Security Directory

O

Open Net Sàrl

open-net.ch

52

Open Net Sàrl is a specialized Swiss company focused on Odoo ERP integration and hosting services, holding a leading market position as the top Odoo integrator in Switzerland with over 15 years of experience. Their business model revolves around providing modular ERP solutions tailored to client needs, complemented by innovative applications such as Mosaïk, CryptoSync, and CO₂ accounting. The company targets businesses seeking efficient and scalable ERP solutions with a strong emphasis on local presence and ecological commitment. Technically, the website is built on a modern Nuxt.js framework with Tailwind CSS, ensuring fast performance, excellent mobile optimization, and good accessibility. The use of Google Tag Manager indicates moderate analytics and tracking capabilities. SEO and content quality are high, with clear navigation and professional design. From a security perspective, the site enforces HTTPS, includes essential security headers, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. Privacy compliance is adequate with comprehensive privacy and terms policies, though cookie consent mechanisms could be enhanced. Overall, the website and business present a low-risk profile with strong credibility and professionalism. Strategic recommendations include enhancing security transparency, adding incident response contacts, and implementing explicit cookie consent to improve privacy compliance and user trust.

L

Le Filament

le-filament.com

57

Le Filament is a small French technology company based in Toulouse, specializing in IT project management and integration of CRM and ERP tools, with a focus on open source solutions. The website reflects a professional and human-centric approach to digital transformation, targeting businesses seeking tailored IT services. The technical infrastructure is modern, utilizing the Hugo static site generator and hosted by Ikoula, a reputable French hosting provider. The site is well-structured, mobile-optimized, and SEO-friendly, though it lacks advanced accessibility features and some security best practices. Security posture is moderate; while HTTPS is presumably enabled (not explicitly confirmed), no security headers or vulnerability disclosures are present, and DNSSEC is not enabled. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and compliance documentation.

Arche TI is a Canadian technology company specializing in Odoo ERP consulting, implementation, and optimization services. Positioned as the top Odoo integrator in Canada, they serve businesses primarily in Montreal, Quebec, Toronto, and other Canadian regions. Their key offerings include ERP consultation, project rescue, migration, customization, and ongoing support, targeting medium-sized businesses seeking digital transformation and operational efficiency. The company has a professional web presence with detailed service descriptions, client testimonials, and multiple office locations, reflecting a mature and credible business model. Technically, the website is built on the Odoo platform, leveraging modern web technologies such as JavaScript, FontAwesome, and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with fast to moderate performance. However, there is room for improvement in security headers and explicit privacy compliance features. From a security perspective, the site uses HTTPS and includes CSRF tokens, indicating a baseline security posture. The domain is registered with GoDaddy and secured with registrar locks, consistent with the business's age and claims. No critical vulnerabilities or suspicious patterns were detected, but the absence of a visible privacy policy and cookie consent mechanism represents compliance gaps. The presence of a named Data Protection Officer with contact details is a positive indicator. Overall, Arche TI presents a trustworthy and professional digital footprint with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and security best practices would further strengthen their security posture and regulatory alignment.

Dynapps is a professional and well-established Odoo implementation partner specializing in digitalizing business processes through tailored ERP solutions. They hold a strong market position as the largest Odoo implementer in Europe and have been recognized as the Best Odoo Partner in Europe 2024. Their services cover a broad range of industries including technology, energy, manufacturing, retail, and healthcare, targeting innovative companies seeking efficient business management solutions. The company operates multiple offices across Belgium, the Netherlands, Switzerland, and France, reinforcing their regional presence. Technically, the website is built on the Odoo CMS platform, utilizing modern web technologies such as Bootstrap, FontAwesome, Google Tag Manager, and Leadinfo for analytics and tracking. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, Dynapps demonstrates a strong posture with HTTPS enforcement, ISO 27001 certification, and use of Google reCAPTCHA on forms. However, there is room for improvement in implementing security headers and explicit incident response contacts. Overall, the website and business exhibit high professionalism, trustworthiness, and compliance with privacy regulations, although cookie consent mechanisms could be enhanced. The lack of public WHOIS data is due to EURid privacy policies and is justified for this business type. The risk profile is low, with no critical vulnerabilities detected, making Dynapps a credible and secure partner for ERP implementation.

The website zdravotnidozor.cz currently presents a security verification page that blocks direct access to its main content using Google reCAPTCHA v3. This indicates a bot protection mechanism is in place, preventing automated or unauthorized access. Due to this, no business-specific content, contact information, or policies are accessible for detailed analysis. The domain is registered since 2016 with a Czech registrar and uses Czech-based name servers, suggesting a legitimate regional presence. The technical infrastructure includes modern frontend technologies such as Bootstrap 5.3.3 and Google reCAPTCHA, but lacks visible security headers or metadata to assess SSL/TLS configuration or SEO. Overall, the site’s security posture shows basic bot protection but lacks transparency in privacy and compliance documentation.

P

Plesenská Kafrárna

plesenskakafrarna.cz

42

Plesenská Kafrárna is a small social enterprise café and wine bar based in Ostrava – Plesná, Czech Republic, focused on community support, sustainability, and employing socially disadvantaged individuals. The business offers coffee, homemade cakes, and event spaces, positioning itself as a local community hub with a strong social mission. The website is built on WordPress with common web technologies such as jQuery, Bootstrap, and FontAwesome, providing a generally good user experience with moderate mobile optimization and basic SEO. However, a visible PHP fatal error in the theme code indicates technical issues that could affect site stability and user experience. Security posture is moderate with HTTPS enabled but lacking security headers and vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional but requires technical and compliance improvements to enhance security and privacy standards.

M

Maso od Amose

masoamos.cz

52

Maso od Amose is a Czech Republic-based small retail business specializing in raw meat and complementary pet food products, primarily targeting dog owners seeking nutritionally balanced raw diets. The company operates an e-commerce platform built on the Shoptet system, offering regional delivery and parcel shipping options to customers. The website presents a professional and consistent brand image with clear product offerings and customer engagement features such as polls and contact forms. Technically, the site uses legacy jQuery libraries and standard Shoptet scripts, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and CSRF protections but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. WHOIS data is unavailable, limiting domain trust assessment, but the site content and contact details appear legitimate. Overall, the site is functional and trustworthy for its business purpose but would benefit from enhanced privacy compliance and updated technical components.

Leexi.ai is a technology company offering an AI-powered meeting assistant designed to automate note-taking, summarize meetings, and extract action items to boost productivity. The website positions itself as a SaaS solution targeting professionals and teams who want to optimize their meeting workflows. The business model revolves around providing AI-driven services to enhance workplace efficiency. Technically, the website is built using modern frameworks such as Nuxt.js and Tailwind CSS, indicating a contemporary and responsive design approach. However, the absence of visible privacy and cookie policies, as well as lack of security headers, suggests room for improvement in compliance and security practices. The WHOIS data is unavailable due to privacy protection, which is common for startups but limits trust verification. Overall, the site is professional and functional but would benefit from enhanced transparency and security measures.

B

Be Bouncy

bebouncy.com

9

Be Bouncy is an AI-driven social media management platform designed to simplify and optimize social media growth for creators, SMBs, and agencies. The platform offers a suite of tools including smart scheduling, analytics, automated moderation, and gamified team management, all powered by its AI agent Nimbus. The website demonstrates a modern technical infrastructure built on React and Next.js, providing a responsive and user-friendly experience. However, the absence of WHOIS registration data and some minor issues such as a suspicious YouTube link domain and lack of cookie consent mechanisms slightly reduce trustworthiness. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the platform presents a professional and promising solution in the social media SaaS market, but domain legitimacy verification and enhanced privacy compliance are recommended.

R

Reacteev

reacteev.com

9

Reacteev is a technology company specializing in product management, agile methodologies, and AI-powered organizational tools. The website presents a professional and modern interface built on React and Gatsby, indicating a mature digital infrastructure. The business appears to target organizations looking to enhance their product and agile processes through AI solutions. The domain registration data supports the legitimacy and stability of the business, with a domain age consistent with the company's founding year of 2015. However, the website lacks critical privacy and cookie policies, as well as explicit contact information, which impacts its compliance and trustworthiness scores. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosures.

S

SAS NAAIA

naaia.ai

53

Naaia is a French-based SaaS company specializing in AI compliance, risk management, and governance solutions. Founded in 2022, it positions itself as a European leader and the first AIMS® provider, offering a platform to operationalize AI governance and compliance with global regulations. The company holds ISO 27001 and ISO 42001 certifications, reinforcing its commitment to security and AI management standards. The website is professionally designed, content-rich, and targets organizations deploying AI systems that require regulatory compliance and risk oversight. Technically, the website is built on WordPress with Elementor and integrates modern analytics and marketing tools such as HubSpot, Google Analytics, and Matomo. The hosting provider is Gandi SAS, and the domain registration details align well with the business identity. The site is mobile-optimized, accessible, and SEO-friendly, with a good performance profile. From a security perspective, the site enforces HTTPS, uses security headers, and demonstrates best practices through certifications and cookie consent mechanisms. However, DNSSEC is not enabled, and no explicit vulnerability disclosure or incident response contacts are provided. The absence of direct company emails or phone numbers on the site suggests reliance on contact forms for communication. Overall, Naaia presents a strong security posture and business credibility with minor areas for improvement in DNS security and transparency of incident response. The site content is safe for general audiences, with no adult or questionable material detected.

K

KaviAR Tech SAS

kaviar.app

63

KaviAR Tech SAS operates KaviAR.app, a cloud-based augmented reality platform combined with a mobile app that enables users to create interactive AR experiences without technical expertise. The company targets businesses and individuals seeking to enhance printed materials with digital content, democratizing augmented reality usage. Their market position is that of a niche SaaS provider focusing on ease of use and accessibility, supported by tiered subscription plans and a free trial. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as HubSpot and Google Analytics. The site is mobile optimized and well-structured, providing a professional user experience. Security posture is solid with HTTPS, reCAPTCHA Enterprise, and cookie consent mechanisms, though it lacks explicit security policies and advanced security headers. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and consistency. The site does not contain adult or questionable content and maintains good privacy compliance.

I

Immoshoot

immoshoot.info

56

Immoshoot is a small real estate service provider with a website built on the Wix platform. The site presents basic branding and marketing content focused on real estate but lacks detailed business information, contact details, and compliance policies. Technically, the site uses Wix's standard technology stack with modern JavaScript polyfills and is hosted securely with HTTPS. However, the absence of privacy, cookie, and terms of service policies, as well as missing WHOIS data, limits the trust and compliance posture. Security headers and incident response information are also not present, indicating room for improvement in security maturity. Overall, the website is functional but basic, with moderate technical implementation and security posture.

Artemisia Lawyers is a specialized law firm focused on environmental and human rights law, providing legal advice, assistance, and representation primarily to civil society actors in France and internationally. The firm offers services including legal consultancy, judicial representation, and practical training workshops, positioning itself as a boutique firm with a strong commitment to biodiversity, nature protection, and fundamental human rights. The website is professionally designed using the Jimdo CMS platform, featuring multilingual content and clear navigation, targeting associations and individuals engaged in environmental and human rights issues. Technically, the site uses standard Jimdo scripts and cookie control mechanisms, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. WHOIS data is missing, raising concerns about domain registration legitimacy, though the website content and contact information appear professional and trustworthy. Overall, the site scores well on content quality and business credibility but should improve security practices and domain registration transparency.

N

Naturhelp.cz

naturhelp.cz

54

Naturhelp.cz is a Czech language informational website providing articles, reviews, and tips related to nature, gardening, ecology, and recipes. The site targets a general audience interested in environmental topics and sustainable living. It operates as a content publishing platform with monetization through Google AdSense. The website is built on WordPress, leveraging various plugins for SEO, multilingual support, and GDPR compliance. Hosting is provided by WEDOS, consistent with the domain registration data. The site demonstrates good digital maturity with responsive design, clear navigation, and structured data implementation. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR opt-in banner. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website is professional, trustworthy, and safe for general audiences.

Z

ZAZUMi – vše pro zahradu i domov

zazumi.cz

57

ZAZUMi.cz is a Czech Republic-based e-commerce retailer specializing in plants, gardening supplies, and pet products. The website offers a broad catalog of products for home and garden enthusiasts, including indoor plants, garden equipment, and pet accessories. The platform supports customer accounts with login and registration features and provides clear contact information for customer support. The site is professionally designed with good navigation and mobile optimization, targeting primarily Czech-speaking customers interested in gardening and home care. Technically, the website employs modern JavaScript libraries such as Algolia for search and Mailkit for email services, alongside Google Tag Manager for analytics. The site uses HTTPS, ensuring encrypted communication, but lacks visible security headers which could enhance protection against common web attacks. Performance is moderate with room for improvement in accessibility and SEO features. From a security perspective, the site demonstrates basic best practices such as secure login forms with CSRF tokens and encrypted connections. However, the absence of privacy and cookie policies, as well as no visible incident response or vulnerability disclosure mechanisms, indicates gaps in compliance and security maturity. The lack of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Overall, ZAZUMi.cz presents a functional and user-friendly e-commerce platform with a solid business focus but requires improvements in transparency, privacy compliance, and security hardening to enhance trust and regulatory adherence.

G

Gardners

gardners-eshop.cz

57

Gardners operates a professional e-commerce platform specializing in indoor plants, stylish flower pots, substrates, and plant care products primarily targeting the Czech market. The website is well-structured, with clear navigation and a comprehensive product catalog, positioning itself as the largest online shop for indoor plants in the region. The business model focuses on retail sales with additional services such as workshops and educational content. Technically, the site leverages the Shoptet e-commerce platform, integrates multiple analytics and marketing tools including Google Analytics, Facebook SDK, and Microsoft Clarity, and uses modern web technologies with CDN support for performance. Security posture is solid with HTTPS enforced, CSRF protection on forms, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional presentation and business focus. Overall, the website demonstrates a mature digital presence with good privacy compliance and user experience.

R

Rostlinky.cz

rostlinky.cz

42

Rostlinky.cz is an established online garden retail business operating since 2001, primarily serving customers in the Czech Republic and Slovakia. The website offers a wide range of gardening products including seeds, bulbs, balcony plants, ornamental and fruit trees, shrubs, perennials, and gardening accessories. The business model is focused on e-commerce retail with an emphasis on fair and expert service. Technically, the website is built on the Magento platform, utilizing common web technologies such as jQuery, Prototype.js, and Bootstrap, and integrates marketing and analytics tools like Google Tag Manager and Facebook SDK. The site is secured with HTTPS and implements GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS registration data and lack of explicit security headers slightly reduce the overall trust and security posture. Contact information is limited to a phone number and online forms, with no public company email addresses found. Overall, the website presents a professional and trustworthy front for its business, but domain registration transparency and enhanced security headers would improve its credibility and security stance.

O

Onlinezahradnictvi.cz

onlinezahradnictvi.cz

53

Onlinezahradnictvi.cz is a Czech Republic-based small e-commerce business specializing in the sale and delivery of plants and gardening supplies. The company emphasizes sustainable packaging and supports local Czech growers, positioning itself as a niche leader in online plant retail. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product information. Technically, it leverages the Shoptet e-commerce platform with integrations for analytics and marketing, including Google Analytics, Microsoft Clarity, and Facebook SDK. Security posture is good with HTTPS and CSRF protections, though some legacy libraries like jQuery 1.11.3 could be updated to enhance security. Privacy compliance is strong with visible cookie consent and a comprehensive privacy policy in Czech language. No WHOIS data is available, likely due to privacy protection, which slightly reduces transparency but is common for small businesses. Overall, the website is trustworthy, safe, and well-positioned in its market niche.

C

Crowdtech

crowdtech.com

53

Crowdtech is a technology company established in 2003, operating primarily in the Netherlands. The company appears to offer technology-related services or solutions, targeting a professional audience. The website is built on WordPress with Elementor and integrates modern marketing and analytics tools such as Google Analytics, Google Ads, and Facebook Pixel. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enabled and domain transfer lock in place, but improvements are recommended such as enabling DNSSEC and implementing security headers. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website presents a professional image but could enhance trust and compliance by publishing comprehensive policies and improving security configurations.

Rijksdienst voor Ondernemend Nederland (RVO) is a Dutch government agency dedicated to supporting sustainable and strong economic development. The agency provides a wide range of services including information dissemination, advisory support, financing options, and networking opportunities to entrepreneurs, individuals, governments, and knowledge institutions. The website reflects a mature digital presence with comprehensive content tailored to its diverse audience, emphasizing sustainability, innovation, and international business growth. The agency's market position is that of a key national facilitator for economic and environmental initiatives in the Netherlands.

F

FMO

fmo.nl

71

FMO is the Dutch entrepreneurial development bank with over 50 years of experience investing sustainably in emerging markets. The organization supports economic development by financing projects in sectors such as energy, financial institutions, and agribusiness across more than 85 countries. Their business model focuses on partnering with other financiers to open new markets and take on challenging investments with significant risk exposure. The website reflects a mature, professional institution with clear communication and comprehensive information for partners and stakeholders. Technically, the website uses a modern CMS (Procurios), integrates YouTube videos via privacy-enhanced domains, and employs Google Tag Manager for analytics and tracking. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and structured navigation. Privacy and cookie policies are clearly presented with consent mechanisms, indicating compliance with GDPR requirements. From a security perspective, the site enforces HTTPS, uses privacy-conscious embedded content, and implements cookie consent. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are not publicly available, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is trustworthy, professional, and well-maintained, supporting the organization's credibility and mission. Strategic recommendations include publishing security policies, adding vulnerability disclosure information, and enhancing security header visibility to further strengthen the security posture.

The website mest.com is currently a parked domain with minimal content, primarily serving as a placeholder indicating the domain may be for sale. There is no active business presence or descriptive content about services or products. The site embeds an external iframe from an unrelated domain and includes multiple advertising and tracking scripts. The technical infrastructure is basic, with no detected CMS or advanced frameworks, and the hosting appears to leverage AWS Cloudfront CDN for static assets. Mobile optimization and accessibility are minimal, and SEO practices are poor due to lack of meaningful content and metadata. Security posture is weak, with no HTTPS enforcement visible in the provided data, no security headers, and no privacy or cookie policies, which raises compliance concerns. The WHOIS data shows the domain is old (registered in 1999) but uses parking DNS servers, consistent with the parked domain status. Overall, the site lacks business credibility and trust indicators, and the security and privacy compliance posture is poor.

The University of Wisconsin–Madison is a prestigious public research university located in Madison, Wisconsin, founded in 1849. It offers comprehensive education opportunities to undergraduate, graduate, and professional students, and is recognized as one of the top-ranked research institutions in the United States. The university emphasizes public service through the Wisconsin Idea, aiming to improve lives beyond campus boundaries. Its website reflects a mature digital presence with extensive content, clear navigation, and strong branding consistency. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and Eloqua for marketing and analytics. The site is well-optimized for mobile and accessibility, with good SEO practices. Hosting appears to be managed via university infrastructure or a dedicated CDN. Performance is moderate, with room for improvement in security headers and explicit security policy disclosures. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with user consent mechanisms. However, the absence of a published security policy or vulnerability disclosure program is noted. WHOIS data is unavailable, which is unusual but does not detract from the overall legitimacy given the institutional nature and external trust signals. Overall, the website is professional, trustworthy, and well-maintained, supporting the university's mission and public image effectively.

N

NRK P3

p3.no

61

NRK P3 is a well-established Norwegian public media channel focused on music, humor, and news, operating under the Norwegian Broadcasting Corporation (NRK). The website p3.no serves as a digital platform for their content, targeting Norwegian-speaking audiences interested in contemporary music and entertainment. The site demonstrates a mature technical infrastructure built on WordPress with modern JavaScript libraries and analytics tools, ensuring a good user experience and mobile optimization. Security posture is strong with HTTPS and security headers implemented, though visible privacy and cookie policies are lacking, indicating room for compliance improvement. Overall, the website is trustworthy and professionally managed, reflecting its status as a national broadcaster.

K

kode24

kode24.no

62

Kode24.no is a Norwegian online news portal dedicated to the developer community, providing news, opinions, guides, and reports related to programming and the Norwegian technology sector. The website serves a niche audience of Norwegian developers and tech professionals, positioning itself as a specialized media outlet within the technology and media industries. The business model revolves around content publication and job listings, supported by advertising partnerships. Technically, the site employs modern web technologies including responsive design, SVG graphics, and WebP images, ensuring a good user experience across devices. While the site uses HTTPS and modern scripts, explicit security headers and privacy policies are not found, indicating room for improvement in security and compliance. The WHOIS data is unavailable due to registry restrictions typical for .no domains, but the website content and structure indicate a legitimate and professional operation. Overall, the site demonstrates good content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture.

K

kode24-dagen

kode24-dagen.no

58

kode24-dagen is a Norwegian developer conference focused on web developers, scheduled for March 27, 2025, in Oslo. The event offers keynote talks, networking, and evening entertainment, targeting the Norwegian web development community. The website is professionally designed, mobile-optimized, and uses modern web technologies including Next.js and Sanity CMS, hosted on Vercel. The presence of reputable sponsors such as Telenor and Gjensidige enhances its credibility. However, the site lacks visible privacy and cookie policies, and no WHOIS data is available due to privacy protection or registry restrictions. Security headers are not explicitly detected, suggesting room for improvement in security posture.

M

Mon espace santé

monespacesante.fr

66

Mon espace santé is a French government-backed digital health platform designed to securely store and share personal and family health data. It serves over 20 million users and is positioned as a leading national health service. The platform offers key services including document storage, secure messaging with health professionals, and management of children's health profiles. Technically, the website uses modern JavaScript frameworks (Vue.js), is mobile optimized, and integrates privacy and cookie consent mechanisms. Security posture is strong with HTTPS, HDS certification for data hosting, and no visible vulnerabilities, though explicit security headers and incident response contacts could be improved. Overall, the platform demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable service for French residents.

S

Scoop.it

scoop.it

59

Scoop.it is a technology-driven content curation platform that enables professionals and businesses to discover, curate, and distribute relevant content efficiently. Positioned as a trusted leader in content marketing and distribution, it serves a broad audience including marketers, business intelligence professionals, and individual content curators. The platform offers a SaaS business model with free signup options and premium services, supported by a parent company, Meltwater. Technically, the website employs modern web technologies including React, HubSpot marketing tools, and robust cookie consent management via tarteaucitron.js, ensuring compliance with privacy regulations such as GDPR. The site is well-optimized for mobile and SEO, with a moderate performance profile leveraging CDN hosting. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website demonstrates high professionalism, trustworthiness, and compliance, making it a reliable platform in its sector.

F

Fathers Coffee Roastery

fathers.cz

47

Fathers Coffee Roastery is a small Czech Republic-based e-commerce business specializing in coffee roasting and sales. The website is built on WordPress using Elementor and WooCommerce, indicating a modern and flexible technical infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, though it lacks explicit privacy and terms of service documentation. Security posture is adequate with HTTPS enabled, but could be improved by adding security headers and formal policies. No signs of malicious content or blocking mechanisms were detected, and the domain registration details align well with the business profile, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer contact information.

C

Commissariat à l’énergie atomique et aux énergies alternatives (CEA)

ceasciences.fr

59

The website represents the Direction de la Recherche Fondamentale (DRF) of the Commissariat à l’énergie atomique et aux énergies alternatives (CEA), a major French public research institution. It showcases extensive scientific research activities across multiple disciplines including physics, chemistry, biology, and health sciences, supported by a large community of over 6000 researchers. The site serves multiple audiences including researchers, institutional partners, journalists, and the general public, providing news, resources, and institutional information. The business model is focused on public research and innovation with strong ties to academic and industrial partners. Technically, the site is built on Microsoft SharePoint, leveraging standard web technologies and integrating Matomo analytics for user tracking and Google reCAPTCHA for bot protection. The infrastructure appears stable and professionally maintained, with moderate performance and basic mobile optimization. SEO and accessibility are adequately addressed, though some improvements could be made. From a security perspective, the site uses HTTPS and implements standard SharePoint security features such as form digest tokens. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident. Privacy compliance is good with a comprehensive GDPR-aligned privacy policy, but lacks a visible cookie consent mechanism. No incident response or vulnerability disclosure information is published. Overall, the website is trustworthy, professional, and aligned with the institutional identity of CEA. It poses low risk from a security and privacy standpoint but could enhance transparency and user consent mechanisms to improve compliance and user trust.

C

CEA-Leti

leti-cea.fr

59

CEA-Leti is a prominent French government research institute specializing in micro and nanotechnologies, focusing on applied research and innovation in wireless communication systems, biology and health, imaging, and micro-nano systems. The website reflects a well-established institution with a strong market position in technology research, supported by the Commissariat à l'Énergie Atomique et aux Énergies Alternatives (CEA). The site targets a broad audience including the general public, enterprises, journalists, and academic institutions. Technically, the website is built on Microsoft SharePoint, leveraging modern web technologies and analytics tools such as Matomo and Google reCAPTCHA for security. The security posture is solid with HTTPS enforced, though improvements could be made by adding security headers and cookie consent mechanisms. The absence of WHOIS data is noted but does not detract significantly from the site's legitimacy given its official nature and consistent branding. Overall, the site is professional, trustworthy, and serves as a comprehensive portal for CEA-Leti's research activities and partnerships.

C

CEA

prisonnier-quantique.fr

52

Le Prisonnier quantique is an educational interactive game developed and hosted by the French public research organization CEA. It aims to promote scientific and technical culture through a free browser-based adventure game targeting a general audience including students and educators. The website is well-branded with official CEA logos and partnerships, providing a trustworthy platform for educational content. Technically, the site uses standard web technologies with responsive design and integrates Matomo analytics for privacy-conscious user tracking. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers and explicit cookie consent mechanisms are missing. Contact information is limited to official CEA email addresses, supporting legitimacy but lacking phone or physical address details. Overall, the site is professional, secure, and suitable for its educational mission.

D

Divadlo Kalich

divadlokalich.cz

60

Divadlo Kalich is a cultural venue based in Prague, Czech Republic, offering a variety of theatrical performances including comedies, musicals, concerts, and children's shows. The website serves as a platform for event listings and ticket sales, targeting a broad audience interested in live theater and cultural events. The site demonstrates a moderate level of digital maturity with the use of modern tracking technologies such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. The technical infrastructure supports HTTPS and responsive design, ensuring accessibility and a good user experience across devices. However, the absence of publicly available WHOIS data limits the ability to fully verify domain legitimacy and registrant information. Security posture is adequate with HTTPS and cookie consent, but could be improved by implementing security headers and publishing clear privacy and security policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

M

Městská divadla pražská

mestskadivadlaprazska.cz

79

Městská divadla pražská is a prominent cultural institution operating the largest single ensemble drama theatre across three stages in the center of Prague. The organization offers theatrical performances, ticket sales, educational programs, and media content such as blogs and podcasts, targeting a general audience interested in theatre and culture. The website reflects a mature digital presence with a professional design, clear navigation, and mobile responsiveness. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and analytics tools like Matomo and Facebook Pixel, ensuring a robust user experience. Security posture is solid with HTTPS enforced and secure form handling, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website demonstrates high professionalism and trustworthiness, supporting the institution's mission effectively.

OLDstars is a Czech student theater group that organizes theatrical performances, festivals, and acting courses primarily in Prague and surrounding regions. Their website showcases a rich program of upcoming performances, news, and educational opportunities, targeting students and theater enthusiasts. The site is built on modern web technologies such as Next.js and React, providing a responsive and user-friendly experience. Security posture is good with HTTPS and some security best practices, though some HTTP security headers could be improved. Privacy and cookie policies are not clearly presented, which is a compliance gap. WHOIS data is unavailable, which reduces domain trust but the professional content and social media presence support legitimacy. Overall, the site is a well-maintained cultural platform with room for enhanced privacy and security transparency.

A

AGENTURA SCHOK, spol. s r.o.

shakespeare.cz

46

The website www.shakespeare.cz represents the Letní shakespearovské slavnosti (Summer Shakespeare Festival) organized by AGENTURA SCHOK, spol. s r.o., a medium-sized cultural event organizer based in the Czech Republic. The festival is well-established, attracting tens of thousands of visitors annually and supported by prominent partners such as the PPF Group. The site provides comprehensive information about the festival's program, ticketing, partners, and historical context, targeting theater enthusiasts and the general public interested in Shakespearean drama. Technically, the website employs modern front-end technologies including Bootstrap for responsive design, Google Custom Search Engine for site search, Facebook SDK for social integration, and FontAwesome for icons. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Cookie consent mechanisms and a privacy policy are implemented, indicating compliance with GDPR requirements. From a security perspective, HTTPS is used as inferred from resource URLs, and cookie consent is managed with user options. However, no explicit security headers were detected in the HTML content, and no security policy or incident response contacts are published. The absence of WHOIS data reduces domain registration transparency, which slightly impacts trustworthiness. No vulnerabilities or exposed sensitive data were found in the content. Overall, the website is a professionally maintained cultural event platform with good content quality and privacy compliance. The main risk area is the lack of visible domain registration data and security policy disclosures. Strategic improvements in security headers, incident response information, and WHOIS transparency would enhance trust and security posture.

D

Dramox s.r.o.

dramox.cz

55

Dramox s.r.o. operates a leading online streaming platform specializing in theater performances, offering access to hundreds of shows from over 250 theaters. The service targets theater enthusiasts, families, and educational institutions, providing a subscription-based model with a free trial period. The platform supports cultural preservation by channeling a significant portion of subscription fees back to theaters and artists. Technically, Dramox employs a modern web stack including Next.js, React, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartlook. The website is optimized for various platforms including smart TVs and mobile devices, ensuring a seamless user experience. Security posture is strong with HTTPS enforcement and modern security headers, though the absence of WHOIS data introduces some trust concerns. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. Overall, Dramox presents a professional, secure, and user-friendly service with a clear cultural mission.

G

Galerie výtvarného umění v Ostravě, p. o.

gvuo.cz

49

Galerie výtvarného umění v Ostravě, p. o. is the oldest regional art gallery in Ostrava, Czech Republic, established in 1952. It operates as a non-profit cultural institution under the Moravskoslezský kraj (Moravian-Silesian Region) and offers art exhibitions, educational programs, virtual tours, and an e-shop. The website reflects a well-established institution with a clear focus on art and culture, targeting the general public and educational sectors. The business model is centered on cultural enrichment and public engagement rather than commercial profit. Technically, the website employs a modern technology stack including HTML5, CSS3, JavaScript libraries such as jQuery, Leaflet.js for maps, and Google Analytics for tracking. It uses the Shopnero CMS platform and is hosted by Active24. The site is mobile-optimized with good SEO practices and structured data enhancing search engine visibility. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, with a strong cultural and educational focus. Strategic improvements in security policies and accessibility could further enhance its posture and user trust.

S

STUDIO G

studiog.cz

40

STUDIO G is a small, independent drama theatre based in Ostrava, Czech Republic, founded in 2019. It offers a mix of original and classical theatrical performances, including children's theatre, poetry evenings, and concerts. The theatre collaborates with local professional actors and conservatory students, positioning itself as a cultural hub with growing local recognition. The website is built on Joomla CMS with modern front-end technologies and includes interactive sliders and social media integration. While the site is well-designed and mobile-optimized, it lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the domain registration and business information are consistent and trustworthy, reflecting a legitimate cultural organization.

D

Divadlo Petra Bezruče, s.r.o.

bezruci.cz

43

Divadlo Petra Bezruče, s.r.o. is a regional theatre company based in Ostrava, Czech Republic, providing theatrical performances, ticketing services, subscriptions, and cultural event hosting. The website serves as a portal for program schedules, ticket reservations, and company information, targeting local theatre audiences and cultural enthusiasts. The business operates with support from local government and cultural partners, positioning itself as a key cultural institution in the region. Technically, the website employs modern front-end technologies including Bootstrap, JavaScript libraries like WOW.js, and a cookie consent mechanism from TermsFeed. The site is mobile-optimized with responsive design and provides a user-friendly navigation experience. However, there is no evidence of a CMS or advanced analytics tools, and performance is moderate. From a security perspective, the site uses HTTPS but lacks visible security headers and published privacy or terms of service policies. Cookie consent is implemented with express consent, indicating some GDPR awareness. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and clear contact information mitigate some concerns. Overall, the website is functional and professional but would benefit from enhanced security practices, published privacy documentation, and WHOIS transparency to improve trust and compliance.

The website www.pujcimekaru.cz currently presents no accessible content, metadata, or business information, indicating it is either inactive or blocked. The WHOIS lookup returned no registration data, suggesting the domain may not be registered or is inactive. Technically, the site lacks HTTPS, security headers, and any detectable technologies or frameworks, reflecting a very low digital maturity. Security posture is weak due to absence of SSL and security best practices. Overall, the site is not trustworthy and does not provide any business or compliance information. Strategic recommendations include registering the domain properly, deploying HTTPS, adding business and privacy information, and improving content and technical implementation to establish legitimacy and security.

P

Pro-idea s.r.o.

eventival.com

52

Eventival.com is a professional SaaS platform specializing in film festival and event management software. The company, Pro-idea s.r.o., founded in 2009 and based in the Czech Republic, offers a comprehensive and widely adopted solution for film festivals worldwide, boasting over 100 clients and extensive industry integrations. The website is well-designed, content-rich, and optimized for mobile, providing a positive user experience and clear business positioning as a market leader in its niche. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Google Maps API, with good performance and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. Privacy compliance is partial, with a cookie policy present but no explicit privacy or terms of service pages detected. The WHOIS data is missing or unavailable, which reduces domain transparency and trustworthiness despite the professional appearance and business legitimacy. Overall, the site is safe, trustworthy, and well-positioned in its industry but would benefit from enhanced transparency and security documentation.