Security Directory

T

Tender Service Grupa

javne-nabavke.com

64

Javne-nabavke.com is a professional regional platform specializing in public procurement tenders across Serbia and neighboring countries. It offers subscription-based services including tender delivery, market intelligence, competitor analysis, expected tender forecasts, and consulting. The platform targets businesses seeking to increase revenue through public contracts and provides tools to gain competitive advantages. Technically, the website is built on a modern Angular framework with a headless CMS (Storyblok), ensuring a responsive and user-friendly experience. The site integrates Google Tag Manager and Userpilot for analytics and user engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are absent. The WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and branding are consistent and professional. Overall, the site is a credible resource for its target audience but would benefit from enhanced transparency and security disclosures.

T

Tender Service Grupa

tenderi.hr

62

Tenderi.hr is a Croatian-based platform specializing in the aggregation and delivery of public tender information from Croatia and the European Union. Established in 2004, it offers a comprehensive database with over 17,000 sources, targeting businesses seeking to participate in public procurement processes. The platform provides tailored services including tender delivery, competitor and market insights, expected tenders forecasting, and expert consulting to help clients secure more contracts efficiently. The website is professionally designed, mobile-optimized, and uses modern Angular technology with integrations such as Google Tag Manager and Userpilot for analytics and user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, Tenderi.hr presents a trustworthy and mature digital presence in the public procurement sector.

T

Tender Service Group

licitatie-publica.ro

48

Licitatie-publica.ro is a Romanian public procurement information platform operated by Tender Service Group. It provides businesses with timely alerts, business intelligence, reports, and consultancy services to help them identify and win public tenders in Romania and the EU. The platform targets companies seeking to increase revenues through public contracts by offering comprehensive data and tools to monitor opportunities and competitors. Technically, the site is built on a modern Angular framework with PrimeNG components, integrating Google Tag Manager and Userpilot for analytics and user engagement. The website is well-optimized for mobile devices and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks some advanced security headers and explicit incident response contacts. WHOIS data is privacy protected, which is common for this business type, and no suspicious patterns were detected. Overall, the site is legitimate, professional, and serves a niche business audience effectively.

L

Licitacionescolombia.co

licitacionescolombia.co

65

Licitacionescolombia.co is a specialized platform providing centralized access to public tender information across Colombia and Latin America, targeting businesses seeking government procurement opportunities. The platform offers alert services, customized reports, and advanced search tools to help clients identify and win tenders. It operates under the Tender Service Group umbrella, indicating a broader organizational structure. Technically, the website is built on a modern Angular framework with PrimeNG components, ensuring a responsive and user-friendly experience. The site incorporates standard tracking and marketing tools such as Google Tag Manager and Userpilot, with a cookie consent mechanism in place. Security-wise, the site enforces HTTPS and includes common security headers, but lacks a dedicated security policy or incident response information. Overall, the site is professional, trustworthy, and well-positioned in its niche, though it could improve privacy compliance and security transparency.

L

Latamcompra.com

latamcompra.com

66

Latamcompra.com is a specialized platform centralizing public tenders and procurement information across Latin America, with additional coverage in Europe. It offers subscription-based services including tender alerts, customized reports, and pharmaceutical market insights, targeting businesses seeking to expand or optimize their public sector contracts. The website is built on a modern Angular framework with integrated analytics and tracking tools, demonstrating a mature digital infrastructure. Security posture is generally strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the platform presents a professional and trustworthy front with room for improvement in transparency and contact availability.

J

Javna naročila in javni razpisi iz Slovenije in Evrope!

javnirazpisi.com

62

The website www.javnirazpisi.com provides specialized services focused on public procurement and tender information primarily for Slovenia and the broader European market. It offers daily updates on public tenders, market and competitor insights, upcoming tender alerts, and consulting services to help businesses succeed in public procurement. The site targets businesses and professionals seeking to increase their success in public tenders through timely and relevant information. Technically, the website is built on a modern Angular framework (version 20.3.2) with PrimeNG UI components and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, Bing Ads, Google Tag Manager, and Userpilot. The site uses a headless CMS (Storyblok) for content management. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and does not expose sensitive data in the HTML. However, no security headers were detected, and explicit privacy and terms of service pages are missing, which are areas for improvement. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy, although the website content is professional and fully accessible. Overall, the website presents a professional and trustworthy front for its business services but should address privacy policy visibility, security headers, and domain registration transparency to improve trust and compliance.

T

Tender Service s.r.o.

tender.sk

52

Tender Service s.r.o. operates the website tender.sk, providing comprehensive public procurement information and services primarily targeting businesses in Slovakia and international markets. Their offerings include tender notifications, market and competitor analysis, expected tender forecasts, and expert consultations. The company positions itself as a trusted partner for businesses seeking to maximize success in public tenders. Technically, the website is built on modern Angular framework with Storyblok CMS, integrating analytics and user engagement tools while maintaining good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a medium-sized business with a solid market presence.

T

Tender Service Schweiz

tender-service.ch

65

Tender Service Schweiz operates as a leading European provider of public tender information and consulting services, targeting both large enterprises and SMEs. The company offers a comprehensive database of public tenders, combined with personalized consulting and advanced analytical tools to help clients win contracts efficiently. Their market position is strong, supported by over 20 years of experience and a broad service portfolio including market intelligence and tender forecasting. Technically, the website is built on modern Angular framework with PrimeNG components, supported by analytics tools such as Google Analytics and Microsoft Clarity, and hosted with good performance and mobile optimization. Security posture is solid with HTTPS enforced and appropriate security headers, though the absence of explicit privacy and terms of service pages slightly reduces compliance maturity. Overall, the website is professional, trustworthy, and well-structured, though improvements in transparency and contact information would enhance user trust and regulatory compliance.

H

Happy Robots s.r.o.

chytrecallcentrum.cz

43

ChytreCallcentrum.cz is a Czech Republic based small technology company specializing in voicebot automation solutions for call centers. Their core offering includes AI-driven conversational robots that automate telephone interactions, replacing traditional IVR systems and improving customer experience. The company targets small to medium businesses seeking to reduce operational costs and improve call handling efficiency. The website presents a professional and consistent brand image with clear contact information and demo scenarios illustrating GDPR compliance in voicebot interactions. Technically, the site uses modern frontend frameworks such as Bootstrap and jQuery, with good mobile optimization and moderate performance. However, the site lacks explicit privacy and cookie policies, and security headers are not detected, indicating room for improvement in security posture and compliance. Analytics tracking is present but commented out, suggesting privacy considerations or incomplete implementation. Overall, the domain registration data aligns well with the business profile, supporting legitimacy. The website is safe for general audiences and does not contain any adult or questionable content.

V

Visit Plzeň

visitplzen.eu

67

Visit Plzeň operates as the official tourism guide for the Plzeň region in the Czech Republic, providing comprehensive information on local attractions, events, gastronomy, and travel tips. The website serves tourists and visitors with multilingual content and an integrated e-shop for merchandise. Supported by local government and the Ministry for Regional Development, it holds a strong market position as a trusted regional tourism portal. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Mailchimp integration, ensuring good SEO and marketing capabilities. The site is mobile-optimized and offers a smooth user experience with clear navigation and rich content. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and publicly available security policies. The domain WHOIS data is privacy protected, which is common for European domains, but the website's official nature and government backing support its legitimacy. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

The website pilsen.eu serves as the official information portal for the city of Pilsen, Czech Republic. It provides comprehensive information about city authorities, transport, tourism, cultural events, and investor relations. The site targets residents, tourists, and investors, positioning itself as a trusted government resource. The business model is public service oriented, focusing on information dissemination and community engagement. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Analytics for traffic analysis, and Google reCAPTCHA for form security. The site is well-structured with good SEO practices and mobile optimization, though some accessibility features are basic. Performance is moderate, with efficient use of external resources. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers are not detected, and there is no published security policy or incident response contact information. No vulnerabilities or suspicious content were found, indicating a solid security posture for a government website. Overall, the website is professional, trustworthy, and provides valuable city-related information. Strategic improvements in security headers and transparency around security policies would enhance its security maturity and user trust.

P

Plzeň 2025

plzen2025.eu

56

Plzeň 2025 is a cultural event website promoting the city's program for the year 2025, celebrating the 10th anniversary of Plzeň as the European Capital of Culture 2015. The website is built on the Wix platform, leveraging modern web technologies and polyfills to ensure compatibility across browsers. The site presents a professional design with consistent branding and clear cultural messaging targeted at a general audience interested in cultural events and city heritage. Technically, the site uses Wix's Thunderbolt framework and includes performance and compatibility polyfills, but lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS and some JavaScript hardening techniques but lacks visible security headers and formal security policies. The absence of privacy, cookie, and terms of service pages, as well as contact information, limits privacy compliance and user trust. WHOIS data is not publicly available, indicating privacy protection, which is common for event sites but reduces transparency. Overall, the site is functional and professional but could improve in privacy compliance and security transparency.

M

Město Plzeň

plzen28rijen.eu

58

The website www.plzen28rijen.eu is an official municipal event site dedicated to the annual celebrations of the founding of the Czechoslovak Republic in Plzeň, Czech Republic. It provides detailed information about the event program, venues, accompanying activities, and photo galleries. The site targets local residents and visitors interested in cultural and historical events, positioning itself as a trusted source for event-related information organized by the city government. The business model is focused on public cultural engagement and event promotion without commercial sales or e-commerce components. Technically, the website uses modern web technologies including HTML5, CSS, JavaScript, and Google Analytics for visitor tracking. It is mobile optimized with good navigation and SEO practices. The site employs HTTPS with a valid SSL certificate ensuring secure communications. Cookie consent mechanisms are implemented to comply with EU regulations, although no explicit privacy policy or terms of service pages were found. No CMS or hosting provider details were identified from the content. From a security perspective, the site demonstrates a good baseline with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of a privacy policy and incident response contact points are notable gaps. WHOIS data is unavailable due to EURid privacy protection, which is common and justified for this type of municipal website. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is professionally designed, trustworthy, and serves its purpose well. Strategic recommendations include adding a comprehensive privacy policy, implementing security headers, providing clear contact information for security incidents, and enhancing accessibility compliance to improve user experience and regulatory adherence.

T

THINline s.r.o.

thinline.cz

66

THINline s.r.o. is a Czech technology company specializing in providing comprehensive online solutions including web design, web hosting, e-marketing, and custom information systems. The company operates multiple subsidiary brands such as Cesky-Hosting.cz, Spolehlive-Servery.cz, and WebSynergy.cz, serving a client base of approximately 30,000 daily users. Their market position is that of a well-established medium-sized service provider in the Czech Republic, focusing on reliable and professional internet services for businesses. Technically, the website is built on a custom CMS platform (WebSynergy) and employs modern web technologies including Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized with good SEO and accessibility features, though some improvements in security headers could enhance the technical posture. Performance is moderate with a professional design and clear navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, no explicit security policy or incident response information is found, and WHOIS data is unavailable, which slightly reduces trustworthiness. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy business front with solid privacy compliance and user experience. The main risk lies in the lack of WHOIS transparency and missing security headers, which should be addressed to improve domain legitimacy and security posture.

N

NTC Hosting

ntchosting.com

59

NTC Hosting is an established web hosting and domain registration provider with over 21 years of experience. The company offers a range of services including domain registration, web hosting, VPS solutions, and a website builder, supported by 24/7/365 technical support. The website reflects a professional business presence targeting individuals and businesses seeking reliable hosting solutions. Technically, the site employs modern web technologies such as the Foundation framework and jQuery, with integration of Google Tag Manager for analytics. While HTTPS is enabled, the site lacks advanced security headers and DNSSEC, which could enhance its security posture. Privacy and cookie policies are not evident, indicating potential compliance gaps. Overall, the site is functional, professional, and trustworthy but would benefit from improved security and privacy disclosures.

The website themza.com is currently under construction and contains only minimal placeholder content. There is no business description, contact information, or service details available, which limits the ability to assess the company's market position or business model. The domain is registered since 2007 with a reputable registrar, indicating legitimacy of the domain ownership, but the lack of active content suggests the site is either inactive or in redevelopment. From a technical perspective, the website lacks modern features, security headers, and visible HTTPS configuration based on the provided data. No analytics, advertising, or tracking technologies are detected, and the site does not provide any privacy or cookie policies, which are critical for compliance with data protection regulations. Security posture is weak due to absence of security headers and policies, and no incident response or vulnerability disclosure information is available. The site does not expose any forms or data collection points, reducing immediate risk but also limiting user engagement. Overall, the website's minimal content and lack of security and compliance features present a low trust profile. Strategic recommendations include enabling HTTPS, adding comprehensive privacy and cookie policies, providing clear contact and business information, implementing security best practices such as security headers, and improving website content and design to enhance user trust and compliance readiness.

S

SuperOffice

superoffice.com

76

SuperOffice operates as a cloud-based CRM provider offering software solutions designed to enhance business relationships and revenue generation. The company maintains a professional and consistent web presence with localized versions for multiple countries, indicating a medium-sized international operation in the technology sector. Their business model is SaaS, targeting businesses seeking CRM solutions. Technically, the website leverages modern Microsoft Azure cloud infrastructure, ASP.NET Core framework, and integrates analytics and marketing tools such as Google Tag Manager and HubSpot. The site is mobile optimized and performs moderately well. Security posture is strong with HTTPS enforced and use of Azure Application Insights for monitoring, though explicit security headers and policies could be improved. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, WHOIS data is not publicly available, likely due to privacy protection, which slightly impacts trust but is justified for this business type. Overall, the website is professional, secure, and trustworthy with room for enhanced transparency in security policies and incident response.

D

Django Software Foundation

djangoproject.com

66

Django is a mature, open source Python web framework supported by the Django Software Foundation, a non-profit organization. The website serves developers and organizations seeking a robust, scalable, and secure web development framework. It offers extensive documentation, community forums, and active engagement channels such as Discord and GitHub. The business model is community-driven with funding through donations and sponsorships, positioning Django as a leading technology project in the web development ecosystem. Technically, the website employs modern JavaScript technologies including RequireJS and custom scripts, with a clean, responsive design optimized for mobile and accessibility. The site uses HTTPS exclusively, ensuring secure communications. SEO and social media metadata are well implemented, enhancing discoverability and sharing. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing. From a security perspective, the site demonstrates a strong posture with no visible vulnerabilities or exposed sensitive data. The project maintains a documented vulnerability disclosure process, though no dedicated security.txt file was found. Privacy compliance is basic, with no explicit privacy or cookie policies prominently displayed, which could be improved to meet GDPR standards. WHOIS data is unavailable, which is unusual but likely due to privacy or registry policies, though this does not detract from the site's legitimacy given its foundation backing. Overall, the site is professional, trustworthy, and technically sound, with minor areas for improvement in privacy and security transparency. Strategic recommendations include adding explicit privacy and cookie policies, implementing security headers, and publishing a security.txt file to enhance trust and compliance.

The website jupo.org presents minimal content, primarily an embedded YouTube video, with no visible business or contact information. The domain is long-standing, registered since 2001 with a reputable registrar, but the site lacks essential compliance and security features such as privacy policies, cookie consent, and security headers. The technical infrastructure is basic, relying on DNSimple for DNS and Google Adsense for advertising, with no detected CMS or advanced frameworks. Security posture is weak due to missing DNSSEC and security headers, and no incident response or data protection officer information is provided. Overall, the site appears to be a simple informational or placeholder page with limited business credibility and poor user experience.

Coworking Příbram z.s. is a small local business providing coworking office spaces, meeting rooms, and related services in the center of Příbram, Czech Republic. The website clearly communicates its offerings including fast internet, 3D printing, and flexible membership plans. The business targets freelancers, remote workers, and local professionals seeking quiet and well-equipped workspaces. The market position is that of a community-focused coworking provider with local partnerships and a modest but professional online presence. Technically, the website uses common front-end technologies such as Bootstrap, jQuery, and Owl Carousel, with Google Tag Manager for analytics. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Performance is moderate with no critical errors detected. The site uses HTTPS but lacks visible security headers and active secure forms, which are areas for improvement. From a security perspective, the site shows basic good practices such as HTTPS usage and no exposed sensitive data. However, it lacks privacy and cookie policies, security headers, and active secure contact forms, which are important for GDPR compliance and user trust. No WAF or blocking mechanisms are detected, and no vulnerabilities are evident from the provided data. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and activation of secure user input forms. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy and security policies will strengthen trust and compliance posture.

N

NT - New Time Media

nt.cz

42

NT - New Time Media is a small Czech web development agency specializing in creating websites using the WordPress content management system. Established in 1998, the company offers services including onepage websites, corporate websites, and e-commerce solutions with WooCommerce. Their portfolio showcases a variety of client websites, indicating a focus on local businesses and organizations. The website is professionally designed with good navigation and mobile optimization, targeting small to medium-sized businesses in the Czech Republic. Technically, the site runs on WordPress with Bootstrap and jQuery, integrating Google reCAPTCHA v3 for spam protection. However, it lacks some modern security headers and a cookie consent mechanism, which are areas for improvement. The domain registration data is consistent with the website's claims, supporting the legitimacy of the business.

G

GIENGER spol. s r.o.

brotje.sk

56

The website www.brotje.sk represents GIENGER spol. s r.o., the official reseller and service provider for BRÖTJE gas condensing boilers in Slovakia. The company offers modern, efficient heating solutions primarily targeting residential, commercial, and industrial customers. BRÖTJE is a well-established European brand with a strong market position in heating technology. The website provides comprehensive product information, service details, and customer support resources, reflecting a mature business model focused on sales and after-sales service. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR for compliance and SEO optimization. It integrates Google Analytics and Google reCAPTCHA for analytics and security. The site is mobile-optimized and features good navigation and content structure, though some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms. While some security headers are not explicitly detected, no exposed sensitive data or vulnerabilities are apparent. The absence of a published security policy or incident response contact suggests room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the business goals of GIENGER and BRÖTJE in the Slovak market. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility to further strengthen the site's security posture and user trust.

M

MIBO SCOOTERS s.r.o.

mibo.cz

59

MIBO SCOOTERS s.r.o. is a small Czech manufacturer specializing in handcrafted kickscooters and electric kickscooters, operating since 1998. The company emphasizes artisanal production in the Walachian region and maintains a close relationship with its sellers. Their website reflects a niche business model focused on quality and craftsmanship, targeting consumers interested in unique and locally made transportation solutions. The company leverages social media platforms such as Facebook, Instagram, and YouTube to engage with customers and promote their products. Technically, the website is built on the Solidpixels CMS platform and uses modern web technologies including Google Tag Manager and Google Analytics for tracking. The site is mobile optimized with good SEO practices and a cookie consent mechanism that supports GDPR compliance. However, the absence of a published privacy policy and terms of service documents represents a compliance gap. From a security perspective, the website uses HTTPS and implements cookie consent but lacks visible security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective, though the website content and business information appear legitimate. Overall, the website scores well in content quality, technical implementation, and business credibility but should improve privacy compliance and security best practices. Strategic recommendations include publishing privacy and terms documents, adding security headers, and clarifying incident response contacts to enhance trust and compliance.

P

PechaSan spol. s r.o. and G-System spol. s r.o.

tzb-cz.cz

57

The website www.tzb-cz.cz represents a professional wholesale business specializing in technical building equipment, including heating, sanitary installations, fireplaces, and stoves. The business operates primarily in the Czech Republic through two companies, PechaSan spol. s r.o. and G-System spol. s r.o., under the umbrella of the GC SKUPINA group. The site targets professional installers and trade customers, offering a broad product portfolio, consulting services, training, and a loyalty bonus program. The business model is B2B wholesale with a strong regional presence and established market position. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, and it integrates Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security measures include HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. From a security perspective, the site demonstrates good practices with no detected vulnerabilities or malicious content. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. However, the absence of WHOIS data reduces domain transparency and trustworthiness, which is a notable concern. Overall, the site is professional and trustworthy but could improve transparency and security communication. Strategic recommendations include publishing a formal security policy, providing incident response contact details, enhancing accessibility, and establishing a vulnerability disclosure policy to strengthen security posture and trust.

Rzetelna Firma is a Polish business service provider specializing in offering trust and credibility certifications to companies. Established in 2006, it supports over 40,000 firms with services including reliability certificates, virtual business cards, and a catalog of trustworthy companies. The website is professionally designed, mobile-optimized, and provides clear information about the benefits of their certification services, targeting Polish entrepreneurs and businesses seeking to enhance their market reputation. Technically, the site uses a custom CMS (Arka), JavaScript, and SVG graphics, hosted by a reputable Polish provider with HTTPS enabled. Security posture is adequate with cookie consent implemented, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is basic, with no explicit privacy policy or terms of service found in the analyzed content. Overall, the domain age and WHOIS data support the legitimacy of the business. The site is safe, business-focused, and trustworthy.

C

COSMO

cosmo-info.de

51

COSMO is a German company specializing in heating and ventilation products and services, targeting both end consumers and professional markets. Their website showcases a range of products including solar technology, radiators, underfloor heating, and air ventilation systems, supported by tools like energy saving calculators and floor planners. The company positions itself as a provider of high-quality, innovative heating and ventilation solutions with a focus on comfort and energy efficiency. Technically, the website is built on Drupal 10, leveraging modern front-end libraries such as Swiper.js for interactive elements, and integrates third-party services like Google Maps API and Adobe Launch for analytics and marketing. Usercentrics CMP is implemented for cookie consent, reflecting GDPR compliance efforts. Hosting is provided by Adacor, a reputable German hosting provider. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website is professional, well-structured, and trustworthy, with good content quality and technical implementation. Strategic improvements include publishing comprehensive privacy and security policies, adding security headers, and providing vulnerability disclosure information to enhance trust and compliance.

O

Oferteo

oferteo.pl

66

Oferteo is a well-established Polish online marketplace founded in 2008 that connects customers with companies offering a wide range of services and products, including construction, finance, insurance, legal, and more. The platform enables users to post free requests for offers and compare bids from various firms, targeting businesses, institutions, and private individuals. Oferteo maintains a strong market position in Poland with a large user base and extensive service categories. Technically, the website employs modern web technologies such as JavaScript, Tailwind CSS, and integrates analytics and marketing tools like Google Tag Manager, Bing Ads, and TrustCommander. The platform is optimized for mobile and desktop, with good performance and accessibility features. It uses HTTPS with strong security headers, ensuring secure communication and protection against common web vulnerabilities. From a security perspective, Oferteo demonstrates good practices including encrypted connections, secure forms, and no visible exposure of sensitive data. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and trust. The absence of WHOIS data is likely due to privacy protection, which is justified for this business type. Overall, Oferteo presents a professional, secure, and user-friendly platform with comprehensive privacy and cookie policies, extensive business information, and strong branding. Strategic recommendations include publishing explicit security and incident response policies, and maintaining regular audits of third-party scripts to mitigate potential risks.

W

Weblider s.c.

strefakalendarzy.pl

43

Weblider s.c. operates the website strefakalendarzy.pl, a specialized printing company focused on producing a wide range of advertising calendars for businesses and individual customers primarily in Poland. The company offers various calendar types including wall, desk, book, poster, and planner calendars, complemented by custom graphic design services. The website is well-structured, professionally designed, and provides comprehensive product information and ordering options, including phone, email, and online forms. Technically, the site is built on WordPress with SEO optimization via Yoast and uses Google Analytics and Google Ads for marketing and tracking. Security measures include HTTPS and reCAPTCHA on forms, but lack security headers and a privacy policy page, which are areas for improvement. The domain is registered with OVH SAS since 2010, consistent with the business's operational history. Overall, the website presents a trustworthy and professional image with moderate technical maturity and good business credibility.

F

Fondation Free

fondation-free.fr

57

Fondation Free is a French non-profit organization established in 2006, affiliated with the Iliad group (Free). It focuses on promoting digital inclusion and supporting youth and social innovation projects through funding, mentorship, and educational programs. The website demonstrates a mature digital presence with modern technologies such as Next.js and React, optimized for performance and accessibility. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. The absence of WHOIS data is typical for French domains and does not detract from the legitimacy of the foundation, which is supported by partnerships with reputable organizations like école 42 and Fondation Mozaïk. Overall, the site is professional, trustworthy, and well-aligned with its mission.

P

Picasoft

picasoft.net

57

Picasoft is a small non-profit association founded in 2016 at the University of Technology of Compiègne, France. It promotes free software, digital autonomy, privacy, and solidarity through awareness, training, and hosting free services. The website serves as a portal to various self-hosted services and educational resources, targeting students, educators, and the free software community. The organization is a member of the CHATONS collective, reinforcing its commitment to open and transparent hosting. Technically, the website is built using SCENARI framework and integrates multiple open-source platforms such as Peertube, Mattermost, Etherpad, and others. The infrastructure is self-hosted with a reputable registrar and hosting provider. The site is mobile-optimized, accessible, and performs moderately well, though SEO could be improved. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and important security headers. No privacy or cookie policies are published, which is a compliance gap. No incident response or vulnerability disclosure policies are evident. The site does not use advertising or tracking technologies, enhancing user privacy. Overall, Picasoft presents a trustworthy and community-focused web presence with good technical foundations but could improve privacy compliance and security hardening to better protect users and meet regulatory requirements.

The website deslivresencommuns.org serves as a digital archive and publishing platform for the non-profit association Framasoft, focusing on open access books under the project "Des Livres en Communs". It provides access to previous publications under the "Framabook" label and aims to progressively release new editions. The site targets French-speaking audiences interested in libre culture and digital commons. Technically, the site is built using the Hugo static site generator, styled with Bootstrap and Fork Awesome, and hosted by OVH sas. It employs Matomo analytics for user tracking, favoring privacy over commercial trackers. The site is mobile-optimized and well-structured, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is trustworthy and professional but could improve in privacy transparency and security hardening.

E

Evolution Host

evolution-host.com

72

Evolution Host is a specialized hosting provider established in 2015, offering VPS hosting, game servers, and advanced DDoS protection services. The company targets a broad audience from startups to enterprise clients, emphasizing reliability, security, and performance. Their market position is strengthened by multiple awards and positive customer testimonials, reflecting a strong reputation in the hosting industry. Technically, the website is well-implemented with modern web standards, mobile optimization, and integrated analytics, indicating a mature digital presence. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and published security policies could enhance trust further. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a positive user experience and business credibility.

W

webo-facto

webo-facto.com

56

Webo-facto is a French professional SaaS platform established in 2011, offering an all-in-one solution for creating, managing, and hosting websites. It targets digital agencies, freelancers, and educational institutions, providing services such as web hosting, domain management, SSL certificates, CMS solutions, and maintenance. The platform emphasizes ease of use, centralized management, and expert support, boasting over 6,000 users and nearly 3,800 hosted sites. Technically, the website employs a mix of proprietary and open source CMS technologies, integrates modern JavaScript libraries, and uses recognized analytics and cookie consent tools. Hosting is provided by OVH, a reputable French provider. Security posture is solid with HTTPS and domain protections, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is basic with cookie consent but lacks detailed policies or GDPR-specific disclosures. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website is professional, trustworthy, and well-branded, with room for improvement in security policies and transparency.

T

ThePixel.dev

thepixel.dev

71

ThePixel.dev is a small, highly rated web development service provider specializing in front-end, CMS (Joomla, WordPress), eCommerce platforms, back-end technologies, SEO, and Joomla migration. The company targets businesses seeking expert website development and digital transformation services. The website demonstrates a good level of technical maturity, leveraging Joomla CMS, modern frameworks, and third-party services such as ConsentManager.net for cookie consent. Security posture is strong with HTTPS and multiple security headers implemented, although explicit privacy and terms of service policies are missing. Overall, the site is professional, trustworthy, and well-structured, but could improve privacy compliance and direct contact information availability.

I

Ijoomla Demo

ijoomlademo.com

65

Ijoomla Demo is a small media-focused lifestyle blog providing content on makeup, politics, music, clothes, and general lifestyle topics. The website targets a general audience interested in lifestyle improvements and cultural insights. It operates on a WordPress platform with a professional design and consistent branding. The technical infrastructure includes common WordPress plugins such as Yoast SEO Premium and jQuery, hosted likely via GoDaddy given the registrar data. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. The site includes affiliate links to gambling-related domains but does not directly offer gambling services. Overall, the domain age and WHOIS data support legitimacy and consistent business operation.

The website savana-hosting.cz appears to be a hosting or technical service provider based in the Czech Republic, with a domain registered since 2013. The site content is currently inaccessible due to a security challenge page powered by BitNinja.IO, which blocks direct access and limits content visibility. The visible content references outdated CMS platforms Joomla 1.5 and WordPress 2.5, indicating a legacy or unmaintained infrastructure. No privacy, cookie, or terms of service policies are present, and no contact information is available on the page. The technical infrastructure shows basic JavaScript usage for browser integrity checks and automatic redirects but lacks modern security headers or HTTPS enforcement visible in the HTML content.

A

AnFas, spol. s r. o.

jakdostat.cz

47

The website www.jakdostat.cz is dedicated to promoting a specialized book focused on improving collaboration between clients and graphic designers, studios, or agencies. The business behind the site is AnFas, spol. s r. o., a small Czech company. The site provides basic information about the book, ordering options, and a discussion forum, targeting clients seeking to optimize their design partnerships. The market position is niche, with a focus on design collaboration culture and quality improvement. Technically, the website uses an older jQuery version (1.4.2) and integrates Google Analytics and Google Tag Manager for user tracking. The site lacks modern CMS indicators and does not show evidence of advanced frameworks or hosting details. Performance and mobile optimization are basic, with minimal accessibility features. No forms or interactive inputs are present, reducing attack surface but also limiting user engagement. From a security perspective, the site does not present HTTPS or security headers in the provided data, which lowers its security posture. No privacy or cookie policies are found, indicating poor privacy compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. No vulnerabilities or exposed sensitive data were detected, but the site would benefit from improved security best practices. Overall, the website is functional for its purpose but lacks modern security, privacy, and technical standards. The domain's missing WHOIS data and lack of compliance documentation reduce trustworthiness. Strategic improvements in security headers, HTTPS enforcement, privacy policies, and domain registration transparency are recommended to enhance credibility and user trust.

I

Identity Online

identityonline.cz

50

Identity Online is a Czech Republic-based SaaS platform focused on providing cloud-based brand management and marketing content collaboration tools. The platform targets marketers, PR professionals, sales teams, and partners who require centralized, consistent, and secure access to brand assets and marketing materials. The website presents a professional image with detailed case studies and client references, indicating a niche market position with a focus on brand consistency and operational efficiency. Technically, the site uses modern JavaScript libraries such as jQuery, Video.js, and Swiper.js, along with Google Analytics and Tag Manager for tracking. The site is mobile optimized and offers a good user experience, though accessibility and SEO could be improved. Security posture is moderate, with HTTPS presumably enabled but lacking visible security headers and formal privacy or terms documentation. The absence of WHOIS data is a concern for domain legitimacy but does not directly contradict the business presence. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance transparency.

V

Váš Hosting s.r.o.

vas-hosting.eu

68

Váš Hosting s.r.o. is a Czech-based technology company specializing in providing virtual servers (VPS), dedicated servers, managed servers, webhosting, and domain registration services. With over 15 years of experience, the company manages a substantial infrastructure of more than 1,900 servers and 19,800 domains, serving a diverse clientele including notable businesses such as Rohlík.cz and Auto Palace. The website is professionally designed, offering clear navigation and comprehensive service information, including customer testimonials and case studies that reinforce its market credibility. Technically, the website employs modern technologies such as PHP 8+, Nginx, Apache, and Docker, alongside a custom VPS administration platform. It integrates Google Tag Manager for analytics and uses Bootstrap for responsive design, ensuring excellent performance and mobile optimization. Security practices include HTTPS enforcement, Anti-DDoS protection, 24/7 monitoring, and cookie consent mechanisms, although some security headers and incident response disclosures could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, although the business presence and content quality mitigate this concern. Overall, Váš Hosting presents a trustworthy and mature hosting service provider with a solid technical foundation and customer trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to strengthen trust further.

Y

Your Hosting s.r.o.

vas-hosting.com

68

Your Hosting s.r.o. operates the website www.vas-hosting.com, providing a comprehensive range of hosting services including virtual private servers, dedicated servers, managed servers, web hosting, and domain registration. The company targets small to medium businesses and web professionals, emphasizing secure, high-performance hosting solutions with 15+ years of experience and a strong customer base. The website features extensive customer testimonials and references, reinforcing its market position as a trusted regional hosting provider. Technically, the website is well-constructed using modern web technologies such as Bootstrap, Google Tag Manager, and supports mobile responsiveness and accessibility. The site employs HTTPS and cookie consent mechanisms, indicating a good level of digital maturity and privacy compliance. However, no explicit security policy or incident response information is published, which could be improved. Security posture is generally strong with HTTPS and some security best practices observed, but the absence of security headers and vulnerability disclosure mechanisms suggests room for enhancement. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration transparency and slightly impacts trustworthiness. Overall, the website is professional, secure, and user-friendly, but the domain registration anomaly warrants further verification. Strategic recommendations include publishing security policies, improving WHOIS transparency, and enhancing security headers to strengthen trust and compliance.

L

LOCASTE s. r. o.

palacvina.cz

63

Palác vína, operated by LOCASTE s. r. o., is a specialized retailer focused on offering high-quality wines and delicacies primarily from small family wineries and farms across Europe and Chile. The company also supports charitable causes such as foster families through partnerships with non-profit organizations. The website presents a professional and well-structured digital presence with clear business information, contact details, and e-commerce capabilities. Technically, the site is built on the ByznysWeb.cz CMS platform, uses modern web technologies, and enforces HTTPS with basic security measures including captcha protection on forms and cookie consent mechanisms. However, the absence of WHOIS data for the domain reduces transparency and slightly impacts trust. Privacy policies and cookie consent are well implemented and GDPR compliant. The site targets mature audiences due to alcohol sales but contains no explicit adult content.

K

Kanzelsberger

kanzelsberger.cz

69

Kanzelsberger.cz is a well-established Czech Republic-based retail chain specializing in books and related products, operating both online and through 26 physical stores nationwide. The website offers a comprehensive e-commerce platform with a broad catalog of books across various genres, supported by promotional banners and customer engagement features such as newsletters and loyalty clubs. The business targets general book buyers in the Czech market, emphasizing convenience with options like in-store pickup and free shipping over a threshold. Technically, the website is built on modern frameworks including Angular 12 and integrates multiple third-party services such as Google Tag Manager, reCAPTCHA, and SmartEmailing for marketing and security. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with a clean and professional design that supports a positive user experience. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms, alongside a cookie consent mechanism indicating GDPR compliance. However, the absence of visible security headers and lack of published security policies or incident response contacts suggest areas for improvement. The missing WHOIS data reduces transparency and slightly impacts trustworthiness, though the overall business presence and content quality support legitimacy. Overall, Kanzelsberger.cz presents a solid e-commerce platform with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust and compliance.

I

ITALEST GROUP, s.r.o.

vergnanocaffe.cz

56

Vergnano caffe is a specialized distributor of premium Vergnano coffee products and Electra coffee machines in the Czech Republic. The company operates as an authorized distributor since 2001, offering a wide range of coffee beans, capsules, grinders, bar equipment, and accessories targeting both professional and home users. Their market position is supported by certified distributor status and a portfolio of partner clients. Technically, the website is built on WordPress with common libraries such as jQuery and Owl Carousel, providing a good user experience with mobile optimization and clear navigation. However, the site lacks explicit privacy and cookie policies, and no security headers are detected, indicating room for improvement in security and compliance. The WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective but does not detract from the professional presentation and contact transparency on the site. Overall, the website is safe, professional, and credible but would benefit from enhanced privacy compliance and security hardening.

I

I love Hummus s.r.o.

ilovekimchi.de

49

I love Hummus s.r.o. operates the website ilovekimchi.de, an e-commerce platform specializing in Korean fermented foods such as Kimchi. The company targets both B2B partners and retail customers, emphasizing certified quality products under strict IFS and BIO standards. The website is professionally designed, multilingual, and offers a range of products with clear pricing and availability. The business maintains a niche market position with a focus on health-conscious consumers and wholesale partnerships. Technically, the website leverages modern e-commerce infrastructure provided by Upgates, integrates multiple analytics and marketing tools including Google Analytics 4, Microsoft Clarity, and Facebook Pixel, and uses standard web technologies such as Bootstrap and jQuery. Hosting is managed via Forpsi nameservers, indicating a reliable hosting environment. The site is mobile-optimized and SEO-friendly, with proper cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the analysis. WHOIS data is minimal but consistent with a small business profile. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is low, with recommendations to enhance security headers, publish incident response contacts, and maintain regular audits of third-party scripts. The website is trustworthy, compliant with GDPR, and provides clear contact channels, supporting a positive user and business experience.

I

I love Hummus s.r.o.

ilovekimchi.cz

50

The website www.ilovekimchi.cz is an e-commerce platform operated by I love Hummus s.r.o., specializing in the sale of fermented food products, primarily Kimchi and related items. It targets health-conscious consumers interested in fermented foods and Korean cuisine. The site offers a range of products, recipes, and educational content, positioning itself as a niche player in the Czech Republic's healthy food market. The business model is retail e-commerce with subscription options and a focus on product quality and customer engagement. Technically, the website is built on the Upgates e-commerce platform and utilizes modern web technologies including Google Tag Manager, Google Analytics 4, Facebook Pixel, and Microsoft Clarity for analytics and marketing. The site is mobile-optimized, fast-loading, and employs standard web fonts and widgets to enhance user experience. Forms are validated using the Nette Framework, ensuring data integrity. From a security perspective, the site enforces HTTPS with a strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. While some security headers are present, there is room for improvement by adding explicit Content-Security-Policy and other headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain transparency and trustworthiness. Overall, the website presents a professional and trustworthy front for its business, with good content quality and technical implementation. The main risk lies in the lack of publicly available domain registration information, which could impact trust from a security and compliance standpoint. Strategic recommendations include enhancing security headers, publishing a security policy, and improving domain registration transparency to bolster credibility.

S

SimpleShop – Chytrý prodejní formulář pro váš web

simpleshop.sk

47

SimpleShop is a Czech-based e-commerce platform specializing in providing smart sales forms for digital products such as online courses, e-books, videos, memberships, and tickets. The platform targets small to medium businesses and individual content creators primarily in the Czech Republic and Slovakia. The website demonstrates a professional and modern digital presence, leveraging WordPress and Elementor technologies with strong SEO and performance optimizations. Privacy and cookie policies are comprehensive and GDPR compliant, with an active consent mechanism. Security posture is solid with HTTPS and security headers, though some areas like explicit security policies and incident response contacts could be improved. The domain WHOIS data is not publicly available, which is typical for Czech domains and does not detract from the site's legitimacy given the professional content and trust indicators. Overall, SimpleShop presents a trustworthy and well-maintained online platform with room for enhanced transparency in security and contact information.

N

NETSTR s.r.o.

netstr.cz

44

NETSTR s.r.o. is a Czech Republic based small IT services company specializing in IT outsourcing, data network design and implementation, and security camera systems. The company targets businesses seeking comprehensive IT infrastructure management and security solutions. Their website is professionally designed using WordPress with modern plugins and libraries, providing clear service descriptions and contact information. The technical infrastructure is modern and performant, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, but lacks some security headers and formal security policies. Privacy compliance is incomplete due to missing privacy and cookie policies. Overall, the website presents a trustworthy and professional image suitable for its market segment.

V

Vosges Matin

vosgesmatin.fr

67

Vosges Matin is a reputable regional news media organization serving the Vosges and Lorraine regions in France. The website offers continuous news coverage across various domains including local, national, and international news, sports, politics, economy, and environment. It operates on a subscription and advertising business model, supported by a professional digital presence including newsletters and mobile applications. The site is part of the EBRA Groupe, a known media group in France. Technically, the website employs modern web technologies such as Google Tag Manager, Didomi for consent management, and reCAPTCHA for form security. The site is mobile-optimized and uses HTTPS with secure cookie practices. However, some security headers are not explicitly detected and could be improved. The site demonstrates good SEO practices and accessibility is basic but functional. From a security perspective, the site shows a mature approach to privacy compliance with GDPR-consistent cookie consent mechanisms and a clearly identified Data Protection Officer contact. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data limits domain registration verification, but the website content and business information strongly indicate legitimacy. Overall, Vosges Matin presents a trustworthy and professional digital news platform with solid privacy and security practices, though improvements in security headers and explicit security policies could enhance its posture further.

L

Le Progrès

leprogres.fr

67

Le Progrès is a well-established French regional news media outlet focusing on national and regional news for the Rhône-Alpes and surrounding regions. The website serves a broad general audience with digital news content and advertising as its primary business model. It holds a strong market position as a leading regional news provider in Eastern France. Technically, the site employs modern web technologies including Google Tag Manager, Didomi for consent management, and Prebid.js for advertising, indicating a mature digital infrastructure. The site is mobile optimized and uses HTTPS with strong security headers, reflecting a good security posture. However, explicit privacy policies and terms of service pages are not evident in the provided content, which slightly impacts privacy compliance. Overall, the website is professional, trustworthy, and safe for general audiences.

L

Le Républicain Lorrain

republicain-lorrain.fr

67

Le Républicain Lorrain is a prominent regional news media organization based in France, delivering continuous news coverage focused on Lorraine, France, and global events. The website offers a variety of services including news articles, videos, digital editions, and subscription models, targeting a general audience interested in regional and national news. It operates under the parent company EBRA Groupe, indicating a strong market position within the media sector. Technically, the website employs modern web technologies such as JavaScript, Google Tag Manager, and a consent management platform (Didomi) to ensure compliance with privacy regulations. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the site enforces HTTPS, uses secure cookies, integrates Google reCAPTCHA for form protection, and manages user consent effectively. However, it lacks explicit security headers and a public security policy or vulnerability disclosure mechanism. Overall, the website is professional, trustworthy, and compliant with GDPR, with a solid security posture and a clear business model based on advertising and subscriptions.