Security Directory

H

Hudera a syn s.r.o.

huderaasyn.cz

41

Hudera a syn s.r.o. is a small Czech Republic-based company specializing in the production and retail of homemade smoked meats and catering services. The company operates three retail stores and provides catering and stall sales at cultural and social events. The website reflects a local business with a focus on quality and tradition, dating back to 1924 with a renewal in 1990. The market position is regional with a loyal customer base interested in fresh meat products and event catering. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Revolution Slider, hosted likely by Wedos, a Czech provider. The site is mobile optimized and SEO friendly with good navigation and professional design. Security posture is moderate with HTTPS enforced and basic best practices observed, but lacks explicit security headers and visible privacy or cookie policies. The site uses Google Analytics and Tag Manager with consent default denied but no visible consent banner, indicating partial privacy compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but could improve privacy and security compliance.

A

Aquapalace Hotel Prague

aquapalacehotel.cz

45

Aquapalace Hotel Prague operates as a family and wellness hotel integrated with the largest water park in the Czech Republic, offering a broad range of leisure, accommodation, and conference services. The website presents a professional and content-rich platform targeting families, couples, and business travelers seeking entertainment, wellness, and event hosting in Prague. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and various analytics and marketing tools, with a CMS identified as Topinfo CMS. The site is mobile-optimized and well-structured, providing a positive user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS data reduces transparency and trust slightly but is offset by visible certifications and clear contact information. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced security and privacy disclosures.

I

Institut pro testování a certifikaci, a. s.

itczlin.cz

51

Institut pro testování a certifikaci, a. s. is a Czech independent company with global operations providing services in testing, certification, technical inspection, calibration, and standardization. The company holds multiple internationally recognized certifications such as ISO 9001, ISO 13485, ISO 27001, and others, positioning it as a reputable service provider in the manufacturing and certification industry. The website is professionally designed, multilingual, and offers comprehensive information about its services and accreditations, targeting businesses requiring quality assurance and compliance services. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The site is well-structured with clear navigation and SEO-friendly metadata. Privacy and cookie policies are implemented with GDPR compliance, and the site uses HTTPS with good SSL configuration, although some security headers are missing. From a security perspective, the website demonstrates good practices such as encrypted connections and cookie consent mechanisms. However, the absence of certain security headers and lack of explicit incident response or vulnerability disclosure information suggest areas for improvement. The WHOIS data is unavailable, likely due to privacy protection, which is common for this business type but slightly reduces transparency. Overall, the website presents a trustworthy and professional digital presence with moderate to good security posture. Strategic enhancements in security headers, incident response transparency, and accessibility could further strengthen its security and compliance stance.

C

CzechProject spol. s r.o.

czechproject.cz

59

CzechProject spol. s r.o. is a well-established Czech technology service provider specializing in custom web development, e-commerce solutions, creative design, and online marketing. Operating since 2000, the company has a strong local presence with over 600 completed projects and a portfolio serving a diverse client base from startups to multinational enterprises. Their website reflects a professional and modern digital presence, optimized for mobile devices and employing contemporary technologies such as Bootstrap and Google Analytics for performance and tracking. Security measures include HTTPS and Google reCAPTCHA, although some security headers are missing and privacy policies are not explicitly published, indicating room for improvement in compliance and transparency. The WHOIS data confirms the legitimacy and consistency of the domain registration with the company's identity and history. Overall, the website is functional, trustworthy, and business-focused, but would benefit from enhanced privacy disclosures and security hardening.

B

Bohušovická Mlékárna

cilemjezacit.cz

61

Bohušovická Mlékárna operates the website www.cilemjezacit.cz, promoting a protein-enriched dairy product tailored for sports and healthy lifestyles. The company targets health-conscious consumers in the Czech Republic, positioning itself in the retail sector with a focus on niche protein dairy products. The website is professionally designed, mobile-optimized, and provides comprehensive product information, ambassador endorsements, and clear contact details. Technically, the site uses modern web technologies including Bootstrap, Google Analytics, Facebook Pixel, and Google reCAPTCHA to enhance user experience and security. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust with a clear GDPR-compliant privacy policy and cookie consent. Overall, the website is trustworthy, well-maintained, and suitable for its business purpose.

S

Stodola Herink Restaurant & Wine bar

stodolaherink.cz

50

Stodola Herink is a Czech Republic based restaurant and wine bar established in 2016, offering dining services, wine selections with over 20 years of experience in wine import, and event hosting including weddings and corporate events. The business targets local customers and visitors seeking quality hospitality services with additional amenities such as large parking and family-friendly garden and playground. The website is built on WordPress with common plugins and modern frontend technologies, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit privacy or security policies. Overall, the website is professional and trustworthy with room for security and compliance improvements.

adMaster, s.r.o. is a Czech-based internet advertising agency specializing in monetizing advertising space for website operators and providing comprehensive media representation and campaign planning services. The company targets website owners, advertisers, and media agencies primarily in the Czech Republic and internationally. Their service portfolio includes media representation, video advertising, Google Adsense support, mobile advertising, and targeted ad formats. The website presents a professional and consistent brand image with clear contact information and company registration details, positioning adMaster as a credible small-sized player in the media industry since 2010. Technically, the website employs common web technologies such as jQuery, Bootstrap, Google reCAPTCHA, and responsive design scripts, hosted likely by WEDOS, a Czech hosting provider. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security measures include the use of Google reCAPTCHA on the contact form; however, no security headers or explicit SSL configuration details were found, indicating room for improvement in security posture. From a security perspective, the website does not expose sensitive data and uses HTTPS (implied by external scripts). However, it lacks security headers like CSP or HSTS and does not provide a security policy or vulnerability disclosure information. Privacy compliance is limited, with no dedicated cookie or privacy policy pages, though terms of service are available. The contact form collects user data with basic protections. Overall, the security score is moderate, and recommendations include enhancing security headers, publishing privacy and security policies, and improving form validation. The overall risk assessment is moderate with no critical issues or blocking mechanisms detected. The website is safe for general audiences, with no adult or questionable content. Strategic recommendations include improving privacy compliance, strengthening security headers, and establishing incident response and vulnerability disclosure processes to enhance trust and security culture.

S

SPIRITmedia s.r.o.

spiritmedia.cz

46

SPIRITmedia s.r.o. is a Czech Republic based online marketing company specializing in comprehensive digital marketing solutions including marketing strategies, PR and SEO content, media representation, performance advertising, and direct mailing services. The company has been operating since 2007, positioning itself as an experienced player in the Czech online marketing sector with a diverse portfolio of websites across multiple industries. The website is professionally designed with good navigation and mobile optimization, reflecting a solid digital presence. Technically, the site uses modern front-end frameworks such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking, indicating a moderate level of digital maturity. However, the inclusion of an external script from a suspicious domain raises security concerns that should be addressed promptly. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. Overall, the security posture is moderate but can be improved by implementing security headers and removing untrusted external scripts. The domain registration data is consistent with the business claims, supporting the legitimacy of the company. Strategic recommendations include enhancing privacy compliance, improving security practices, and verifying all third-party scripts to mitigate risks.

D

DeCP investing group SE

leslist.cz

39

Leslist.cz is a Czech language online news portal specializing in nature, forestry, and environmental topics. Operated by DeCP investing group SE since 2019, it serves a niche audience interested in ecological and forestry news. The website uses WordPress with common plugins such as Yoast SEO and integrates Google Analytics and Adsense for tracking and monetization. The site is professionally designed with good navigation and mobile optimization, offering regularly updated content including articles and video media. However, it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing some recommended security headers and no vulnerability disclosure information. Overall, the domain registration data is consistent and supports the legitimacy of the site.

S

SIESTA SOLUTION s.r.o.

siestasolution.com

68

Siesta Labs is a Czech Republic-based innovation lab and startup studio founded in 2020, specializing in software development and startup incubation services. Their offerings include AI, web and mobile applications, system architecture, and business consulting. The company targets businesses and startups seeking expert digital product engineering and growth support. The website reflects a professional and consistent brand with clear navigation and relevant content for their audience. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Application Insights, and Facebook Pixel. Hosting appears to be managed via Vas-hosting, with domain registration consistent with company history. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No explicit security or incident response policies are published, representing an area for improvement. Overall, the website is trustworthy, well-maintained, and serves its business purpose effectively.

Cafe Mozart is a hospitality business based in Prague, Czech Republic, operating a restaurant and an online e-shop for vouchers and cakes. The website presents a professional and consistent brand image with clear contact information and multilingual support. The business targets general consumers interested in dining and gift vouchers. Technically, the site uses a combination of jQuery, Bootstrap, and third-party marketing and analytics tools, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks some security headers and published security policies. WHOIS data is unavailable, which slightly reduces trustworthiness but does not detract from the overall professional presentation. Strategic improvements in security and transparency are recommended.

Café Mozart is a hospitality business located in Prague's Old Town, offering café and patisserie services with a unique view of the Astronomical Clock. The website presents a professional and content-rich experience targeting tourists and visitors seeking cultural and gastronomic experiences. The technical infrastructure uses common web technologies such as jQuery, Bootstrap, Google Analytics, and Google Maps API, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and public incident response policies. WHOIS data is unavailable, which slightly reduces trust but the website's contact information and social media presence support legitimacy. Overall, the site is well-designed and trustworthy for its business domain.

Grape Media s.r.o. is a Czech technology company specializing in innovative advertising technologies and services for internet advertising operators and advertisers. Founded in 2009, the company offers unique products such as VideoAd.cz, Adplan.cz, and Preroll.cz, which provide interactive video advertising formats, advertising space planning, and streaming ad technologies. Their business model focuses on developing proprietary technology and providing technical support for advertising campaigns, targeting a niche market within the digital advertising ecosystem. The company maintains a professional web presence with clear contact information and social media engagement, positioning itself as a trusted small technology provider in the Czech Republic. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google services such as Analytics and reCAPTCHA. The site is mobile-optimized and uses HTTPS, but lacks advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. Performance is moderate, and the site structure supports good user experience and navigation. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect its contact form, but does not implement key security headers or provide a security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content and business claims, supporting legitimacy. However, the absence of privacy and cookie policies suggests potential GDPR compliance gaps. Overall, the website is professional, trustworthy, and business-focused with a solid technical foundation but requires enhancements in privacy compliance and security best practices to strengthen its risk posture and regulatory adherence.

The website solarnivaric.cz represents Adventure Centrum, a small Czech Republic-based company specializing in the retail and distribution of portable solar cooking and energy products, primarily the GoSun brand. The business targets outdoor enthusiasts, campers, and eco-conscious consumers, offering a wide range of solar grills, cookers, power banks, and accessories. The company maintains a niche market position in the Czech and Slovak Republics with a clear focus on sustainable and innovative solar energy solutions for cooking and camping. Technically, the website is built on WordPress with Bootstrap and uses modern web technologies including asynchronous loading of analytics and marketing scripts such as Google Analytics and Facebook Pixel. The site is mobile optimized with good navigation and content structure, although some accessibility features are basic. SEO practices are adequately implemented with meta tags and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and visible privacy and cookie policies, which are compliance gaps. The use of multiple third-party tracking scripts indicates moderate user tracking. No vulnerabilities or incident response policies are publicly disclosed. Overall, the website is professional and trustworthy with a good business credibility score. The main risks relate to privacy compliance and security header implementation. Strategic improvements in these areas would enhance the site's security posture and regulatory compliance.

R

Recuair

recuair.com

58

Recuair is a Czech-based manufacturer specializing in decentralised heat recovery ventilation units designed to improve indoor air quality by providing smart, automatic ventilation with air and heat recovery. Their products target homeowners, apartment residents, and offices seeking energy-efficient, quiet, and allergen-free ventilation solutions. The company collaborates with academic institutions to develop patented technology, positioning itself as a leader in the Czech ventilation market. The website reflects a professional digital presence built on Joomla CMS with modern frameworks and includes remote monitoring features for their products. Security posture is generally good with HTTPS and CSRF protections, though some security headers and explicit policies are missing. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy or terms of service pages. WHOIS data is unavailable, raising questions about domain registration status, but the website content and branding appear consistent and trustworthy. Overall, the site demonstrates a solid business and technical foundation with room for improvement in transparency and security documentation.

O

onWebChat

onwebchat.com

67

onWebChat is a technology company specializing in AI-powered live chat and chatbot software designed to enhance customer support and boost sales for businesses. The company offers a SaaS model with free and paid subscription plans, including a Pro AI plan with advanced features. Their platform supports multiple integrations with popular CMS and e-commerce systems and provides native mobile applications for Android and iOS, indicating a mature and versatile product offering. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting businesses seeking to improve customer engagement through AI-driven chat solutions. Technically, the site uses modern web technologies including jQuery, Socket.IO, Bootstrap, and Google Tag Manager, ensuring a responsive and interactive user experience. Security-wise, the site enforces HTTPS with a reputable SSL certificate and implements cookie consent mechanisms, but lacks visible security headers and explicit incident response policies. The absence of WHOIS registration data reduces transparency but does not significantly detract from the site's legitimacy given the professional presentation and trust indicators such as user testimonials and social media presence. Overall, onWebChat demonstrates a solid digital maturity with room for improvement in security policy transparency and WHOIS data availability.

W

WHMCS Limited

whmcs.com

65

WHMCS Limited operates a leading web hosting automation platform that streamlines billing, provisioning, domain reselling, and support for web hosting businesses globally. Positioned as a market leader with over 35,000 customers in more than 200 countries, WHMCS offers a comprehensive suite of services including billing automation, SSL automation, and integrated support tools. The company targets web hosting providers, domain registrars, software developers, and cloud hosting providers, delivering a modular and developer-friendly platform. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, Microsoft Clarity, and LiveChat, ensuring fast performance, mobile responsiveness, and good accessibility. The site integrates multiple analytics and marketing tools, demonstrating digital maturity and a strong focus on user engagement and conversion. From a security perspective, WHMCS enforces HTTPS and uses several security best practices, including a responsible disclosure program. However, explicit security headers and a dedicated security policy page are not evident, and incident response contact details are not clearly published. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not significantly impact overall trust given the professional web presence. Overall, WHMCS presents a secure, professional, and trustworthy online presence with strong business credibility and technical implementation. Strategic improvements in security transparency and incident response communication would further enhance their security posture and customer trust.

B

Burza cenných papírů Praha, a.s.

pse.cz

67

Burza cenných papírů Praha, a.s. (Prague Stock Exchange) is the primary stock exchange operator in the Czech Republic, with a long-standing history dating back to 1871. The website provides comprehensive market data, investor and issuer guides, and access to multiple trading markets including Prime, Standard, Free, and Start markets. The platform targets investors, issuers, and financial market participants, offering a regulated environment for trading equities, bonds, structured products, and investment funds. The exchange maintains a strong market position as the main organizer of securities trading in the country. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and the Nette Framework for AJAX and forms. The site is mobile-optimized, accessible, and features good SEO practices. Performance is moderate with a professional design and clear navigation. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and integrates Google Tag Manager with privacy controls. While some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, the overall security posture is good with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation and official branding support its legitimacy. Overall, the Prague Stock Exchange website is a well-maintained, secure, and authoritative platform serving the Czech financial market. Strategic recommendations include enhancing security headers, improving incident response visibility, and maintaining privacy compliance to further strengthen trust and security posture.

S

Sdružení hasičů Čech, Moravy a Slezska

dh.cz

48

Sdružení hasičů Čech, Moravy a Slezska (SH ČMS) is the largest voluntary firefighting organization in the Czech Republic, serving over 350,000 members including a significant youth segment. The website serves as an informational portal providing organizational details, event calendars, news updates, and educational resources related to firefighting activities. The organization operates as a non-profit entity with strong ties to government agencies and other firefighting bodies. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, offering a moderate performance and good mobile responsiveness. However, it lacks visible privacy and cookie policies and does not show evidence of advanced security headers, which are areas for improvement. The security posture is basic but benefits from HTTPS usage. Overall, the site is professional and trustworthy, though it could enhance compliance and security practices.

Česká komora autorizovaných inženýrů a techniků činných ve výstavbě (ČKAIT) is a professional chamber representing authorized engineers and technicians active in the construction sector in the Czech Republic. The website serves as an information portal for members and the public, providing news, event calendars, educational resources, and authorization services. It maintains a professional presence with consistent branding and relevant content targeted at construction professionals and stakeholders. Technically, the site is built on Drupal 8 CMS, utilizing modern web technologies such as Bootstrap, jQuery, and Owl Carousel, with Google Analytics integrated for user tracking. The site is mobile optimized and provides accessibility features, though some improvements could be made in security headers and performance optimization. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible advanced security headers. WHOIS data is unavailable, which limits domain trust assessment, but the website content and structure indicate a legitimate and established organization. Overall, the site is professional, informative, and trustworthy for its intended audience.

N

nahlavnisoupravy.cz

nahlavnisoupravy.cz

35

nahlavnisoupravy.cz operates as a specialized e-commerce retailer focused on headsets, communication devices, and protective hearing equipment primarily serving the Czech market. The company is a distributor for 3M products and targets business customers such as call centers, industrial users, and outdoor enthusiasts. The website demonstrates a professional digital presence with clear product categorization and active social media engagement. Technically, the site is built on the OpenCart platform using modern web technologies including Bootstrap and jQuery, with HTTPS enforced and Google Analytics integrated for traffic monitoring. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy page. Overall, the site is functional and professional but would benefit from improved transparency and security practices.

B

British Constructional Steelwork Association Ltd.

bcsa.org.uk

68

The British Constructional Steelwork Association (BCSA) is a well-established trade body representing UK and Irish steelwork contractors and the wider structural steelwork supply chain. The organization provides membership services, industry resources, training, events, and a bookshop focused on steel construction. The website reflects a professional and authoritative presence in the steel construction sector, targeting contractors, industry members, and stakeholders. The BCSA maintains a strong market position as a national leader with a history dating back to 1997 domain registration and over a century of organizational heritage. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, Google reCAPTCHA, and CookieControl for privacy compliance. It is hosted via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized with good SEO and accessibility features, although some accessibility improvements could be made. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a mature approach to privacy. From a security perspective, the site uses HTTPS with an excellent SSL configuration and employs Google reCAPTCHA to protect forms. However, no explicit security headers were detected in the provided data, and no dedicated security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. Overall, the security posture is solid but could be enhanced by adding security headers and formal policies. The overall risk assessment is low, with a high trustworthiness rating supported by clear contact information, social media presence, and a long domain history. Strategic recommendations include implementing security headers, publishing security and incident response policies, and enhancing accessibility. These improvements would further strengthen the organization's digital maturity and trust with its audience.

A

Asociace korozních inženýrů, z.s.

aki-koroze.cz

46

Asociace korozních inženýrů, z.s. is a Czech non-profit association dedicated to corrosion engineering and protection. The organization offers educational courses, specialized training, conferences, consulting services, and publishes a bulletin related to corrosion. It serves corrosion engineers, industry professionals, academics, and students primarily in the Czech Republic. The association is a recognized member of the European Federation of Corrosion, enhancing its credibility and network. Technically, the website is built on a custom PHP-based CMS with a modern front-end stack including Bootstrap, jQuery, and various UI enhancement libraries. The site is mobile-optimized with good navigation and content relevance. However, performance is moderate and accessibility is basic. The site uses Google Analytics and Google Tag Manager for tracking, but lacks a cookie consent mechanism. From a security perspective, the site uses HTTPS and implements CAPTCHA on forms to prevent abuse. However, it lacks explicit security headers such as CSP and HSTS, and does not publish a security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the provided content, but security posture could be improved. Overall, the website is professional and trustworthy with a moderate security and privacy compliance posture. Strategic improvements in security headers, privacy policies, and incident response documentation are recommended to enhance trust and compliance.

S

Stardevelop Pty Ltd

stardevelop.com

63

Chatstack is a self-hosted live chat software provider operated by Stardevelop Pty Ltd, an Australian company established in 2003. The company offers PHP and MySQL based live chat solutions designed to help businesses engage customers, provide real-time support, and increase sales conversions. Their product suite includes desktop and mobile apps across major platforms, with a business model focused on one-time license fees and optional paid mobile applications. The website positions Chatstack as a leader in self-hosted live chat software with over 12,000 customers worldwide. Technically, the website employs a modern tech stack including PHP, MySQL, JavaScript, Bootstrap, and jQuery, with integrations for popular CMS platforms like WordPress, Joomla, and Magento. The site is well-designed, mobile-optimized, and includes comprehensive content and navigation. However, some technical aspects such as security headers and cookie consent mechanisms are missing or not detected, which could impact compliance and security posture. From a security perspective, the website emphasizes self-hosting to keep data private and secure, but lacks visible security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear professional and trustworthy. Overall, Chatstack presents a solid business offering with good technical implementation and user experience. The main risks relate to missing WHOIS data and limited visible security controls on the website. Strategic improvements in security headers, privacy compliance, and domain registration transparency would enhance trust and reduce risk.

Český svaz stavebních inženýrů (ČSSI) is a well-established non-profit professional association representing construction engineers and related professionals in the Czech Republic. Founded in 1865, it serves as a traditional and respected body providing membership services, organizing events, and maintaining historical archives. The website reflects a professional and consistent brand image targeting industry professionals and members. Technically, the site is built on WordPress with modern front-end libraries and frameworks, ensuring good mobile responsiveness and user experience. Security posture is adequate with HTTPS and Google reCAPTCHA v3 implemented; however, the absence of security headers and privacy policies indicates room for improvement. The lack of publicly available WHOIS data slightly reduces domain trust but does not detract significantly from the overall legitimacy given the site's content and partner affiliations. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

F

fib International

fib-international.org

52

fib International is a well-established not-for-profit federation dedicated to advancing structural concrete knowledge and practice globally. Founded in 2003, it serves a diverse audience including national member groups, individual professionals, and corporate members. The organization offers memberships, technical commissions, publications, and events to foster knowledge dissemination and industry advancement. The website reflects a mature digital presence with a Joomla CMS, modern UI frameworks, and integration of analytics and e-commerce for publication sales. Security posture is generally good with HTTPS and domain transfer lock, though DNSSEC is not enabled and security headers are not evident. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is professional, content-rich, and trustworthy, supporting the federation's mission effectively.

B

Budamont

budamont.cz

51

Budamont.cz is a Czech-based company specializing in the import and distribution of wines from around the world. The company also operates related businesses including a restaurant, a carpentry workshop, and a wine e-commerce platform. The website reflects a small but established business with a focus on hospitality and retail sectors. The domain has been registered since 2002, supporting the company's longevity and market presence. Technically, the website uses modern frameworks such as Bootstrap and integrates Google Tag Manager for analytics and marketing purposes. The cookie consent mechanism is implemented, indicating some level of privacy compliance, although no explicit privacy policy or terms of service pages were found. Security posture is moderate with room for improvement, particularly in implementing security headers and publishing security policies. Overall, the website is professionally designed with good navigation and mobile optimization, targeting a mature audience interested in wine and hospitality services.

I

Intersnack, a.s.

intersnack.cz

63

Intersnack, a.s. is a leading manufacturer and distributor of salty snack products in the Czech Republic and internationally. The company operates under the parent Intersnack Group and manages a diverse portfolio of brands. The website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies, offering comprehensive corporate and sustainability information. Security posture is generally strong with HTTPS enforced and secure form handling, though improvements in security headers and cookie consent are recommended. The absence of WHOIS data limits domain trust assessment but the professional website and linked subsidiaries support legitimacy. Overall, the site is well-structured, user-friendly, and targets consumers, partners, and potential employees.

M

Měšťanský pivovar Havlíčkův Brod a.s.

hbrebel.cz

47

Měšťanský pivovar Havlíčkův Brod a.s. operates the website www.hbrebel.cz, presenting itself as a historic brewery established in 1834 in the Czech Republic. The company offers a diverse portfolio of beers, including traditional and specialty brews, and engages customers through brewery tours, original Rebel restaurants, and an e-commerce platform. The website targets adult consumers, requiring age verification due to alcohol-related content. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, Hotjar, and Facebook Pixel, with a custom CMS by CzechProject spol. s r.o. The site is mobile optimized and SEO friendly, though accessibility could be improved. Security posture is good with HTTPS and reCAPTCHA on forms, but lacks some security headers and a published security policy. Privacy compliance is strong with GDPR-aligned privacy and cookie policies. However, the absence of WHOIS data for the domain reduces trust from a domain registration perspective. Overall, the website is professional, functional, and trustworthy from a business and user perspective, but domain legitimacy verification is limited.

T

THERMOTECHNIKA BOHEMIA s.r.o.

tcbohemia.com

55

THERMOTECHNIKA BOHEMIA s.r.o. operates a professional website focused on the distribution and manufacturing of commercial refrigeration, freezing, and dispensing equipment primarily for the gastronomy sector in the Czech Republic and Central Europe. The company has a strong market presence with subsidiaries in multiple Central European countries and offers a wide range of products and services including custom manufacturing and extensive servicing capabilities. The website reflects a mature digital infrastructure with modern technologies such as Bootstrap, jQuery, Google Analytics, and a comprehensive cookie consent mechanism, indicating compliance with GDPR and privacy best practices. Security posture is solid with HTTPS enforced and anti-spam measures like Google reCAPTCHA, though additional security headers could enhance protection. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

A

Asociace sklářského a keramického průmyslu ČR

skloakeramika.cz

44

The website skloakeramika.cz serves as an informational portal dedicated to the glass, ceramics, and porcelain industries in the Czech Republic. Operated by the Asociace sklářského a keramického průmyslu ČR, it provides industry news, job opportunities, event listings, educational resources, and a company directory. The portal targets professionals and the general public interested in these manufacturing sectors, positioning itself as a niche but authoritative source within the Czech market. The business model is primarily informational and association-driven, supporting industry awareness and networking.

B

Bohemia Hop, a.s.

bohemiahop.cz

43

Bohemia Hop, a.s. is a Czech-based company specializing in the procurement and sale of hops, serving both domestic and international beverage industry clients. The company offers a diverse portfolio of Czech hop varieties catering to large and craft breweries, positioning itself as a key player in the hop manufacturing and distribution sector. The website reflects a professional business presence with clear contact information and social media engagement, supporting its market position. Technically, the website is built on Joomla CMS with modern frontend frameworks like Bootstrap and jQuery, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and presents good navigation and content quality, although some accessibility features could be improved. Security posture is adequate with HTTPS enabled and CSRF tokens in use, but lacks comprehensive security headers and explicit privacy or cookie policies. The absence of WHOIS registration data is a notable concern, limiting the ability to fully verify domain legitimacy and ownership. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security readiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and domain registration transparency to strengthen its risk profile and trustworthiness.

Č

Česká společnost pro jakost

csq.cz

56

Česká společnost pro jakost is a Czech organization specializing in quality management systems, offering training, certification, and consultancy services across multiple sectors including automotive, environmental management, and public administration. The website is professionally designed using TYPO3 CMS with Bootstrap and FontAwesome, providing a good user experience and clear navigation. The presence of detailed privacy and terms policies indicates attention to compliance, although cookie consent mechanisms are missing. Security posture is strong with HTTPS and secure forms, but could be improved with additional security headers and incident response information. The absence of WHOIS data is a concern for domain legitimacy but the website content and certifications suggest a credible entity.

B

Balance 21, s.r.o.

bala21.cz

52

Balance 21, s.r.o. operates the website bala21.cz, an e-commerce platform specializing in probiotic products including kombucha-based drinks and supplements. The company targets health-conscious consumers in the Czech Republic, offering a range of probiotic beverages and capsules designed to support digestion and immunity. The website presents a professional and consistent brand image with clear business and legal information, including GDPR-compliant privacy policies and terms of service. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Hosting is provided by WEDOS, consistent with the domain registration data. Security posture is adequate with HTTPS enforced and secure forms, though some security headers are missing and no incident response or vulnerability disclosure information is published. Overall, the site is trustworthy and well-positioned in its niche market.

The website tlds.africa operates as a domain registration service specializing in African country code top-level domains (ccTLDs) and a broad range of other domain extensions. It targets individuals and businesses seeking to establish an African online identity through domain registrations. The business is relatively small, founded in 2017, and operates under a privacy-protected domain registration, which is common in this industry. The site provides clear domain pricing, a domain search function, and contact information, positioning itself as a niche regional registrar with a focus on African domains. Technically, the website employs a standard modern web technology stack including jQuery, Bootstrap, Popper.js, and FontAwesome, ensuring a responsive and user-friendly interface. The site is mobile optimized and has a moderate performance profile. However, it lacks advanced SEO and accessibility features, and no CMS is detected. Hosting is provided by Gransy s.r.o., a known registrar and hosting provider. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which are recommended to enhance domain and web security. There is no visible privacy or cookie policy, which is a compliance gap especially under GDPR. Incident response and vulnerability disclosure mechanisms are not present, indicating room for improvement in security posture and transparency. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance improvements, and better transparency to increase trustworthiness and regulatory adherence.

G

Gransy s.r.o.

subreg.cz

60

Subreg.cz is a well-established domain registration and related services provider operating primarily in the Czech Republic and Slovakia. The company, Gransy s.r.o., founded in 2007, holds ICANN accreditation and offers a broad portfolio of domain extensions, SSL certificates, and hosting services. The website reflects a professional business model targeting individuals and companies seeking domain registration and internet presence solutions. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google reCAPTCHA, ensuring a secure and user-friendly experience. Security posture is solid with HTTPS and form protections, though improvements in security headers and explicit policies are recommended. Overall, the site is trustworthy, with clear contact information and consistent branding, supporting its legitimacy and market position.

G

Gransy s.r.o.

regtons.com

68

Regtons.com is a domain registration platform operated by Gransy s.r.o., an ICANN accredited registrar based in the Czech Republic. The company offers a broad portfolio of domain services including gTLDs, ccTLDs, reseller programs, and API automation solutions targeting registrars, hosting providers, and domain owners. The website demonstrates a professional business presence with clear service offerings and partner programs. Technically, the site uses a traditional tech stack with jQuery, Bootstrap, and several plugins, but some components like jQuery are outdated, posing potential security risks. Security posture is moderate with HTTPS usage and abuse contact info, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing cookie consent and privacy policy indicators. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

S

SIA Bio-Venta

bioventa.lv

51

SIA Bio-Venta operates as the largest biodiesel production complex in the Baltic states, specializing in the manufacture and supply of biodiesel fuels and related chemical products. The company is part of the VK Tranzits holding group, which includes several related companies in logistics and terminal services. The website reflects a professional corporate presence with clear business information, contact details, and a focus on compliance with privacy regulations through Cookiebot integration. The company targets business clients and suppliers within the energy sector, emphasizing its market leadership in the region. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, ensuring a responsive and user-friendly experience. Cookie consent and privacy policies are well implemented, demonstrating GDPR compliance. Security posture is adequate but could be improved with additional HTTP security headers and explicit security policy disclosures. Overall, the website presents a trustworthy and professional image consistent with a large energy sector enterprise.

J

J.P.N. Cars s.r.o.

jpncars.cz

45

J.P.N. Cars s.r.o. is an established automotive dealership and service provider based in Brno, Czech Republic, specializing in Nissan and Ssangyong vehicles. The company has a long-standing market presence dating back to 1992, offering new and used car sales alongside comprehensive servicing. Their website reflects a professional and consistent brand image, targeting local customers with clear contact information and social media engagement. Technically, the site is built on the concrete5 CMS platform with modern frontend libraries, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the site is trustworthy and compliant with GDPR, but could benefit from enhanced security practices and transparency.

S

SuperHracky.eu

superhracky.eu

46

SuperHracky.eu is a Czech-based e-commerce and wholesale toy retailer offering a wide range of products including LEGO sets and various categories of children's toys. The website is built on the PrestaShop platform and features a professional design with clear navigation and mobile optimization. The business targets retail and wholesale customers primarily within the Czech Republic, supported by a physical store in Žatec. The product catalog is extensive, with detailed descriptions and images enhancing user experience. Technically, the website employs common web technologies such as jQuery, Bootstrap, and Font Awesome, ensuring a modern and responsive interface. HTTPS is enforced, and a cookie consent mechanism is implemented to comply with privacy regulations. However, some security headers are missing, and no explicit security or incident response policies are visible, indicating room for improvement in security posture. From a security and compliance perspective, the site shows basic GDPR compliance through cookie consent but lacks a visible privacy policy and incident response contact details. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain registration is consistent with the business profile, and no WAF or blocking mechanisms interfere with content accessibility. Overall, SuperHracky.eu presents a trustworthy and functional e-commerce platform with good business credibility and moderate security maturity. Strategic enhancements in security headers, privacy documentation, and incident response readiness would further strengthen its posture.

Café Mozart is a hospitality business located in Prague's Old Town, offering a unique cafe experience with home-made cakes, coffee, piano concerts, and event hosting. The business leverages its prime location opposite the Prague Astronomical Clock to attract tourists and locals seeking cultural and culinary experiences. The website reflects a professional and consistent brand image with clear contact information and multilingual support. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Maps API, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is generally good with HTTPS and cookie consent mechanisms, though some improvements are recommended in security headers and error handling. The absence of WHOIS data slightly reduces trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, fixing minor code errors, and maintaining GDPR compliance.

W

we_can – because we_know

wecan.net

46

The website 'wecan.net' presents a professional online presence built on WordPress with the Elementor page builder. The domain is well-established, created in 2002, and registered with a reputable registrar, indicating a stable and legitimate business entity. The site design is modern and visually appealing, with good mobile optimization and user experience. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Technically, the site uses HTTPS and includes Google reCAPTCHA for form security, but it lacks important security headers and DNSSEC is not enabled, representing areas for security improvement. Overall, the site is accessible with no WAF or blocking mechanisms detected, but it would benefit from enhanced privacy compliance and security hardening.

C

Czech DPO Office s.r.o.

czechdpooffice.eu

62

Czech DPO Office s.r.o. is a specialized Czech company providing expert GDPR compliance and Data Protection Officer (DPO) services to both public and private sector clients. Founded in 2018, the company focuses on delivering comprehensive GDPR consulting, legal services, and eLearning training to help organizations meet EU data protection regulations efficiently. Their business model centers on leveraging modern software technologies to minimize operational burdens on clients while ensuring compliance. The website reflects a professional and consistent brand presence targeting organizations requiring GDPR expertise within the Czech Republic. Technically, the website is built on a modern WordPress platform using well-known plugins such as LearnDash for eLearning, Complianz for GDPR cookie management, and WPBakery for page building. The site is mobile-optimized with good SEO and accessibility features, though some improvements in security headers and accessibility could be made. Performance is moderate, with a clean and structured design that supports user navigation and engagement. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies or incident response information suggests room for improvement in transparency and preparedness. The domain WHOIS data is privacy protected by EURid, which is typical for EU domains and justified given the nature of the business. Overall, Czech DPO Office s.r.o. presents a trustworthy and professional online presence with a solid foundation in GDPR compliance services. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and maintaining up-to-date software to mitigate risks. These steps will strengthen their security posture and client trust in a highly regulated data protection environment.

CPBS Institute z.s. is a Czech non-profit organization specializing in research, development, and education in the fields of population protection, crisis management, and critical infrastructure. Established in 2008, it operates with government partnerships and focuses on innovative educational technologies including virtual reality and simulation. The website reflects a professional presence with clear information about their projects, educational offerings, and contact details. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, providing a responsive and user-friendly experience. However, some compliance gaps exist, notably the absence of a dedicated privacy policy and terms of service pages. Security-wise, the site uses HTTPS and implements a cookie consent mechanism but lacks visible security headers and explicit incident response contacts. Overall, the website is trustworthy and well-positioned within its niche but would benefit from enhanced privacy and security documentation.

Dragon Real is a small real estate agency based in Slovakia, specializing in property sales, rentals, and professional consultancy primarily in the Prešov region. The company has an established online presence with a professionally designed WordPress website that leverages modern plugins and tools such as WooCommerce, WPBakery, and Google Tag Manager. The website is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content tailored to its target audience. Security measures include HTTPS with excellent SSL configuration and DNSSEC enabled, along with the use of Google reCAPTCHA to protect forms. However, the site lacks explicit privacy and terms of service policies, which are important for GDPR compliance and user trust. Overall, the website demonstrates a solid technical foundation and business credibility but would benefit from enhanced privacy compliance and explicit contact information.

H

HALO reality

haloreality.sk

46

HALO reality is a leading real estate agency in Slovakia, offering comprehensive property sales, rentals, and consultancy services. With over a decade of experience and a large client base, it holds a strong market position as the largest and most trusted real estate company in the country. The website reflects a professional digital presence with good content quality, clear navigation, and mobile optimization. Technically, it uses a custom ASP.NET CMS with modern front-end technologies like jQuery and Bootstrap, and integrates Google Maps for location services. Security posture is solid with HTTPS and security headers, though explicit cookie consent and security policies could be improved. Overall, the site is trustworthy and well-positioned for its business domain.

T

Topinfo s.r.o.

confea.net

8

Confea is an online event management service operated by Topinfo s.r.o., offering a comprehensive platform for organizing conferences, summits, and congresses. The service provides modules for participant registration, abstract submission and review, program creation, certificate generation, and participant satisfaction surveys. Established since 2006, Confea targets institutions and companies organizing events primarily in the Czech Republic but also internationally. The business model is SaaS-based with tiered pricing depending on event size and feature usage. Technically, the website is built on Topinfo CMS and uses legacy technologies such as jQuery 1.12.4 and Bootstrap for frontend components. The site is mobile responsive and provides a good user experience with clear navigation and professional design. However, the technology stack shows signs of aging, and there is room for modernization and improved security practices. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. The WHOIS data for the domain is missing, raising concerns about domain legitimacy and registration status. Contact information is clearly presented, but no incident response or security policies are published. Overall, the security posture is moderate but requires significant improvements to meet modern standards. The overall risk assessment suggests that while the business and website appear professional and functional, the lack of domain registration transparency and missing privacy compliance elements pose risks. Strategic recommendations include verifying domain registration, implementing comprehensive privacy and cookie policies, updating technology stack components, and enhancing security headers and practices.

S

Super-Hobby.com

super-hobby.cz

63

Super-Hobby.com is an established Czech e-commerce retailer specializing in modeling hobby products including plastic models, tools, chemicals, and literature. The website presents a professional and well-structured platform targeting hobbyists and collectors in the Czech Republic. The business claims operation since 2004 and offers customer-centric services such as a 14-day return policy and self-service order management. Technically, the site uses a combination of jQuery, Bootstrap, and Font Awesome with custom scripts and styles, delivering moderate performance and good mobile optimization. Security measures include HTTPS enforcement, captcha on forms, and cookie consent mechanisms, although some security headers and policies are missing. The absence of WHOIS data reduces domain trust but does not detract from the apparent legitimacy of the business. Overall, the site is safe, trustworthy, and well-positioned in its niche.

P

Prowebdesign

prowebdesign.ro

62

Prowebdesign is a full-service web design and development company based in Romania, specializing in custom WordPress websites, UI/UX design, digital product design, SEO, and branding services. Established since 2006, the company positions itself as a reliable outsourcing partner with over 15 years of experience and a strong portfolio of diverse projects ranging from small business websites to complex web applications. The website reflects a professional and consistent brand image, targeting businesses seeking quality web solutions at competitive pricing. Technically, the website is built on WordPress with modern technologies including Bootstrap, jQuery, and FontAwesome. It employs Google Tag Manager for analytics and has implemented cookie consent mechanisms to comply with GDPR. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security best practices such as HTTPS are in place, but additional security headers and explicit incident response policies are absent. From a security perspective, the site shows a good baseline with no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS transparency due to privacy protection limits domain trust verification. The website does not display direct contact emails or phone numbers, relying on a contact form instead. Privacy and cookie policies are present and appear compliant with GDPR requirements. Overall, the website is trustworthy, professional, and well-structured, suitable for its business purpose. The main risk lies in the absence of detailed WHOIS data and limited explicit security disclosures. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility features to strengthen compliance and trust.

V

VK Tranzits, SIA

vkekspedicija.lv

51

VK Ekspedīcija is a Latvian freight forwarding and logistics company specializing in the transportation of dangerous goods and wholesale of chemical products such as methanol. The company operates as part of a holding group with related subsidiaries focused on logistics, chemical production, and terminal services. Their market position is that of a regional logistics provider with a focus on specialized cargo handling. Technically, the website employs modern JavaScript libraries and frameworks including jQuery, Bootstrap, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and business information. Security posture is adequate with HTTPS usage and cookie consent but lacks explicit security headers and vulnerability disclosure mechanisms. Overall, the website is professional and trustworthy with good privacy compliance and business credibility.