Security Directory

MVM Otthon Plusz Zrt. is a Hungarian energy sector company, fully owned by MVM Zrt., focusing on energy efficiency services and insurance product brokerage for residential customers. The website reflects a professional corporate presence with clear business descriptions and links to partner insurance and energy efficiency sites. The technical infrastructure is based on ASP.NET WebForms and Sense/Net ECM CMS, with modern JavaScript libraries and frameworks ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. Overall, the site is trustworthy and well-aligned with its business objectives.

M

MAVIR Magyar Villamosenergia-ipari Átviteli Rendszerirányító Zrt.

mavir.hu

60

MAVIR Zrt. is the Hungarian Transmission System Operator responsible for managing the national electricity transmission network and market operations. The company operates critical infrastructure, provides system and market operation services, and supports business development and regulatory compliance. The website reflects MAVIR's role as a key national energy entity with a large operational scope and multiple subsidiaries. The site targets energy sector professionals, partners, and the general public interested in electricity transmission and market data. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and Google Analytics. It demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. The site uses HTTPS with strong SSL configuration and implements several security headers, indicating a solid security posture. Security-wise, the site follows best practices including HTTPS enforcement and secure form handling. However, it lacks a visible cookie consent mechanism and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is generally good, with a comprehensive privacy policy and GDPR adherence, though cookie consent could be improved. Overall, MAVIR's website is professional, trustworthy, and well-maintained, reflecting the organization's essential role in Hungary's energy sector. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

MVM Paksi Atomerőmű Zrt. operates Hungary's primary nuclear power plant, providing critical electricity generation services. As a key entity within the MVM Group, it maintains a strong market position in the energy sector, offering not only power production but also public education and environmental stewardship. The website serves as an informative portal for stakeholders, visitors, and the general public, featuring detailed information about the company, its subsidiaries, and related services. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with a responsive design optimized for mobile devices. The content is well-structured and professionally presented, though there is room for improvement in accessibility and SEO. The CMS appears to be Sitecore, indicating a robust content management infrastructure. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, the absence of explicit security headers and public security policies suggests opportunities to enhance the security posture. No vulnerabilities or exposed sensitive data were detected, and the domain registration is consistent and trustworthy. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic enhancements in security headers, incident response transparency, and SEO could further strengthen its position and trustworthiness.

P

Paramo, a.s.

paramo.cz

58

Paramo, a.s. is a Czech-based petrochemical company operating as a subsidiary of the ORLEN Unipetrol group. The company specializes in the production and distribution of process oils, asphalt products, and motor oils, serving primarily industrial and business clients in the Czech Republic and neighboring countries. The website reflects a professional corporate presence with detailed product information, news updates, and comprehensive contact details. It is built on Microsoft SharePoint and integrates modern web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management. The site is accessible, GDPR compliant, and includes social media channels for broader engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. The absence of WHOIS data is likely due to privacy protection policies, but the website's affiliation with the ORLEN group and consistent branding support its legitimacy.

S

Spolana

spolana.cz

67

Spolana is a Czech chemical company operating primarily in the energy and chemical production sector, likely a subsidiary or closely related to Unipetrol and Orlen group companies. The website is built on Microsoft SharePoint and uses modern web technologies including jQuery, Bootstrap, and Cookiebot for cookie consent management. The site is primarily in Czech and targets industrial clients and partners. The presence of Google Analytics and Cookiebot indicates a moderate level of user tracking with GDPR compliance mechanisms in place. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response information. WHOIS data is unavailable from the CZ NIC registry, which reduces trust slightly but is not uncommon for domains under certain registries or privacy policies. Overall, the website is professional, functional, and compliant with privacy regulations, serving a large industrial business audience.

B

Butadien Kralupy

butadien.cz

64

Butadien Kralupy is a corporate website representing a subsidiary of the ORLEN Group, a major energy and chemical production conglomerate in Central Europe. The site provides information about the company and its operations primarily in Czech language, targeting industry professionals and partners. The website is built on Microsoft SharePoint and uses common web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management. It integrates Google Analytics and Google Tag Manager for analytics and tracking purposes. The site implements a comprehensive cookie consent mechanism and a detailed privacy policy, indicating good privacy compliance and GDPR adherence. However, the absence of WHOIS data and lack of visible contact information on the main page reduce overall trustworthiness. Security posture is moderate with no visible security headers and no explicit security or incident response policies published. Overall, the website is professional and functional but could improve transparency and security practices.

Polymer Institute Brno is a corporate entity under the ORLEN Group umbrella, specializing in polymer research and production. The website serves as an information portal for industry professionals and partners, providing detailed insights into their polymer technologies and services. The site is primarily in Czech and targets a regional audience in the energy and chemical sectors. Technically, the site is built on Microsoft SharePoint with integration of modern tools such as Cookiebot for consent management and Google Analytics for user behavior tracking. The presence of a comprehensive cookie consent mechanism and privacy policy indicates a strong commitment to GDPR compliance. Security-wise, while HTTPS is presumably enabled, explicit security headers and incident response policies are not evident, suggesting room for improvement in security posture. Overall, the website is professional and trustworthy, with no signs of malicious activity or content blocking.

O

ORLEN Unipetrol Doprava

orlenunipetroldoprava.cz

60

ORLEN Unipetrol Doprava operates in the energy and transportation sectors, focusing on logistics and transport services related to petrochemical products. The company is part of the ORLEN group, a significant player in the regional energy market. The website reflects a professional corporate presence with a focus on compliance and user privacy, evidenced by a comprehensive privacy policy and cookie consent mechanism. The technical infrastructure is based on Microsoft SharePoint with modern web technologies such as jQuery and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and mobile optimization. Overall, the website is trustworthy and serves its business audience effectively.

O

ORLEN Unipetrol Hungary

orlenunipetrol.hu

66

ORLEN Unipetrol Hungary operates as a significant entity within the ORLEN Group, focusing on energy and petrochemical products. The website reflects a corporate presence with detailed information about subsidiaries and related companies, targeting a general audience interested in energy sector services. The technical infrastructure is based on Microsoft SharePoint, enhanced with modern JavaScript libraries and cookie consent management via Cookiebot, indicating a mature digital presence. Security posture is solid with HTTPS enforcement and cookie consent compliance, though explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates good professionalism and compliance with GDPR, supporting trustworthiness and business credibility.

O

ORLEN Unipetrol Deutschland

orlenunipetrol.de

63

ORLEN Unipetrol Deutschland is a significant entity within the ORLEN Group, operating primarily in the energy and petrochemical sectors in Germany. The website reflects a corporate B2B focus, providing information about refining and petrochemical products and services. The company maintains a consistent brand presence aligned with its parent company, PKN ORLEN, and its subsidiaries. The digital infrastructure is based on Microsoft SharePoint, indicating a mature but traditional CMS choice. The site employs modern web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management, demonstrating compliance with GDPR and user privacy standards. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations.

O

ORLEN Unipetrol Slovakia s.r.o.

orlenunipetrol.sk

51

ORLEN Unipetrol Slovakia s.r.o. is a medium-sized corporate entity operating in the energy and transportation sectors, specializing in wholesale distribution of fuels and lubricants in Slovakia. It is part of the larger ORLEN Unipetrol group, which is a leading petrochemical and refining conglomerate in Central Europe. The website reflects a professional corporate presence with clear business descriptions, product offerings, and group affiliations. Technically, the site is built on Microsoft SharePoint with integration of modern tools like Cookiebot and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance is well addressed with accessible policies. Overall, the site demonstrates a trustworthy and professional digital footprint aligned with its business operations.

O

ORLEN Unipetrol RPA

orlenunipetrolrpa.cz

63

ORLEN Unipetrol RPA operates in the energy sector, focusing on refining and petrochemical products primarily for the Czech Republic market. The website reflects a corporate presence with a professional design and consistent branding, targeting business and industrial customers. The company appears to be part of the ORLEN Group, a significant player in the regional energy market. Technically, the website is built on Microsoft SharePoint with common web technologies such as jQuery and Bootstrap, and it integrates modern tools like Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is accessible and mobile-optimized, though performance is moderate. From a security perspective, the website uses HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and no public security or incident response policies are available. The absence of WHOIS registration data is a concern for domain legitimacy verification, although the website content and external references suggest a legitimate corporate entity. Advertising and analytics practices are transparent, using reputable services such as Google Analytics, Hotjar, and Facebook Ads. Overall, the website demonstrates a good level of digital maturity and privacy compliance but would benefit from enhanced security headers, clearer contact information, and public security policies. The domain registration opacity slightly reduces trustworthiness, warranting further verification. Strategic recommendations include improving security posture, publishing incident response and vulnerability disclosure information, and enhancing accessibility features.

P

Petrotrans

petrotrans.cz

65

Petrotrans operates in the energy and transportation sectors, focusing on the logistics and transportation of chemical and petrochemical products primarily in the Czech Republic. The company targets industrial and business clients requiring specialized transport services. The website is built on Microsoft SharePoint and incorporates modern web technologies such as jQuery, Bootstrap, and Cookiebot for cookie consent management. Google Analytics and Google Tag Manager are used for analytics and tracking purposes. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response contacts. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent mechanism. However, the absence of WHOIS registrant data and explicit contact details slightly reduces business credibility. Overall, the website is professional, functional, and trustworthy for its business domain.

Baltic Power sp. z o.o. is a medium-sized energy company focused on developing Poland's first offshore wind farm with a capacity of up to 1.2 GW. The company is a joint venture between the ORLEN Group and Northland Power, positioning itself as a key player in the Polish renewable energy market. The website reflects a professional corporate presence with detailed project information, community engagement initiatives, and supplier outreach. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Cookiebot for GDPR-compliant cookie consent, and employs Google Analytics for visitor tracking. Security practices include HTTPS usage and CSRF protection, though DNSSEC is not enabled and some security headers are missing. Overall, the site demonstrates good privacy compliance and business credibility, with clear contact information and legal disclosures.

Automodul.cz is an established Czech online platform specializing in automotive classifieds, offering a wide range of personal and commercial vehicles for sale sourced from major Czech car bazaars, dealerships, and private sellers. The site targets general consumers interested in purchasing vehicles, providing extensive search and comparison tools to facilitate informed buying decisions. The platform is owned by VLTAVA LABE MEDIA a.s., a recognized media company in the Czech Republic, which supports its credibility and market presence. Technically, the website employs a modern technology stack including Bootstrap for responsive design, Select2 for enhanced form controls, and integrates multiple analytics and advertising services such as Google Analytics, Facebook Pixel, Gemius Audience, and Cxense. The site is mobile optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with preconnect and preload hints used to optimize resource loading. From a security perspective, the site uses HTTPS as indicated by external script URLs, but lacks visible security headers in the provided data, which could be improved to enhance protection against common web vulnerabilities. The absence of a visible privacy policy and cookie policy pages in the analyzed content suggests gaps in privacy compliance, although a cookie consent mechanism appears to be implemented. No WHOIS data was retrievable, likely due to privacy protection, which slightly reduces trust but is not uncommon for commercial websites. Overall, Automodul.cz presents a professional and functional online marketplace for vehicle sales in the Czech Republic with a moderate security posture and some compliance gaps. Strategic improvements in privacy disclosures, security headers, and contact transparency would strengthen its trustworthiness and regulatory adherence.

I

Inštitút znalostného pôdohospodárstva a inovácií

izpi.sk

63

The Inštitút znalostného pôdohospodárstva a inovácií (IZPI) is a Slovak government-affiliated educational institute focused on agricultural knowledge, training, and innovation. It operates under the Ministry of Agriculture and Rural Development of Slovakia, providing accredited courses, advisory services, conference facilities, and hotel accommodations. The website reflects a well-structured digital presence with clear navigation, multilingual support, and active social media engagement, targeting agricultural professionals, government entities, and students. The business model combines public sector educational services with revenue from hospitality and conference offerings. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Owl Carousel, and Google Analytics, hosted behind Cloudflare with DNSSEC enabled, ensuring good performance and security. The site is mobile-optimized and includes accessibility features, though some improvements could be made in security headers and explicit incident response policies. Privacy compliance is strong, with a comprehensive GDPR-aligned privacy policy and cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact is a minor gap. WHOIS data confirms domain legitimacy and consistency with the business entity, supporting trustworthiness. Overall, IZPI's website is professional, secure, and compliant, effectively supporting its mission as a government educational institute. Strategic improvements in security policy transparency and enhanced security headers would further strengthen its posture.

I

Internet Index Czech, s.r.o.

adulto.cz

61

Adulto.cz is a Czech-based company specializing in online age verification services for e-commerce platforms selling age-restricted products such as tobacco, alcohol, and adult goods. Founded in 2023 and operated by Internet Index Czech, s.r.o., the company has quickly established itself as a leading provider in the Czech and Slovak markets, serving over 450 e-shops and performing millions of verifications. Their service integrates multiple verification methods including bank identity and MojeID, ensuring compliance with Czech laws and protecting minors from restricted product sales. The website is professionally designed, mobile-optimized, and provides comprehensive information and customer testimonials, reinforcing trust and credibility.

C

Czech Free Media s.r.o.

klostermannovachata.cz

50

Klostermannova chata is a small hospitality business operating a hotel and restaurant in the Šumava region of the Czech Republic. The website presents a well-structured and professionally designed platform targeting tourists, families, and corporate clients with accommodation, dining, and leisure services. The business emphasizes its long history and local presence. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google Analytics, with a cookie consent mechanism supporting GDPR compliance. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency. Security posture is moderate with no detected security headers and no explicit incident response or vulnerability disclosure policies. Overall, the website is functional and trustworthy from a user perspective but would benefit from improved domain transparency and enhanced security practices.

Č

České ghíčko, s.r.o.

ghee.cz

47

České ghíčko, s.r.o. operates the website ghee.cz, a professionally designed e-commerce platform specializing in high-quality clarified butter (Ghee) and related products. The company has a strong market presence in the Czech Republic, distributing products through over 300 retail outlets including major chains such as Globus, Makro, Albert, and Rohlík. Their product range includes pure Ghee, flavored variants (Ghee+), and nut spreads (Gheetella), targeting health-conscious consumers and culinary enthusiasts. The website offers rich content including recipes, newsletters, and detailed product information, enhancing customer engagement and brand loyalty. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Swiper.js, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Smartlook, and Mailchimp. It uses Google reCAPTCHA v3 for form security and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience across devices. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements security best practices including CSRF tokens on forms and secure AJAX calls. While no explicit security policy or incident response contacts are published, the site demonstrates a mature security posture with no visible vulnerabilities or exposed sensitive data. Privacy policies and terms of service are comprehensive and clearly accessible, indicating good compliance with GDPR requirements. Overall, ghee.cz is a trustworthy and professional retail website with strong business credibility, solid technical infrastructure, and good security hygiene. Strategic recommendations include publishing a security policy and incident response contacts, and maintaining vigilance on third-party scripts to sustain security and compliance.

V

ViennaLab Diagnostics GmbH

viennalab.com

53

ViennaLab Diagnostics GmbH is a specialized healthcare company focused on developing and manufacturing in vitro diagnostic assays for genetic disorders, pharmacogenetics, cancer, and microbiome analysis. Established in 2000 and headquartered in Austria, it operates as part of the BioVendor Group, leveraging a niche market position with a strong emphasis on genetic variant detection. The website reflects a professional and consistent brand image targeting healthcare professionals and laboratories. Technically, the site is built on Joomla CMS with modern frontend technologies such as jQuery and Bootstrap, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, indicating GDPR awareness. Overall, the site is trustworthy and professionally maintained, though it lacks visible contact emails and phone numbers on the homepage and does not provide terms of service or explicit security policies. Strategic enhancements in security transparency and contact accessibility would further strengthen its digital maturity.

S

Správa jeskyní České republiky

jeskynecr.cz

63

Správa jeskyní České republiky operates as the official government entity responsible for managing caves across the Czech Republic. The organization provides comprehensive visitor services including ticketing, educational programs, and conservation efforts. Their website serves as a central portal for cave information, visitor updates, and online resources, targeting tourists, schools, and researchers. The site is well-branded and consistent with government and scientific partners, reinforcing its authoritative position in the market. Technically, the website is built on Drupal 10 with modern frameworks like Bootstrap and jQuery UI, ensuring a responsive and accessible user experience. The site demonstrates good SEO practices and mobile optimization, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks some advanced security headers and explicit incident response contacts. The absence of WHOIS data limits domain transparency and trust assessment, but the presence of official contact details, government affiliations, and partner endorsements mitigate concerns. Overall, the site is professional, secure, and compliant with privacy regulations, making it a reliable resource for its audience.

A

Agentura ochrany přírody a krajiny ČR

nature.cz

62

Agentura ochrany přírody a krajiny ČR (AOPK ČR) is the official Czech government agency responsible for the protection and management of nature and landscape across the Czech Republic. The agency manages 25 protected landscape areas, national nature reserves, and monuments. The website serves as an information portal for the public, stakeholders, and government officials, providing resources on nature conservation, permits, and regional offices. The site is primarily in Czech with an English language option, reflecting its official and public service nature. Technically, the website is built on the Liferay CMS platform, utilizing modern frontend libraries such as jQuery, Bootstrap, React, and Clay UI. The site is mobile-optimized and features a structured navigation system. Performance is moderate, with no major technical issues detected. However, explicit privacy and cookie policies are not found, and no analytics or tracking scripts are evident in the provided content. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerabilities in the visible content. Security headers are not explicitly detected, and no published security or incident response policies are found. The WHOIS data for the domain is missing, which is unusual and reduces domain registration trustworthiness, though the official .gov.cz domain and content strongly indicate legitimacy. Overall, the website is a professionally maintained government portal with good content quality and technical implementation but lacks visible privacy compliance documentation and WHOIS transparency. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear contact and incident response information.

M

Ministerstvo životního prostředí

irz.cz

63

The website www.irz.cz serves as the official portal for the Integrovaný registr znečišťování (IRZ), an integrated pollution register managed by the Czech Ministry of the Environment (Ministerstvo životního prostředí) in partnership with CENIA. It provides public access to environmental data concerning pollutant emissions and transfers reported by thousands of facilities across the Czech Republic. The site targets both the general public and reporting entities, offering search tools, documentation, and regulatory information. The business model is a government-operated public information service with a medium organizational size and a history dating back to 2004. Technically, the site is built on Drupal 10 CMS with modern web technologies including Bootstrap and jQuery. It features responsive design, accessibility considerations, and good SEO practices. Performance is moderate, with a well-structured navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response disclosures are lacking. No vulnerabilities or exposed sensitive data were detected. From a security and compliance perspective, the site demonstrates GDPR compliance with clear privacy and cookie policies. However, the absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the official branding and content strongly support legitimacy. No terms of service or vulnerability disclosure policies are published. Contact information is limited to a general info email address. Overall, the site is a trustworthy and professional government resource with good technical and security practices. Strategic improvements include publishing security policies, incident response contacts, and enhancing domain registration transparency to further strengthen trust and compliance.

C

CENIA

envirometr.cz

61

Envirometr.cz is an official Czech government environmental data portal operated by CENIA in cooperation with the Ministry of the Environment. It provides comprehensive environmental data, reports, and publications related to various environmental themes such as transport, energy, climate, air quality, and waste. The platform targets researchers, policymakers, and the general public interested in environmental statistics and information for the Czech Republic. The business model is government-funded, offering free access to authoritative environmental data and publications. Technically, the website is built on Drupal 10 CMS with Bootstrap and uses Matomo for analytics, indicating a modern and maintainable infrastructure. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. The absence of WHOIS data is a notable anomaly but does not detract from the site's legitimacy given its government affiliation and content. Overall, the site is professional, trustworthy, and serves as a key resource for environmental data in the Czech Republic.

V

Výzkumný ústav vodohospodářský T. G. Masaryka, veřejná výzkumná instituce

vtei.cz

50

The website www.vtei.cz represents the open access scientific journal VTEI, published by the Výzkumný ústav vodohospodářský T. G. Masaryka, a public research institution in the Czech Republic. The journal focuses on water management technical and economic information, targeting researchers and professionals in hydrology, hydrogeology, ecology, and related fields. It is recognized in international databases such as DOAJ and Scopus, indicating a reputable academic standing. The business model is based on open access publishing without fees for authors or readers, supporting knowledge dissemination in water management sciences. Technically, the website is built on WordPress CMS with Bootstrap framework and uses modern web technologies including jQuery, Shadowbox.js, and AI content generation plugins. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Cookie consent is implemented with advanced user controls, reflecting awareness of privacy regulations. However, no explicit privacy policy or terms of service pages were found, which is a compliance gap. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. WHOIS data for the domain is unavailable, which limits domain registration verification and slightly reduces trustworthiness. Overall, the security posture is moderate with room for improvement in headers and policy transparency. The overall risk assessment is low, given the professional nature of the content and institutional backing. Strategic recommendations include publishing a comprehensive privacy policy, implementing security headers, and providing incident response contact information to enhance trust and compliance. The domain's WHOIS data absence should be investigated to ensure legitimacy and reduce potential risk.

C

Celé Česko čte dětem

celeceskoctedetem.cz

45

Celé Česko čte dětem is a well-established Czech non-profit organization founded in 2006, dedicated to strengthening family bonds through reading activities aimed at children and parents. The website reflects a mature digital presence with a clear focus on community engagement, supported by numerous reputable partners and sponsors. The content is primarily in Czech, targeting local families and educational stakeholders. Technically, the site employs a modern tech stack including Bootstrap, jQuery, FullCalendar, and Google services, ensuring a responsive and user-friendly experience. Security measures such as HTTPS and Google reCAPTCHA are implemented, though some advanced security headers and explicit policies are absent. Privacy compliance is addressed via a cookie policy and consent mechanism, aligning with GDPR requirements. Overall, the site demonstrates a solid business credibility and trustworthy online presence.

Rozečti.se is an online educational platform specializing in teaching speed reading to Czech-speaking audiences and other language groups. The website offers interactive courses, e-books, and certification to help users improve reading efficiency. The platform targets students, professionals, schools, and companies, providing both free trial and paid full versions. Technically, the site uses a combination of jQuery, Bootstrap, and the Nette Framework, with integrations of Facebook and Twitter SDKs and Google Analytics for tracking. The site is served over HTTPS with good SSL configuration, but lacks some advanced security headers and explicit security policies. Privacy compliance is addressed with a cookie consent banner and GDPR-related documents available. The absence of WHOIS data reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is well-designed, user-friendly, and safe for general audiences.

G

GRENA, a.s.

grenamat.cz

44

GRENA, a.s. is a Czech Republic-based medium-sized manufacturing company specializing in non-flammable and fire-resistant materials such as vermiculite boards and acoustic panels. Established in 2009, the company serves industrial clients and construction sectors with a broad product portfolio and maintains a professional web presence with multi-language support. The website is well-structured, providing clear navigation and contact options, including phone, email, and contact forms, alongside active social media channels. Technically, the site uses modern JavaScript libraries and frameworks like jQuery, Bootstrap, and Owl Carousel, hosted likely on Czech infrastructure consistent with the domain's WHOIS data. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and published security policies. Privacy compliance is partial due to the absence of a dedicated privacy policy page. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

S

SENSIT s.r.o.

sensit.cz

46

SENSIT s.r.o. is a well-established Czech manufacturer specializing in sensors and measurement devices, including temperature, humidity, CO2, level, flow, and position sensors. Founded in 1991, the company has a strong market presence domestically and exports to 65 countries. Their website reflects a professional and consistent brand image, offering detailed product information and certifications that reinforce their industry credibility. Technically, the site uses a modern ASP.NET framework with common JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is moderate with HTTPS in use but lacks visible security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, but the overall business and website quality remain solid. Strategic improvements in security headers and transparency policies are recommended to enhance trust and compliance.

S

Svaz podnikatelů ve stínicí technice

spst-stineni.cz

46

Svaz podnikatelů ve stínicí technice (SPST) is a Czech trade association representing manufacturers and businesses in the shading technology sector. Formed in 2018 by the fusion of two entities, it provides certification, industry news, events, and resources to its members and the wider professional community. The website reflects a medium-sized organization with a clear focus on industry advocacy and networking. Technically, the site is built on Joomla CMS, using common JavaScript libraries and Google Analytics for tracking. It is mobile-optimized and presents a professional design with good navigation. Security posture is adequate with HTTPS enabled and CSRF protections in place, but lacks advanced security headers and explicit privacy or cookie policies, indicating compliance gaps. WHOIS data is missing, which raises concerns about domain legitimacy, though the active and professional website mitigates some risk. Overall, the site is safe, trustworthy, and serves its business purpose effectively.

R

REALSANT s.r.o.

realsant.cz

56

REALSANT s.r.o. is a Czech Republic based real estate development company with over 25 years of experience, specializing in residential and commercial property development, project management, and property services. The company operates as part of the PKS group, which enhances its market position and credibility. Their website presents a professional and comprehensive overview of their services, projects, and corporate information, targeting investors, buyers, and commercial clients in the real estate sector. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA, ensuring a responsive and user-friendly experience. Privacy and cookie policies are well implemented with clear consent mechanisms, reflecting good compliance with GDPR requirements. Security posture is generally strong with HTTPS and reCAPTCHA usage, though the absence of certain security headers and lack of incident response information suggest areas for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall professional presentation and detailed business information mitigate concerns. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response contacts, and verifying domain registration details to improve trust and compliance.

OC Convent is a retail shopping center located in Žďár nad Sázavou, Czech Republic, offering a variety of retail stores including supermarkets, pharmacies, and specialty shops. The website presents a professional and user-friendly interface built on WordPress with common plugins and libraries. The technical infrastructure is modern and mobile-optimized, supporting a good user experience. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and privacy policies are missing. The absence of WHOIS data limits domain trust assessment, but the site content and business information appear legitimate and consistent with a local retail center. Overall, the website is safe, professional, and serves its target audience effectively.

P

PKS stavby a.s.

pksstavby.cz

54

PKS stavby a.s. is a well-established Czech construction company with over 50 years of tradition and a strong market position among the top 20 construction firms in the Czech Republic. The company offers comprehensive construction services including building and engineering projects, supported by in-house production capabilities and a workforce of approximately 600 employees. The website reflects a professional corporate presence with clear business information, references, and media coverage. Technically, the site is built on WordPress and employs modern web technologies such as Google Analytics, Facebook Pixel, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and explicit consent mechanisms. Overall, the website and domain registration data align well, supporting the legitimacy and credibility of the business.

N

NET4GAS, s.r.o.

net4gas.cz

67

NET4GAS, s.r.o. operates as the exclusive operator of the natural gas transmission system in the Czech Republic, managing over 4,000 km of pipeline infrastructure. The company provides reliable, safe, and economically efficient gas transportation services year-round, playing a key role in integrating Central European energy markets and supporting the transition to a low-carbon economy. The website reflects a professional and business-focused presence with comprehensive information for customers, investors, and partners. Technically, the site uses established web technologies such as jQuery and Bootstrap, hosted on a CMS platform (WebJET CMS), and is mobile optimized with good navigation and content quality. Security-wise, the site implements cookie consent mechanisms and GDPR compliance but lacks visible advanced security headers or explicit security policies. The absence of WHOIS data limits full domain legitimacy verification, though the website content and contact details support a credible business identity. Overall, the site is well-structured and trustworthy for its intended audience but could improve transparency and security posture.

O

ORLEN Unipetrol

orlenunipetrol.cz

57

ORLEN Unipetrol is a leading Czech energy company specializing in refining, petrochemical production, and retail fuel distribution. As part of the ORLEN Group, it holds a strong market position in Central Europe, serving business clients, investors, and the general public. The website reflects a mature corporate digital presence with structured content covering products, investor relations, media, and sustainability initiatives. Technically, the site is built on Microsoft SharePoint with modern JavaScript libraries and cookie consent management, though mobile optimization and SEO could be improved. Security posture is solid with HTTPS enforcement, cookie consent, and internal anti-corruption policies, but lacks explicit vulnerability disclosure mechanisms. Overall, the site is professional and trustworthy, though WHOIS data is unavailable, limiting domain legitimacy verification.

M

Ministerstvo práce a sociálních věcí

esfcr.cz

68

The website www.esfcr.cz is the official portal for the European Social Fund (ESF) in the Czech Republic, managed by the Ministry of Labour and Social Affairs. It provides comprehensive information about the Operational Program Employment Plus (OPZ+) and related EU-funded social and employment initiatives. The portal serves a broad audience including public sector entities, applicants, recipients, and the general public interested in social development programs. The site is well-structured with clear navigation, multi-level menus, and a search function, offering access to program documents, calls for proposals, news, and evaluation reports. Technically, the site is built on the Liferay CMS platform, utilizing JavaScript libraries such as jQuery, Highcharts, and Bootstrap for UI and data visualization. It employs HTTPS with good SSL configuration but lacks visible security headers, which is a potential area for improvement. Google Analytics and Google Tag Manager are used for analytics with conditional user ID tracking for logged-in users. The site is mobile-optimized and has basic accessibility features. From a security and compliance perspective, the site does not display a cookie consent mechanism, which is a compliance gap under EU regulations. Privacy policy information is present and appears GDPR compliant. No WHOIS data was available, which limits domain legitimacy verification and slightly reduces trust. No contact emails or phone numbers were explicitly found on the homepage, and no vulnerability disclosure or incident response information is provided. Overall, the website is a professional and authoritative government portal with good content quality and business credibility. However, improvements in security headers, cookie consent, and transparency in contact and security policies would enhance its security posture and compliance standing.

P

Penta Investments

pentainvestments.com

71

Penta Investments is a well-established investment group with over 30 years of experience, focusing on long-term value investments across multiple sectors including retail, healthcare, real estate, financial services, manufacturing, and media. The company employs over 50,000 people and emphasizes responsible business practices and social responsibility. The website reflects a professional and consistent brand image targeting investors and business partners. Technically, the site is built on WordPress using modern frameworks like Bootstrap and jQuery, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. The absence of WHOIS data is a concern but the overall digital presence and business information support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details.

N

Národná sieť rozvoja vidieka SR

nsrv.sk

61

Národná sieť rozvoja vidieka SR is a Slovak government-affiliated agency focused on rural development, operating since 2009. It provides information, event organization, project databases, and advisory services to rural communities and stakeholders in Slovakia. The website is well-structured, professionally designed, and regularly updated with relevant news and events. Technically, it uses modern web technologies including Bootstrap, jQuery, Leaflet, and Google Analytics, hosted behind Cloudflare with DNSSEC enabled, indicating a secure and reliable infrastructure. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though formal security and incident response policies are not published. Overall, the site is trustworthy, compliant with GDPR, and serves as an authoritative resource for rural development in Slovakia.

R

Rozinet s.r.o.

regionalnipotravina.cz

54

The website regionalnipotravina.gov.cz represents a government-backed initiative by the Czech Ministry of Agriculture to certify and promote high-quality regional food products. The site is designed to support local producers and encourage consumers to seek out certified regional foods. The business model is focused on quality certification and regional promotion, positioning itself as a trusted national brand within the food sector. The website is professionally branded and consistent with government standards, targeting domestic consumers and producers in the Czech Republic. Technically, the site leverages modern web technologies including Blazor WebAssembly, jQuery, and Bootstrap, indicating a moderate level of digital maturity. The site includes advanced UI components such as calendars, galleries, and dropdowns, and integrates tracking tools like Google Analytics and Microsoft Clarity for user behavior insights. Mobile optimization and SEO appear adequate, though accessibility could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, reflecting basic privacy compliance. However, no privacy policy or terms of service pages were found, and no security headers were detected, which are areas for improvement. No forms or contact information are present, limiting direct user interaction and support channels. The WHOIS data is unavailable, which reduces transparency but the official government domain and content mitigate concerns about legitimacy. Overall, the website is functional, professional, and aligned with its government-backed mission but would benefit from enhanced privacy disclosures, security headers, and contact information to improve trust and compliance.

S

Státní veterinární správa

svscr.cz

58

Státní veterinární správa is a Czech government authority responsible for veterinary supervision, animal health, and food safety across the Czech Republic. The website serves as an official portal providing information, regulatory documents, contact details, and updates on animal diseases and food hygiene. It targets veterinary professionals, food producers, animal owners, and the general public. The organization holds ISO 9001 certification, indicating a commitment to quality management. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for GDPR compliance and user experience enhancements. The site is mobile-optimized, accessible, and SEO-friendly. Google Analytics is used with anonymized data collection, and a comprehensive cookie consent mechanism is implemented. Security posture is solid with HTTPS enforced and privacy compliance evident. However, the absence of WHOIS data and missing HTTP security headers are notable gaps. No vulnerabilities or exposed sensitive data were detected. The site maintains a professional and trustworthy presence with clear contact information and official branding. Overall, the website reflects a mature digital presence for a government entity, with strong compliance and user-centric features. Strategic improvements in security headers and domain registration transparency would further enhance trust and security.

E

European Entrepreneurs CEA-PME

european-entrepreneurs.org

61

European Entrepreneurs CEA-PME is a Brussels-based confederation representing over 1.5 million SMEs and Mid-Caps across Europe. Founded in 1992, it advocates for favorable business conditions, promotes entrepreneurship and innovation, and facilitates networking and access to funding. The organization actively participates in EU-funded projects and maintains a strong presence in European business policy discussions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and reCAPTCHA for security and analytics. The security posture is solid with HTTPS and consent mechanisms, though additional security headers could enhance protection. The WHOIS data is incomplete, limiting domain trust verification, but the professional site and active social media presence support legitimacy. Overall, the website is well-designed, content-rich, and trustworthy, serving as a credible resource for European SMEs.

B

Babyweb.cz - těhotenství, porod, děti a jejich maminky

babyweb.cz

41

Babyweb.cz is a well-established Czech online magazine focused on pregnancy, childbirth, childcare, and parenting. It offers a wide range of content including articles, blogs, calculators, and a community forum, targeting pregnant women, mothers, and women planning pregnancy. The website is professionally designed with consistent branding and good content quality, serving a medium-sized audience in the Czech Republic. Technically, the site runs on WordPress with modern frameworks like Bootstrap and integrates multiple advertising and analytics services such as Google Analytics, Gemius, and Adform. It is mobile-optimized and implements structured data for SEO. Security posture is good with HTTPS and reCAPTCHA usage, but lacks some security headers and explicit security policies. Privacy compliance is basic with no clear privacy or cookie policy pages detected in the provided content, though a consent mechanism is present. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for content publishers. Overall, the site is trustworthy and professional with moderate risk.

S

SWEET.TV

sweet.tv

65

SWEET.TV is a well-established OTT streaming platform founded in 2010, offering a wide range of TV channels, movies, and animation content primarily targeting general audiences in the Slovak Republic and surrounding regions. The platform supports multi-device access and subscription-based services, positioning itself as a comprehensive national online cinema. Technically, the website employs modern web technologies including AngularJS, jQuery, Bootstrap, and integrates advanced consent management and analytics tools such as Didomi, Google Tag Manager, and Facebook Pixel. The infrastructure leverages Cloudflare DNS and GoDaddy registrar services, ensuring reliable hosting and domain management. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers could be more explicitly implemented. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism, excellent content quality, and trustworthy business credibility.

H

Havas Worldwide Prague a.s.

havas.cz

59

Havas Worldwide Prague a.s. is a well-established advertising and media agency based in the Czech Republic, founded in 2005. The company focuses on creating meaningful connections between brands and consumers through creativity, innovation, and media. The website reflects a professional and consistent brand image, targeting primarily businesses and marketing professionals. Technically, the site is built on WordPress with modern plugins and analytics tools, hosted via Gandi, and optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS, cookie consent, and bot management, though explicit security policies and incident response contacts are not published. Overall, the domain registration data supports the legitimacy and stability of the business.

E

Economia, a.s.

economia.cz

45

Economia, a.s. is a prominent Czech media company dedicated to delivering high-quality journalism and valuable content. The company operates multiple media titles including daily print and online products, complemented by advisory and marketing services. It holds a notable position in the Czech media landscape, evidenced by its Journalism Trust Initiative certification, reflecting its commitment to transparency and professional journalism. The website targets business owners, top management, public administration, and informed citizens interested in comprehensive public affairs coverage. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates advanced SEO and consent management tools, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs a robust consent management platform, though it lacks some advanced security headers and explicit security policies. Overall, the site is professional, GDPR compliant, and trustworthy, with clear contact information and social media presence. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

E

Eternal s.r.o.

eternal.cz

42

Eternal s.r.o. is a Czech technology company specializing in the development of mobile applications and web portals, with over 10 years of experience. The company serves a diverse clientele including municipalities, universities, and insurance companies, offering services such as mobile app development, interior navigation solutions, and data analysis. Their website reflects a professional and consistent brand image, targeting businesses and organizations seeking custom software solutions. Technically, the site is built on WordPress with Bootstrap and integrates modern tools like Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security measures include HTTPS enforcement and spam protection, though the absence of security headers and privacy policies suggests room for improvement. The missing WHOIS data introduces some uncertainty regarding domain legitimacy, but the overall business presentation and contact transparency support a credible profile. Strategic recommendations include enhancing compliance documentation, improving security headers, and verifying domain registration details to strengthen trust and security posture.

A

Asociace muzeí a galerií České republiky, z. s.

cz-museums.cz

48

Asociace muzeí a galerií České republiky (AMG) is a prominent non-profit professional association dedicated to museums and galleries in the Czech Republic. It serves as the largest professional body in the museology sector, providing services such as promotion, education, event organization, and publishing. The website reflects a well-maintained digital presence with clear navigation and regularly updated content, targeting museum professionals and cultural institutions. Technically, the site employs modern JavaScript libraries and frameworks including jQuery, Bootstrap, and JSF, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks explicit security headers and privacy policies, which are recommended for enhanced compliance and protection. Overall, the website is trustworthy and professional, though improvements in privacy disclosures and security hardening would strengthen its posture.

S

Státní fond životního prostředí ČR

sfzp.cz

67

Státní fond životního prostředí ČR is a Czech government fund established in 1992 to support environmental projects through grants, loans, and financial instruments. The website serves as an official portal providing information on funding programs, news, events, and contact details. It targets Czech residents, municipalities, and organizations involved in environmental protection and energy efficiency. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Smart Slider 3. It implements HTTPS and security best practices, including cookie consent and privacy policies compliant with GDPR. However, the absence of WHOIS data and explicit security or incident response policies slightly reduces trustworthiness. Overall, the site is professional, well-structured, and trustworthy, serving as a key national resource for environmental funding in the Czech Republic.

S

Správa jeskyní České republiky

caves.cz

63

Správa jeskyní České republiky is the official governmental entity responsible for managing and promoting caves in the Czech Republic. The website provides comprehensive visitor information, educational resources, online ticketing, and event services. It serves a broad audience including tourists, schools, and researchers, positioning itself as the authoritative source for cave-related activities and conservation in the country. The site is well-branded and consistent with government standards, featuring multiple language options and partner affiliations with recognized organizations. Technically, the website is built on Drupal 10 with modern frameworks like Bootstrap and jQuery UI, ensuring good mobile responsiveness and accessibility. The site loads at a moderate speed and includes SEO best practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual but may be due to CZ NIC policies. Despite this, the website's content, official contact information, and partner links strongly indicate legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant. No incident response or vulnerability disclosure information is published, which could be improved. Overall, the website is professional, trustworthy, and serves its governmental and public service role effectively. Strategic improvements in security headers and transparency around incident response would enhance its security posture further.