Security Directory

R

RI OKNA

ri-okna.fr

53

RI OKNA is a traditional Czech manufacturer specializing in high-quality windows and doors, operating since 1994 with nearly 30 years of experience. The company targets both domestic and international markets, offering a wide range of products including PVC, aluminum, wood, and composite windows and doors. Their business model focuses on manufacturing and direct sales, emphasizing quality materials and customer service. The website is professionally designed, multilingual, and optimized for French-speaking customers, reflecting a medium-sized enterprise with a strong market position in manufacturing.

E

EastBiz.com, Inc.

incparadise.com

59

EastBiz.com, Inc., operating the IncParadise website, is a specialized service provider focusing on business incorporation and registered agent services primarily in Nevada and Wyoming. The company offers a comprehensive suite of services including corporation and LLC formation, registered agent services, mail forwarding, and compliance support. Their market position is that of an established niche player with over a decade of experience, targeting entrepreneurs and small to medium-sized businesses seeking incorporation in the United States. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Google Tag Manager, and various marketing and analytics tools such as Facebook Pixel and Hotjar. The site is hosted with reputable providers and uses Cloudflare DNS, ensuring good performance and availability. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with a strong SSL configuration and employs reCAPTCHA for form protection. However, it lacks some security headers and DNSSEC is not enabled, which are areas for improvement. The presence of multiple tracking scripts without a visible cookie consent mechanism indicates partial privacy compliance. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website presents a professional and trustworthy front for its business services, with good technical and security foundations but room for enhancement in privacy compliance and security hardening.

S

Société des Avis Garantis

societe-des-avis-garantis.fr

53

Société des Avis Garantis is a French company specializing in providing authentic customer review solutions for e-commerce merchants. Their platform supports multiple popular e-commerce platforms such as PrestaShop, Shopify, Magento, and WooCommerce, offering features like review moderation, Google Shopping integration, multilingual support, and customizable widgets. The website is professionally designed, well-structured, and provides clear information about their services, target audience, and trust indicators including GDPR compliance and certifications. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies including Google reCAPTCHA for form security. The SSL configuration is good, and cookie consent mechanisms are in place, reflecting a strong privacy posture. However, WHOIS data is not publicly available, indicating privacy protection which is reasonable for this business type. Overall, the site demonstrates a mature digital presence with good security and compliance practices.

D

DesignPlanet

designplanet.ua

66

DesignPlanet is a Ukrainian web development and branding agency with over 14 years of experience and a portfolio of more than 300 projects. The company offers comprehensive digital services including web development, branding, UX/UI design, and mobile app development targeting businesses seeking professional digital solutions. The website is well-designed, mobile-optimized, and presents a professional image with strong client trust indicators such as notable client logos and social media presence on Behance and Clutch. Technically, the site is built on WordPress with modern JavaScript libraries including Three.js and uses Google Tag Manager and reCAPTCHA for analytics and security. However, the site lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is good with HTTPS and form protections but could be improved by adding security headers and a vulnerability disclosure policy.

H

Hochschule Darmstadt

h-da.de

10

Hochschule Darmstadt (h_da) is a well-established German university of applied sciences focused on education, research, and transfer in technology, society, and art. The website serves as a comprehensive portal for students, staff, and partners, offering detailed information about academic programs, research initiatives, campus development, and services. The institution maintains a strong regional and international presence, including partnerships such as the European University of Technology (EUT+). Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Performance is moderate, with modern web technologies and responsive design. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formal security policies such as vulnerability disclosure or incident response contacts. Privacy compliance is partial, with no explicit privacy or cookie policies detected on the main page. The WHOIS data is minimal but consistent with the institution's identity, supporting legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy transparency and security policy publication would enhance compliance and user trust.

F

Fresh Food Ventures Group BV

crisp.app

71

Crisp is an online fresh grocery delivery service operating primarily in Belgium (Vlaanderen). The company offers a mobile app and website platform where consumers can order quality fresh products sourced directly from small producers and have them delivered to their homes. The business model emphasizes freshness, sustainability, and convenience, with delivery available seven days a week and payment options including meal vouchers. The website is professionally designed, mobile-optimized, and provides clear customer support channels including WhatsApp. The company holds a B Corporation certification, indicating commitment to social and environmental responsibility. Technically, the website uses modern web technologies and Google Tag Manager for analytics and marketing, with a fast and accessible user experience. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, Crisp presents a trustworthy and mature online grocery platform with strong business credibility and compliance with privacy regulations.

ILOVEGRAFFITI.DE is a specialized German media platform dedicated to graffiti and street art culture. It offers a rich variety of content including news articles, podcasts, video series, interviews, and an online shop selling related books, magazines, posters, DVDs, and webzines. The platform targets graffiti artists, urban culture enthusiasts, and the graffiti community primarily in Germany and Europe. The website is built on WordPress CMS and uses modern web technologies such as Google Fonts and jQuery. It is mobile-optimized and provides a good user experience with clear navigation and extensive content archives dating back over a decade. Security-wise, the site uses HTTPS but lacks important security headers and explicit privacy or cookie policies, which are areas for improvement. No WAF or blocking mechanisms were detected, and no suspicious or malicious content was found. Overall, the site is a credible niche media outlet with moderate security posture and compliance gaps.

H

HALLENKUNST | MARKTHALLE CHEMNITZ

hallenkunst.de

7

The website www.hallenkunst.de is a Wix-hosted site with minimal content and no visible privacy, cookie, or terms of service policies. The business focus is unclear due to lack of descriptive content, but the presence of art-related media suggests an art or gallery-related business. The technical infrastructure relies on Wix technologies and standard web technologies such as JavaScript, CSS, and HTML5. Mobile optimization is good, but overall content quality and SEO are basic. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. No contact information or compliance indicators are present, which limits trust and business credibility. Overall, the site is accessible without WAF or security challenges and contains no adult or explicit content.

M

Musée national et domaine du château de Pau

chateau-pau.fr

56

The Château de Pau website represents the official digital presence of the Musée national et domaine du château de Pau, a French national museum under the Ministry of Culture. The site offers comprehensive information about the museum's history, collections, exhibitions, events, and visitor services, targeting a broad audience including tourists, educators, researchers, and cultural professionals. The business model is government-funded, focusing on cultural preservation and public education. The museum maintains a strong market position as a recognized heritage site with partnerships with national cultural organizations.

The website www.paujeunes.fr serves as an official local government platform dedicated to supporting youth in Pau, France. It provides comprehensive information and resources related to education, employment, social engagement, and local aids for young people. The platform is well-branded with consistent city imagery and messaging, targeting students and young adults in the region. Technically, the site is built on Drupal 10 and integrates Matomo analytics with user consent mechanisms, reflecting a moderate level of digital maturity. The site is mobile-optimized and accessible, with good navigation and content relevance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data is a notable gap but does not detract significantly from the site's legitimacy given its official branding and content. Overall, the platform is a trustworthy and valuable resource for its intended audience.

L

Les Amis du Palais de Tokyo

lesamisdupalaisdetokyo.com

60

Les Amis du Palais de Tokyo is a cultural association founded in 2019 that supports the Palais de Tokyo contemporary art center in Paris through membership and patronage. The website serves as a platform to inform members and potential donors about exclusive events, artist meetings, and benefits. The site is well-branded, consistent, and targets art enthusiasts and patrons. Technically, the site uses modern web technologies including Laravel backend, Google Analytics, Facebook SDK, and Google reCAPTCHA, hosted by OVH sas. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS, CSRF tokens, and cookie consent, but lacks advanced security headers and formal security policies. No blocking or WAF challenges were detected, allowing full content access. Overall, the site is trustworthy and professionally maintained, with room for improvement in security policy transparency and incident response readiness.

L

Limette Czech s.r.o.

limette.cz

58

Limette Czech s.r.o. is a small Czech Republic-based IT service company founded in 2019, specializing in comprehensive IT solutions including web development, IT training, software development, data analysis, and artificial intelligence training. The company has established its own office premises and operates as a registered legal entity, positioning itself as a growing player in the local IT services market. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the website is built on WordPress using the Elementor page builder and incorporates SEO optimization via the Rank Math plugin. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security hardening. HTTPS is enabled, but security headers are missing, and no advanced security policies or incident response information is published. From a security perspective, the site shows basic good practices such as HTTPS but lacks privacy and cookie policies, security headers, and vulnerability disclosure mechanisms. No forms or contact emails are present on the homepage, limiting direct user interaction points. The WHOIS data is consistent with the business claims, indicating legitimacy. Overall, the site is safe, professional, and suitable for general audiences without any adult or questionable content. Strategically, the company should prioritize implementing privacy and cookie policies to improve GDPR compliance, add security headers to enhance protection, and publish incident response and vulnerability disclosure information to build trust. Enhancing contact information visibility and adding social media presence could also improve business credibility and user engagement.

SLUTO s.r.o. operates an online platform (sluto.online) providing electronic tax forms and declarations primarily targeting Czech-speaking users. The website offers a streamlined service for submitting tax-related documents such as annual tax reconciliations. The business appears to be a small-sized entity founded in 2021, with a niche focus in the tax services sector. The site is professionally designed with consistent branding and clear navigation, supporting both Czech and English languages. Technical infrastructure is based on WordPress CMS hosted likely by Websupport, utilizing common plugins and Google Analytics for visitor insights. The site implements a cookie consent mechanism aligned with GDPR requirements, although a dedicated privacy policy page on the domain is absent, with references to an external domain for cookie usage information. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, but lacks advanced security headers and explicit security policies. Overall, the website is functional, trustworthy, and compliant with basic privacy standards, serving its target audience effectively.

S

Site officiel de la Ville de Tarbes

tarbes.fr

48

The website www.tarbes.fr serves as the official digital portal for the city of Tarbes, France, providing residents and visitors with comprehensive information about municipal services, news, urban planning, social programs, and cultural activities. The site is positioned as a key communication channel for the local government, offering a broad range of public service information and administrative resources. The target audience primarily includes local citizens, businesses, and visitors seeking official city information. Technically, the website is built on the WordPress CMS platform, utilizing popular plugins such as Yoast SEO for search engine optimization and Matomo for analytics, alongside Google Analytics which is disabled by default pending user consent. The site incorporates modern web technologies including jQuery, FontAwesome, and Leaflet for interactive maps. Mobile optimization and navigation clarity are well addressed, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, the absence of a published privacy policy, terms of service, and incident response contact information represents gaps in compliance and transparency. The WHOIS data is unavailable, which slightly reduces trustworthiness but does not detract significantly given the official nature and branding of the site. Overall, the website demonstrates a solid foundation in content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and terms documents, enhancing security headers, and establishing clear incident response channels to strengthen trust and compliance.

Pau Agglomération operates an official government website serving the city of Pau and its surrounding agglomeration in France. The site provides comprehensive information on daily life, urban planning, social services, culture, environment, and more, targeting residents and visitors. It is positioned as a key local government communication and service platform. Technically, the website is built on Drupal 10, employs Matomo for analytics, and uses modern web technologies ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with privacy and cookie policies and consent mechanisms. However, explicit contact emails and phone numbers are not directly visible, and no terms of service or vulnerability disclosure pages were found. Overall, the website is professional, trustworthy, and well-maintained, reflecting a mature digital presence for a government entity.

C

Cité du design – Esad Saint-Étienne

citedudesign.com

66

Cité du design – Esad Saint-Étienne is a well-established cultural and educational institution based in France, specializing in design and art education, exhibitions, and research. The website reflects a mature organization with a strong regional presence and partnerships with governmental and cultural bodies. Their services cater to students, researchers, and the general public interested in design. Technically, the website employs modern JavaScript libraries and multimedia content, hosted by a reputable registrar OVH sas, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is strong, featuring a comprehensive privacy policy and a robust cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

D

Diverto

diverto.tv

67

Diverto is a French media platform specializing in entertainment news, focusing on television, streaming platforms, and pop culture. The website provides TV program schedules and news related to streaming services, targeting a general audience interested in media and entertainment. The platform positions itself as a niche media outlet within the French market, offering curated content relevant to TV and streaming enthusiasts. Technically, Diverto employs a modern web stack including JavaScript frameworks like Stimulus and Symfony UX Live Component, along with Tailwind CSS for styling. It integrates multiple third-party services for analytics, advertising, and consent management, demonstrating a mature digital infrastructure. Security-wise, the website enforces HTTPS and uses a consent management platform (Didomi) to comply with privacy regulations. However, explicit security headers and incident response policies are not clearly published, and WHOIS data is unavailable, which slightly impacts trust. Overall, Diverto presents a professional and functional media website with good privacy compliance but could improve transparency and security documentation.

R

Rozum a Cit, z. s.

pestouni-rac.cz

10

Rozum a Cit, z. s. is a Czech non-profit organization dedicated to supporting foster families and promoting substitute family care in the Czech Republic for over 20 years. The organization offers comprehensive services including foster family accompaniment, counseling and therapy, education for foster parents, and facilitating contact with biological families. Their market position is stable within the non-profit sector, focusing on social support and education. The website is professionally designed with clear navigation and good content relevance, targeting foster families and professionals in the field. Technically, the site uses a modern stack including jQuery, Bootstrap, and various UI libraries, with a CMS named inPage. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the site content and contact details appear legitimate and consistent with the organization's claims.

U

Université de technologie de Compiègne

utc.fr

57

Université de technologie de Compiègne (UTC) is a well-established French technological university focused on higher education, research, and innovation. The website reflects a professional and consistent brand image, targeting students, researchers, and industry partners. It offers comprehensive educational services and fosters technological advancement. The digital infrastructure is based on WordPress with modern frameworks and good mobile optimization, ensuring a positive user experience. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response contacts are not publicly visible. Overall, the domain and website appear legitimate and trustworthy, consistent with an educational institution of its stature.

T

Ticket for Change

ticketforchange.org

50

Ticket for Change is a French non-profit organization focused on fostering social entrepreneurship and leadership development. Established in 2013, it offers educational programs, community support, and resources to entrepreneurs, young adults, and corporate leaders aiming to create positive social and environmental impact. The organization positions itself as a pioneering school for changemakers, leveraging innovative pedagogies and a strong community network. Technically, the website is built on WordPress with modern SEO and analytics tools, hosted behind Cloudflare for performance and security. The site features comprehensive cookie consent mechanisms and privacy policies aligned with GDPR requirements. Security posture is solid with HTTPS and domain protections, though improvements in security headers and incident response transparency are recommended. Overall, the website reflects a professional, trustworthy, and well-established entity with a clear mission and audience.

M

Krby a kamna

mojekrby.cz

60

The website www.mojekrby.cz is a Czech e-commerce platform specializing in the sale of fireplaces, stoves, and related accessories. It targets residential customers and craftsmen seeking heating solutions. The business operates a niche retail model with a clear product catalog and online shopping capabilities, including user registration and newsletter subscription. The site is professionally designed with good navigation and mobile optimization, leveraging modern web technologies such as jQuery, Swiper.js, and Google Analytics for tracking and marketing. Technically, the site uses the K2 e-shop system and integrates several third-party services including Google Tag Manager and Packeta for logistics. Performance is moderate with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though no advanced security headers or explicit security policies are published. The absence of WHOIS registration data is a concern for domain legitimacy and trust. Overall, the site presents a professional and trustworthy front for its business, but the lack of publicly available domain registration details and direct contact information slightly reduces its credibility. There are no indications of malicious content or security vulnerabilities in the visible content. Strategic improvements in security transparency and contact information disclosure would enhance trust and compliance.

K

Klasik dutalon

klasikduatlon.cz

42

The website klasikduatlon.cz is dedicated to organizing and promoting duathlon events in Příbram, Czech Republic, targeting athletes and sports enthusiasts. It provides detailed information about race categories, schedules, registration, and event logistics. The site is built on WordPress using common libraries such as jQuery and Bootstrap, with moderate mobile optimization and basic SEO features. However, it lacks critical security features such as HTTPS and security headers, and does not provide privacy or cookie policies, which are essential for compliance and user trust. The domain registration data is inconsistent with the website's content timeline, raising questions about the domain's history and ownership transparency. Overall, the site serves its business purpose but requires significant improvements in security and compliance to enhance trustworthiness and protect users.

Tyvado is a Czech company specializing in modern shading technology products including awnings, blinds, pergolas, and insect screens. The company targets homeowners and investors seeking comfort, ecological solutions, and energy savings. With over 12 years of experience and more than 200 completed projects, Tyvado positions itself as a trusted provider in the local market. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options including a detailed contact form and physical address. Technically, the site uses common web technologies such as jQuery and Google Analytics, with HTTPS enforced and cookie consent implemented. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Security headers are not detected, suggesting room for improvement in security posture. Overall, the website is safe, professional, and compliant with GDPR requirements, but would benefit from enhanced security policies and domain legitimacy verification.

P

Poweryoga-pilates

poweryoga-pilates.cz

35

Poweryoga-pilates.cz is a small local fitness and wellness service provider based in Příbram, Czech Republic, specializing in Power Yoga and Pilates classes. The website serves as an informational and promotional platform for the business, offering schedules, articles, videos, and contact details. The business appears well-established with a domain age since 2009, targeting a general audience interested in health and fitness. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and integrates several plugins for forms, galleries, and video embedding. The site is mobile optimized and uses HTTPS, ensuring secure communication. Security posture is moderate with use of Google reCAPTCHA and no visible vulnerabilities, though it lacks some security headers and a cookie consent mechanism. Contact information is clearly presented, including email, phone, and physical addresses, enhancing business credibility. Overall, the website is professional, trustworthy, and compliant with basic GDPR requirements.

Refaglass s.r.o. is a Czech-based manufacturer specializing in foam glass insulation products made from 100% recycled glass. The company targets construction professionals and distributors, offering thermal insulation materials suitable for various building applications. Their market position is niche, focusing on sustainable and innovative building materials within the Czech and Slovak markets. The website reflects a professional presence with clear product information, contact details, and social media engagement. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is fair with HTTPS enforced and cookie consent implemented; however, the absence of security headers and a privacy policy page are notable gaps. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and contact information support legitimacy. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and establishing a vulnerability disclosure process to improve overall trust and compliance.

P

Potisk Vylita

vylita.cz

39

Potisk Vylita is a Czech Republic-based company specializing in high-quality one- and multicoloured industrial and promotional printing services. Positioned as one of the largest printing companies in the Czech Republic, they offer rapid turnaround times including bulk orders, design proposals, and sample evaluations. Their business model focuses on B2B manufacturing and printing services targeting companies requiring customized printed products. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, including a GDPR-compliant privacy policy page. Technically, the website is built on WordPress using Bootstrap and jQuery, with Google reCAPTCHA implemented for form security. The site uses HTTPS with good SSL configuration but lacks some advanced security headers. Advertising is limited to Google Ads and Seznam Retargeting, with minimal user tracking observed. The site lacks explicit cookie consent mechanisms and security or incident response policies. Security posture is solid with HTTPS and reCAPTCHA, but could be improved by adding security headers and publishing incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details support legitimacy. Overall, the site is safe, business-focused, and compliant with GDPR, with room for security and privacy enhancements. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and maintaining up-to-date software to enhance trust and compliance.

T

TELEKO digital, a.s.

teleko.cz

60

TELEKO digital, a.s. is a Czech company specializing in digital and analog radio broadcasting services, operating a network of FM and DAB+ transmitters across the Czech Republic. The company is positioned as a regional leader in digital radio transmission, offering clean sound and a broad program selection to listeners in multiple regions. They also operate an e-commerce platform, PUREradio.cz, selling DAB+ receivers. The website reflects a mature digital presence with modern technologies and a clear focus on their core services. Technically, the site is built on Joomla CMS with Bootstrap and integrates Google Maps for coverage visualization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking published privacy and security policies. Overall, the site is professional and trustworthy, with room for improvement in compliance documentation and security transparency.

O

OCRRUNNING.CZ

ocrrunning.cz

59

OCRRUNNING.CZ is a Czech Republic-based small e-commerce retailer specializing in running and outdoor sports footwear, clothing, and accessories. The website offers a broad catalog of products from well-known brands, targeting general consumers interested in running and outdoor activities. The business emphasizes real pricing without discount presentations and aims to provide optimal price-quality-performance balance along with customer advisory services. Technically, the site uses modern web technologies including Google Tag Manager, Google Analytics 4, Google Ads, and reCAPTCHA v3 for bot protection. The site is built on the Binargon EshopMaxi CMS platform and is mobile-optimized with good navigation and content relevance. Security posture is moderate with HTTPS enforced and bot protection in place, but lacks some security headers and visible privacy or cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is professional and functional but could improve privacy compliance and security best practices.

Spolek Prokop Příbram is a Czech non-profit association dedicated to preserving the mining heritage and cultural traditions of the Příbram region. Founded in 1992, it continues the legacy of a historical mining student association and engages the community through cultural, educational, and sporting events. The organization collaborates with local government, museums, and other cultural institutions to maintain mining sites and promote regional history. Technically, the website is built on WordPress using Bootstrap and jQuery, hosted under a Czech registrar with DNS servers from forpsi.it/cz/net. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. No advanced analytics or tracking tools are detected, reflecting a minimal data collection approach. From a security perspective, the site uses HTTPS but lacks security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration data aligns well with the website's stated purpose and location, supporting legitimacy. Overall, the website presents a trustworthy and professional front for a small non-profit cultural association but should enhance privacy compliance and security headers to improve its security posture and user trust.

T

Točírna z.s.

tocirna.cz

42

Točírna z.s. is a small ceramic workshop located in Příbram, Czech Republic, offering a variety of ceramic courses and workshops for children and adults. The business focuses on providing a calm and family-friendly environment for creative ceramic activities, including regular weekly courses, one-time thematic workshops, open studio sessions, and summer camps. The website is professionally designed with clear navigation and relevant content tailored to its target audience of ceramic enthusiasts and learners. Technically, the site is built on WordPress with common plugins for galleries, forms, and GDPR compliance, and it uses HTTPS with Google reCAPTCHA for security on contact forms. However, the absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy, though the presence of valid company registration and contact details supports trustworthiness. Overall, the website demonstrates good digital maturity for a small local business with appropriate privacy and security measures in place.

E

Etheris

etheris.cz

32

Etheris is a small artisanal business based in the Czech Republic specializing in unique, handcrafted ceramic products. The website showcases a variety of original ceramic items, emphasizing the artistic and positive energy aspects of the products. The business supports a local ceramic workshop, Točírna z.s., and operates primarily through direct sales and local engagement. The website is built on WordPress using common plugins and frameworks, providing a functional and visually appealing platform for product display and customer contact. From a technical perspective, the website employs standard web technologies including jQuery, Bootstrap, and WordPress CMS. SEO optimization is addressed through the All in One SEO plugin, and the site is mobile responsive at a basic level. Performance is moderate, with no major issues detected. However, some technical improvements could enhance security and compliance. Security posture is adequate with HTTPS enforced and a contact form that includes a privacy acceptance checkbox, indicating GDPR awareness. However, the absence of security headers and use of an older jQuery version present moderate risks. No explicit security policies or incident response contacts are published, which could be improved to enhance trust and compliance. Overall, the website is legitimate, professionally presented, and serves its niche market effectively. Strategic improvements in security headers, cookie consent mechanisms, and updated libraries would strengthen the security and compliance posture, supporting long-term business credibility and customer trust.

K

Kao.cz

kam-dnes-na-obed.cz

45

Kam-Dnes-Na-Oběd.cz (KDNO.cz) is a Czech Republic-based online directory specializing in listing restaurants, daily lunch menus, culinary experiences, and related events within various Czech districts. Founded in 2010 and operated by Kao.cz, the platform serves as a regional hospitality guide targeting general consumers seeking dining options and event information. The business model revolves around providing comprehensive restaurant listings, event updates, and advertising opportunities for hospitality providers. The website maintains a consistent brand presence and offers structured data to enhance search visibility.

Asia Bistro Příbram operates a local restaurant business specializing in Asian cuisine with an online ordering platform. The website provides daily menu selections and ordering options for the upcoming week, targeting local customers in Příbram. The business model is straightforward, focusing on dine-in and takeaway food services with temporarily suspended delivery. The website is modest but functional, reflecting a small local business with limited digital sophistication. Technically, the website uses standard web technologies including Bootstrap for responsive design and jQuery for scripting. Hosting is provided by Websupport, a known Czech hosting provider. The site is mobile-optimized with basic accessibility and SEO features but lacks advanced frameworks or CMS platforms. Performance is moderate with no evident technical debt but opportunities exist for modernization and enhanced user experience. From a security perspective, the site uses HTTPS and includes anti-CSRF tokens in forms, indicating some security awareness. However, no security headers were detected, and there is no visible privacy or cookie policy, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The absence of contact emails and phone numbers reduces business credibility and user trust. Overall, the website is safe with no adult or questionable content. The domain registration is consistent and appropriate for the business age and location. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and regulatory adherence.

B

BISTROOO

bistrooo.cz

45

Bistrooo is a small hospitality business based in Příbram, Czech Republic, offering breakfast, soups, hot meals, and daily menus. The website presents a clear business focus on local food service with reservation capabilities and business hours. The technical infrastructure is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN and Google Tag Manager for analytics. The site is accessible, mobile-optimized, and has a good user experience, though it lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing security headers and privacy compliance elements. The absence of WHOIS data limits domain legitimacy verification, which impacts trustworthiness. Overall, the site is functional and professional but requires improvements in privacy compliance and security best practices.

B

Brdský běžecký pohár

brdskypohar.cz

44

The website 'Brdský běžecký pohár' serves as a regional platform dedicated to organizing and promoting running events and athletic competitions primarily in the Příbram area of the Czech Republic. It offers detailed information about upcoming races, results, photo galleries, and registration options, targeting runners, athletes, and local sports enthusiasts. The business model revolves around event organization, community engagement, and race facilitation, positioning itself as a key regional sports event organizer. Technically, the website employs a modern tech stack including HTML5, CSS, JavaScript with jQuery and Bootstrap 5 frameworks, and integrates Google Analytics for visitor tracking. The site is hosted under a Czech registrar with appropriate DNS settings and uses HTTPS for secure communication. Mobile optimization and user experience are good, though accessibility and SEO could be improved. From a security perspective, the site benefits from HTTPS but lacks visible security headers and a formal privacy or cookie policy, which are important for GDPR compliance. No vulnerability disclosure or incident response information is provided. The use of Google Analytics without a cookie consent mechanism indicates potential privacy compliance gaps. Overall, the website is functional, content-rich, and trustworthy for its intended audience but would benefit from enhanced privacy compliance, improved security headers, and formal policies to strengthen its security posture and regulatory adherence.

H

Happy Robots s.r.o.

happy-robots.cz

50

Happy Robots s.r.o. is a small Czech technology company founded in 2020 specializing in chatbot and voicebot solutions aimed at automating customer support and e-commerce interactions. Their website presents a professional and consistent brand image, offering both custom chatbot development and a platform for chatbot management. The company targets businesses seeking to improve customer engagement and reduce operational costs through automation. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, with moderate performance and good mobile optimization. However, it lacks advanced security headers and published privacy or cookie policies, which impacts its privacy compliance score. Security posture is adequate with HTTPS and secure form handling but could be improved with additional headers and incident response information. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

C

Com&Trombones

com-trombones.fr

52

Com&Trombones is a small independent administrative and communication assistance service based in France, targeting professionals, artisans, TPE/PME, and individuals. The company offers tailored administrative support including document management, invoicing, client follow-ups, and communication services such as social media management and content creation. The website is professionally designed using WordPress and Elementor, with a clear structure and good user experience. Technical infrastructure includes modern web technologies and hosting via Scaleway with DNS managed by o2switch.net. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published privacy policies. Overall, the site presents a trustworthy and professional image suitable for its niche market.

C

Contact’Mont-Blanc

contact-montblanc.com

67

Contact’Mont-Blanc is a French local business networking platform launched in 2022, focused on connecting professionals and consumers in the Haute-Savoie region. It offers a directory of local artisans, merchants, and service providers, along with marketing and networking services to boost local visibility. The platform emphasizes community, collaboration, and local economic development. Technically, the website uses modern frameworks like Bootstrap and jQuery, with Google Tag Manager for analytics. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is adequate with HTTPS and domain transfer protection, though DNSSEC and security headers are missing. Privacy compliance is basic but present, with a privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professional, serving a niche local market effectively.

V

Accueil - virage-digital74.fr

virage-digital74.fr

56

Virage Digital 74 is a French digital marketing service provider specializing in impactful social media strategies, social media management, and creating effective showcase websites to enhance digital presence. The company appears to be a small, newly founded business (2024) targeting businesses and professionals seeking to improve their online visibility. The website is built on WordPress using the Divi theme and incorporates SEO optimization via Yoast SEO. Hosting is provided by o2switch, with domain registration through Scaleway, both consistent with the French market focus. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and formal privacy or security policies. Analytics usage includes Metricool tracking pixels, indicating moderate user tracking. Overall, the website is professionally designed with good user experience and mobile optimization, but would benefit from enhanced privacy compliance and security documentation.

J

Jérémie Bottollier Curtet

bottweb.fr

56

Jérémie Bottollier Curtet operates as a freelance web and mobile application developer based in Haute-Savoie, France. The business specializes in creating custom digital solutions including websites (One Page, Vitrine, E-commerce, and bespoke), web and mobile applications, SaaS and Micro-SaaS platforms, site redesign, maintenance, and training services. The company targets local businesses, startups, and independent professionals primarily in the Rhône-Alpes region. The website demonstrates a professional market position with clear service offerings and a strong local focus. Technically, the website is built on WordPress using Elementor, enhanced with modern web technologies and analytics tools such as Google Tag Manager and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS, employs security headers, and includes cookie consent mechanisms, indicating a good security posture. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement. The WHOIS data is missing, which slightly impacts domain trustworthiness but does not detract significantly from the overall legitimacy. Overall, the website and business present a low-risk profile with professional digital presence and sound security practices. Strategic recommendations include enhancing transparency with dedicated security and privacy policy pages, implementing vulnerability disclosure, and maintaining regular security audits to sustain trust and compliance.

Č

Čarovné Česko

carovne-cesko.cz

61

Čarovné Česko is a Czech Republic-based e-commerce retailer specializing in books, maps, and map-themed clothing and gifts that celebrate the beauty and stories of Czech and Slovak regions. The website is professionally designed, featuring a clear product catalog and navigation tailored to regional interests. The business targets customers interested in regional culture, tourism, and unique map-related products. Technically, the site leverages the Shoptet e-commerce platform with integrations such as Google Analytics, Facebook SDK, and Doofinder for search and recommendations. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the domain is a concern for domain legitimacy but does not detract from the professional presentation and contact transparency of the site. Overall, the site is a well-structured niche e-commerce platform with moderate technical maturity and good privacy compliance.

C

CBS spol, s.r.o.

cbsmapexplorer.com

58

CBS spol, s.r.o. operates the CBS Map Explorer website and mobile application, which provides augmented reality experiences for tourists using physical maps. The company targets travelers who prefer paper maps but want enhanced digital information about points of interest. The website is professionally designed, multilingual, and offers app download links for Android and iOS platforms. The business appears to be a small Slovak company focused on niche tourism technology solutions. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and CookieYes for privacy compliance. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. WHOIS data is missing, which raises some concerns about domain registration transparency but does not directly contradict the business legitimacy. Overall, the site is functional, user-friendly, and compliant with GDPR requirements.

E

ECOncrete

econcretetech.com

65

ECOncrete is a specialized technology company focused on providing nature-inclusive design solutions for responsible marine construction. Their proprietary technology targets shoreline protection and infrastructure for waterfront and offshore environments, positioning them as an innovative niche player in the sustainable energy sector. The company appears to be small-sized, founded in 2012, with a consistent domain registration history and a professional online presence. Technically, the website is built on WordPress with modern libraries and plugins, offering good mobile optimization and SEO practices. Security posture is moderate with HTTPS enabled and reCAPTCHA in use, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is partial, with a cookie consent mechanism present but no privacy policy page found. Overall, the website is professional and trustworthy but could improve in privacy and security policy transparency.

F

Fundación Parque Científico de Madrid

fpcm.es

46

Fundación Parque Científico de Madrid (FPCM) is a non-profit foundation established in 2001 by two major Spanish universities to foster scientific and technological entrepreneurship and innovation. The organization provides office and laboratory spaces, R&D services, business acceleration, and international programs to support deep tech entrepreneurs and innovators. The website reflects a mature digital presence with professional design, clear navigation, and compliance with privacy regulations. Technically, the site is built on WordPress with Elementor and integrates SEO and analytics tools, demonstrating a modern and maintainable infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though additional HTTP security headers and published security policies could enhance trust. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

A

ASEALEN

asealen.es

46

ASEALEN is a Spanish association representing over 40 companies focused on promoting the use of energy storage technologies. Positioned as a key sector advocate, ASEALEN provides technical and legal advisory, disseminates sector news, and fosters collaboration among stakeholders. The website reflects a professional and well-structured digital presence, leveraging WordPress with Elementor and SEO best practices to engage its target audience effectively. The association maintains active social media channels on Twitter and LinkedIn, enhancing its outreach and credibility. Technically, the site uses modern web technologies and includes GDPR-compliant privacy and cookie policies with consent mechanisms. Security posture is solid with HTTPS enforced, though some security headers could be improved. WHOIS data is unavailable due to registry restrictions, but the website content and presentation support legitimacy. Overall, ASEALEN demonstrates a mature digital footprint suitable for its role as a sector leader in energy storage in Spain.