocratik is a digital branding and design agency presenting itself as a transdisciplinary practice with global reach and critical acclaim. The website showcases a professional and modern digital presence built on Nuxt.js and Vue.js frameworks, optimized for performance and mobile responsiveness. Despite the high-quality content and design, the absence of WHOIS domain registration data raises concerns about the domain's legitimacy and registration status. Security posture is generally good with HTTPS enabled, but lacks explicit security headers and formal privacy or cookie policies. The site uses analytics tools such as Umami and Google Analytics without visible consent mechanisms, indicating potential privacy compliance gaps. Overall, the business appears credible and professional, but domain registration inconsistencies and missing compliance documentation suggest areas for improvement.

F

Freie und Hansestadt Hamburg

hamburg.de

63

Hamburg.de is the official city portal of the Free and Hanseatic City of Hamburg, Germany. It serves as a comprehensive information and service platform for residents and visitors, providing access to public services, news, events, and city-related information. The website is positioned as a trusted government resource with a clear focus on serving the local community and stakeholders. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and accessibility tools such as the eyeAble plugin, alongside analytics via eTracker. The hosting is managed through mcs.de, with secure HTTPS connections ensuring data privacy during user interactions. Security posture is solid with no evident vulnerabilities or exposed sensitive data, although the absence of explicit security policies and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is moderate due to the lack of visible privacy and cookie policies in the provided content. Overall, the site demonstrates a high level of business credibility and technical maturity appropriate for a government portal.