Security Directory

Signály.cz is a Czech non-profit ecumenical community platform providing spiritual content, blogs, videos, and event information to a broad audience interested in Christian dialogue and education. The website offers user registration, community forums, and multimedia content, positioning itself as a well-established community hub since 2007. Technically, the site uses modern web technologies including jQuery, Bootstrap, and OAuth integrations for login, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and secure login forms, though the absence of security headers and cookie consent mechanisms indicate areas for improvement. The lack of WHOIS data reduces domain trustworthiness, but the active social media presence and comprehensive privacy policies support legitimacy. Overall, the site is professional, content-rich, and safe for general audiences.

K

KOUDELKA DESIGN s.r.o.

koudelkadesign.cz

47

KOUDELKA DESIGN s.r.o. is a small Czech company specializing in the production of advertising materials. The website presents a professional design using the WordPress platform with the Divi theme, targeting businesses seeking advertising production services. The technical infrastructure includes modern web technologies such as jQuery, Google reCAPTCHA for bot protection, and Google Analytics for visitor tracking. The site is mobile-optimized and provides a moderate level of performance and SEO optimization. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and explicit security policies. Privacy compliance is partially addressed through a cookie consent mechanism, but no explicit privacy or terms of service pages were found. Overall, the website is accessible, safe, and moderately trustworthy, with room for improvement in security and compliance documentation.

K

KOUDELKA DESIGN s.r.o.

kp-design.cz

44

KOUDELKA DESIGN s.r.o. is a small Czech company specializing in advertising production services. The website presents a professional design using WordPress with the Divi theme, targeting businesses seeking advertising solutions. The technical infrastructure includes modern web technologies such as jQuery, Google reCAPTCHA for bot protection, and Google Analytics for visitor tracking. The site is mobile optimized and performs moderately well. Security posture is adequate with HTTPS enabled and reCAPTCHA in use, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is functional and professional but could improve transparency and security documentation.

S

STI Group

sti-group.com

54

STI Group is a large, Germany-based manufacturer specializing in sustainable packaging and point-of-sale display solutions. The company emphasizes innovation and environmental responsibility, offering fiber-based, plastic-free packaging for food and non-food products. Their market position is strong, supported by multiple certifications and awards, and they operate multiple production sites across Europe and Asia Pacific. Technically, the website is built on TYPO3 CMS with modern frontend libraries and includes comprehensive cookie consent and privacy management, reflecting good digital maturity. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, user-friendly, and trustworthy, but the lack of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy.

K

KIT-AR

kit-ar.com

59

KIT-AR is a specialized technology company providing augmented reality solutions for quality assurance in manufacturing environments. Their platform aims to reduce costs and errors on the shopfloor by digitizing quality assurance processes and upskilling workers. The company targets manufacturing sectors such as automotive, aerospace, and electronics, positioning itself as a niche B2B provider with a focus on continuous improvement and digital transformation. The website presents professional branding, case studies with reputable clients, and clear calls to action, indicating a mature business presence. Technically, the website is built on WordPress using modern plugins and frameworks such as Genesis Framework, Slider Revolution, and Yoast SEO. It employs Google reCAPTCHA for form security and Matomo for privacy-conscious analytics. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements anti-bot measures but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies were found, representing a compliance gap with GDPR and other privacy regulations. Contact information is clearly provided, but no formal security or incident response policies are published. Overall, KIT-AR's website reflects a credible and professional business with solid technical foundations but could improve its privacy compliance and security posture. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing a vulnerability disclosure process.

D

DT - Výhybkárna a strojírna, a.s.

dtvs.cz

48

DT - Výhybkárna a strojírna, a.s. is a traditional Czech manufacturer specializing in the development, construction, production, assembly, and regeneration of railway and tramway switch components. With decades of experience, the company serves both domestic and international markets, including metro systems. Their business model focuses on manufacturing and servicing railway infrastructure components, supported by a subsidiary in Slovakia. The website reflects a professional and consistent brand image targeting transportation infrastructure clients. Technically, the website employs a moderately modern technology stack including Bootstrap, jQuery, and Google services such as Analytics and reCAPTCHA. The site is mobile-optimized and includes a comprehensive cookie consent mechanism ensuring GDPR compliance. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA for form protection. However, it lacks explicit security headers and does not provide visible incident response or security policy information. The WHOIS data is unavailable, likely due to privacy protection, but the website content and contact details support legitimacy. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a trustworthy and professional digital presence suitable for its industry. Strategic improvements in security headers, updated libraries, and enhanced accessibility would further strengthen its posture.

C

Charita Česká republika

daranek.cz

54

Daránek dětem is a charitable initiative managed by Charita Česká republika, focused on supporting children in vulnerable situations through fundraising and social support. The website serves as a platform for donations, awareness, and partnership engagement, positioning itself as a trusted national charity. Technically, the site employs modern web technologies including Google reCAPTCHA for form security, Facebook Pixel and Google Analytics for tracking, and a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized with good design and navigation, though some security headers are not explicitly detected. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, but the presence of official charity information and partner references supports trustworthiness. Overall, the site demonstrates a solid security posture with room for improvement in explicit security header implementation and transparency around incident response.

D

Dassault Aviation

dassault-aviation.com

76

Dassault Aviation is a leading French aerospace company specializing in the design, manufacture, and support of combat aircraft and business jets, including renowned brands such as Rafale, Falcon, and nEUROn. The company holds a strong market position as a major player in aeronautics with a global presence and a history dating back to 1916. The website reflects a mature digital presence with comprehensive content tailored to industry professionals, customers, and enthusiasts. Technically, the site is built on WordPress with modern analytics and tracking tools, optimized for performance and accessibility. Security posture is robust with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. Overall, the domain appears legitimate despite WHOIS privacy protection, consistent with the company's stature and security needs.

A

Agence Web Marketing

poush.be

52

Agence Web Marketing, operating under the brand 'Poush', is a Belgian digital marketing agency specializing in custom WordPress website creation, SEO, digital strategy, and AI integration. The company positions itself as a growth partner for businesses seeking to enhance their online presence and conversion rates. Their service portfolio includes audits, site creation, SEO, marketing, AI services, and training. Technically, the website is built on WordPress with modern plugins and tracking tools, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent, and anti-bot measures, though some security headers could be improved. The domain WHOIS data is restricted, which is common but reduces transparency. Overall, the site is professional, compliant with GDPR, and trustworthy, with no signs of malicious activity or adult content.

N

Nové Město na Moravě

nmnm.cz

54

The website www.nmnm.cz serves as the official online presence of the town Nové Město na Moravě, providing comprehensive information about municipal services, cultural events, education, social services, tourism, and local news. It is well-structured with multiple subdomains dedicated to specific sectors, indicating a mature digital infrastructure supporting diverse community needs. The site employs modern web technologies including WordPress CMS, Yoast SEO, and various analytics and marketing tools, all integrated with a robust cookie consent mechanism to ensure GDPR compliance. Security posture is strong with HTTPS enforced and security headers present, although explicit security policies and incident response contacts are not prominently disclosed. The absence of WHOIS registration data is a notable gap, reducing domain trustworthiness despite the professional and official nature of the site. Overall, the site is a reliable and authoritative resource for residents and visitors, with good technical and privacy practices but room for improvement in transparency of security governance.

R

Rodie & Rodie

rodieandrodie.com

57

Rodie & Rodie is a small legal services firm specializing in personal injury and car accident law, operating primarily in the United States. The firm emphasizes over 30 years of experience and offers free consultations with a no-fee-until-win policy, targeting individuals seeking legal representation for injury cases. The website is professionally designed using WordPress with modern plugins and integrates Google Tag Manager and reCAPTCHA for analytics and security. While the technical infrastructure is solid with HTTPS and common WordPress technologies, there is room for improvement in privacy compliance and security headers. No privacy or cookie policies were found, which may pose compliance risks. Overall, the site presents a trustworthy and professional image but should enhance privacy and security disclosures to strengthen compliance and user trust.

U

Unifiedpost Group

unifiedpostgroup.com

68

Unifiedpost Group is a global leader in digital financial solutions, specializing in automating and digitalizing invoicing, payments, and tax compliance processes for businesses and governments worldwide. Their platform supports compliance in over 60 countries and offers services including e-invoicing, procure-to-pay, order-to-cash, and e-reporting. The company positions itself as a trusted partner enabling seamless and compliant business transactions on a global scale. Technically, the website is built on Webflow CMS with integrations such as Google Tag Manager, Google reCAPTCHA, and Weglot for multilingual support. The site is well-optimized for performance, mobile responsiveness, and SEO, with a professional design and clear navigation. Security measures include HTTPS enforcement and spam protection on forms, though explicit security headers and incident response information are not evident. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS data and lack of published incident response contacts slightly reduce trustworthiness. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature, professional business with strong digital presence and compliance focus. However, the missing WHOIS data and limited security policy disclosures suggest areas for improvement in transparency and security communication.

Т

Товариство з обмеженою відповідальністю «ВІЖН 4»

biguditv.com

53

Bigudi.tv is the official website of the Ukrainian television channel 'Бігуді', offering online streaming of TV shows, serials, and live broadcasts in HD quality. The platform targets Ukrainian-speaking audiences interested in entertainment and family-friendly content. It operates under the media umbrella of Internet Invest, Ltd., with a clear business model focused on content delivery and advertising revenue. The website integrates video content from the 1plus1.video platform, indicating a strong partnership within the media group ecosystem. Technically, the site employs modern web technologies including jQuery, Owl Carousel, Google Tag Manager, and Google Analytics, ensuring a responsive and engaging user experience across devices. The hosting and domain registration are consistent with the business's Ukrainian origin and media focus. Security-wise, the site uses HTTPS with a valid SSL certificate and implements CSRF tokens and Google reCAPTCHA for form protection. However, it lacks advanced security headers and a published security policy or incident response plan, which are areas for improvement. Privacy compliance is partial; while a privacy policy is present, there is no visible cookie consent mechanism, which may pose GDPR compliance risks. Overall, the site is professionally designed, trustworthy, and well-positioned in its market segment, but could enhance its security and privacy posture to align with best practices.

C

CERTISYS

certisys.eu

51

CERTISYS is a well-established certification body specializing in organic and sustainable certifications primarily serving Belgium and Luxembourg. As a subsidiary of the global Ecocert Group, it leverages international networks to provide access to multiple organic certification schemes and markets. The website demonstrates a mature digital presence with multilingual support, comprehensive content, and integration of modern web technologies including WordPress, Bootstrap, and privacy-focused analytics (Matomo). Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS registrant data is due to EURid privacy policies and does not detract from the business legitimacy given the strong brand and parent company affiliation. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

S

SIA ABC idea

abcidea.lv

47

SIA ABC idea is a Latvian IT company established in 2010, specializing in custom business software solutions and SaaS products such as Tavirekini.lv for online invoicing and Mitto Events for event management. The company targets businesses and event organizers, offering tailored IT consulting and software development services. Their market position is that of a trusted local provider with a consistent brand and a portfolio of reputable clients. Technically, the website uses modern web technologies including jQuery, Font Awesome, Google Fonts, and integrates Google Analytics and reCAPTCHA for tracking and security. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and headers. Overall, the website is professional, trustworthy, and compliant with GDPR cookie requirements. WHOIS data confirms domain legitimacy and consistency with business claims.

FLEX Cloud is a Latvian-based cloud service provider specializing in flexible private cloud solutions tailored for business digital development scenarios. The company offers a range of cloud services including virtual machines, Kubernetes, managed databases, and private cloud deployments built on the OpenStack platform. Their market position is focused on regional businesses requiring secure, scalable, and cost-effective IT infrastructure with local data center presence in Latvia and a point of presence in Norway. The website demonstrates a professional digital presence with detailed service tiers, customer case studies, and testimonials, indicating a mature business model supported by the parent company DATI Group. Technically, the site uses modern web technologies such as Jekyll, Google Tag Manager, and reCAPTCHA, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS and form protections, though improvements in security headers and explicit cookie consent mechanisms are recommended. The absence of WHOIS registration data raises concerns about domain legitimacy, but the operational website and business information mitigate immediate risk. Overall, FLEX Cloud presents as a credible, professional cloud service provider with room for enhanced privacy and security transparency.

T

T-MAPY spol. s r.o.

tmapserver.cz

55

T-MAPY spol. s r.o. is a Czech company specializing in geoinformation technologies and solutions primarily serving public administration, emergency services, transportation, and commercial sectors. With over two decades of market presence, the company offers a range of GIS applications, digital technical mapping, facility management, asset management, crime analytics, and smart city solutions. Their website reflects a professional and consistent brand image targeting municipalities, government bodies, and commercial clients. Technically, the site is built on WordPress with modern plugins and SEO tools, though some performance and security header improvements are possible. Security posture is solid with HTTPS and CAPTCHA usage, but lacks some advanced headers and explicit privacy compliance mechanisms. WHOIS data is unavailable, which slightly impacts trust from a domain registration perspective but does not detract from the company's evident legitimacy and market position. Overall, the website is well-designed, content-rich, and trustworthy for its intended audience.

F

Filmondo

filmondo.cz

52

Filmondo is a Czech creative studio specializing in video marketing and related services such as aerial drone photography, animation, photography, training, virtual tours, live streaming, and equipment rental. The company positions itself as a specialist with over seven years of experience and a substantial portfolio of references, targeting businesses and organizations seeking to enhance their brand through video content. The website is built on WordPress and employs modern web technologies including jQuery, Bootstrap, and various JavaScript libraries, with Google Analytics and Tag Manager integrated for user tracking. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and visible privacy or cookie policies. The absence of WHOIS data reduces domain registration trustworthiness, but the website content and client testimonials indicate a legitimate and professional business. Overall, the site is well-designed, user-friendly, and content-rich, though improvements in privacy compliance and security headers are recommended.

M

MAMIBIKE

mamibike.cz

56

MAMIBIKE is a Czech company specializing in the manufacture, sale, and rental of sport electric scooters. The website presents a professional and well-structured platform targeting consumers interested in electric scooters, primarily within the Czech Republic. Key services include product sales through an e-shop, rental offerings, and technical servicing. The company appears to be a niche player with a focus on quality and customer support, supported by active social media channels and clear contact information. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, leveraging modern JavaScript libraries such as jQuery and UIkit for UI components. SEO is enhanced by Yoast SEO plugin and structured data (JSON-LD) is implemented for better search engine understanding. The site uses HTTPS with Google reCAPTCHA for form security and a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and anti-bot measures in place; however, the absence of security headers and explicit privacy/security policies suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. The missing WHOIS data is a concern for domain legitimacy verification but does not negate the apparent professionalism of the site. Overall, the website is safe, well-designed, and functional with a moderate risk profile primarily due to incomplete domain registration transparency and some security best practices gaps. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and verifying domain registration details to improve trustworthiness.

A

Artfood Traiteur

artfood.be

53

Artfood Traiteur is a small hospitality business specializing in organic and sustainable event catering services based in Brussels, Belgium. The company targets both professional and private clients, offering bespoke catering for weddings, corporate events, and private parties with a strong emphasis on environmental responsibility and quality gastronomy. The website reflects a professional and consistent brand image supported by multiple recognized sustainability certifications. Technically, the site is built on WordPress using modern frameworks like Bootstrap and integrates Google Analytics, Tag Manager, and reCAPTCHA for analytics and security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers and formal security policies are absent. The WHOIS data is restricted by the registry, which is common for privacy protection and justified for this business type. Overall, the website is trustworthy, well-structured, and compliant with privacy norms, though it lacks explicit privacy and terms of service pages.

V

VR Cars

vrcars.eu

55

VR Cars is a specialized Latvian company focused on designing and manufacturing the VR FOX military vehicle, tailored for special forces and intelligence service needs. The company leverages extensive experience in suspension engineering and racing car development to deliver a niche product with advanced off-road capabilities and compliance with NATO standards. Their digital presence includes a professional website with multimedia content and active social media channels, supporting their market positioning as a small but innovative manufacturer in the defense transportation sector. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Swiper, and AOS, with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and uses Google Recaptcha for form protection, but lacks visible HTTP security headers and explicit security or incident response policies. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and a consent mechanism aligned with GDPR requirements. Overall, the website presents a moderate security posture and good business credibility, though improvements in security headers and transparency policies are recommended.

B

Belss

belss.lv

61

Belss is a well-established military and telecommunications integrator based in Latvia, with over 30 years of experience serving the Baltic region. The company specializes in defense communications, design and construction, and has recently expanded into military drone manufacturing through its startup ERASER. The website reflects a professional and consistent brand image, targeting military and government clients with a clear focus on innovative solutions and partnerships with recognized industry players. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good SEO, mobile optimization, and user experience. Security measures include HTTPS, cookie consent management, and reCAPTCHA, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a strong security posture and compliance with GDPR, but could improve transparency on security policies and direct contact information. The domain registration data aligns well with the company's history and legitimacy, supporting a high trust score.

O

openthebox

openthebox.be

71

openthebox is a mature Belgian B2B SaaS company founded in 1997, specializing in providing comprehensive, GDPR-compliant business data and insights on over 3 million Belgian companies. Their platform targets professionals in private equity, banking, and M&A, offering a unified dashboard with financial data, management information, and news to accelerate investment decisions. The company positions itself as a leading source for private market data in Belgium, emphasizing speed, accuracy, and compliance. Technically, the website is built on Webflow with integrations including Google Tag Manager, Microsoft Clarity, and Didomi for consent management, reflecting a modern and well-maintained digital infrastructure. Security posture is strong with HTTPS, domain transfer protection, and use of reCAPTCHA, though there is room for improvement in security headers and formal security policies. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience.

M

Město Hodonín

hodonin.eu

48

The website hodonin.eu serves as the official digital portal for the city of Hodonín, Czech Republic. It provides comprehensive municipal information, including news, public notices, online services, social and educational resources, and tourism information. The site targets residents and visitors, offering practical tools and updates relevant to the local community. The business model is that of a government municipal service platform, positioning itself as the authoritative source for city-related information and services. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google Analytics for visitor insights and Google reCAPTCHA for form security. The presence of a chatbot hosted on Azure indicates a moderate level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms. Cookie consent mechanisms are in place, reflecting GDPR compliance. However, explicit security headers like Content-Security-Policy or X-Frame-Options are not evident, and there is no published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the content. Overall, hodonin.eu is a trustworthy and professional municipal website with good content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and trustworthiness.

S

Sight Sciences

sightsciences.com

69

Sight Sciences is a healthcare technology company specializing in providing eyecare providers with innovative, clinically-proven therapies that are intuitive, less invasive, and more intelligent. The company positions itself as a provider of transformative eyecare solutions, targeting medical professionals in the ophthalmology sector. The website reflects a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and accessibility features. The technical infrastructure includes Google Analytics and Tag Manager for analytics, reCAPTCHA for form security, and a cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not publicly available. The WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the website content and technical setup suggest a legitimate business. Overall, the site is well-designed, accessible, and compliant with privacy regulations, serving a specialized healthcare audience.

Т

Товариство з обмеженою відповідальністю "УНІАН ТБ"

plus-plus.tv

56

The website plus-plus.tv/1plus1video is the official online video portal for the Ukrainian children's TV channel ПЛЮСПЛЮС, operated by ТОВ "УНІАН ТБ". It offers streaming of children’s cartoons and family-friendly content in HD quality, targeting primarily children and families in Ukraine. The business is positioned as a recognized media entity with a strong online presence supported by multiple partner TV channels and media brands. The domain is mature and registered consistently with the business identity. Technically, the site uses a modern JavaScript stack with integrations for Google Analytics, Facebook SDK, Gemius analytics, and ad serving via DoubleClick and Adtelligent. The site is mobile optimized with good SEO and basic accessibility features. Hosting and domain registration are transparent, though DNSSEC is not enabled. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and does not expose sensitive data. However, it lacks a cookie consent mechanism and explicit security or incident response policies, which are areas for improvement. The WHOIS data aligns well with the website’s claims, supporting legitimacy. Overall, the site is safe, professional, and trustworthy with a good content offering for its audience. Strategic recommendations include enhancing privacy compliance with cookie consent, enabling DNSSEC, publishing security policies, and improving accessibility to strengthen security posture and user trust.

E

Erwin Hymer Group

erwinhymergroup.com

71

Erwin Hymer Group is a large, established company specializing in leisure and mobility experiences, primarily through manufacturing and distributing leisure vehicles and related services. The website reflects a professional digital presence with a clear focus on its 24 brands and services such as rental, finance, and service. The company targets consumers interested in camping and mobility solutions, positioning itself strongly in the transportation and leisure sector in Germany. Technically, the website uses modern tools including Pimcore CMS, Google Analytics, Google Tag Manager, and Cookiebot for compliance, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are lacking. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR-aligned cookie consent. However, the absence of WHOIS data and explicit contact information slightly reduces overall trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility and contact transparency to further strengthen security and compliance. Overall, the website is professional, secure, and compliant with privacy regulations, suitable for its business domain.

C

Centrum Psí ostrov z. s.

docasky.cz

44

Centrum Psí ostrov z. s. is a Czech non-profit organization dedicated to providing temporary care and adoption services for abandoned dogs. The organization actively engages in public awareness and fundraising activities, leveraging social media and donation platforms to support its mission. The website serves as a portal for adoption listings, virtual adoptions, and information about becoming a temporary caregiver. Technically, the site is built on Joomla! CMS with modern JavaScript libraries such as jQuery, Bootstrap, and UIkit, and integrates Google Analytics and Facebook SDK for analytics and social engagement. Security posture is solid with HTTPS and bot protection via reCAPTCHA, though it lacks some security headers and formal privacy/cookie policies. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and transparency.

Mediafin is a prominent Belgian media company specializing in business journalism and related services. Their portfolio includes well-known brands such as De Tijd and L’Echo, targeting business professionals and investors. The company also offers data platforms, PR, advertising, and podcast services, positioning itself as a comprehensive media and communication provider in Belgium. The website reflects a mature digital presence with modern technologies and strong GDPR compliance, including a cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. The domain WHOIS data is restricted, which is common for media companies, but the website's professionalism and transparency in privacy practices support its legitimacy. Overall, Mediafin demonstrates a strong market position and digital maturity with room for improvement in security transparency and direct contact information.

A

American Society of Ophthalmic Administrators

asoa.org

61

The American Society of Ophthalmic Administrators (ASOA) is a professional association dedicated to empowering ophthalmic leaders and administrators through education, resources, certification programs, and community engagement. Founded in 1986, ASOA serves a niche market within the healthcare sector, focusing on the business and administrative aspects of ophthalmology practices. The website reflects a mature organization with a clear mission and a broad range of member services including career advancement, practice resources, and advocacy support. Technically, the website is built on a modern CMS platform (Sitecore) and employs a variety of contemporary web technologies such as Google Analytics, Google Tag Manager, reCAPTCHA, and Coveo search integration. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. Security measures include HTTPS enforcement and cookie consent management, although explicit security headers and a dedicated security policy page are absent. From a security perspective, the site demonstrates good practices but could improve transparency by publishing a security policy, incident response contacts, and vulnerability disclosure information. The lack of WHOIS data due to privacy protection is common for non-profit organizations and does not significantly detract from the site's legitimacy. Overall, the site presents a trustworthy and professional front with moderate risk. Strategically, ASOA should enhance its security posture by implementing recommended headers and policies, improve privacy compliance disclosures, and consider publishing a security.txt file to facilitate responsible vulnerability reporting. These steps will strengthen trust and align with best practices for professional associations in healthcare.

C

CentralApp

centralapp.com

69

CentralApp is a technology company providing an all-in-one marketing platform focused on local businesses in Europe. Their services include website creation, local SEO, online reputation management, and QR code menus, targeting sectors such as hospitality, retail, and professional services. The company is positioned as a trusted provider with over 3000 business clients and partnerships with notable organizations like Google and BNP-Paribas. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a strong market presence. Technically, the website employs modern web technologies including Google Analytics, reCAPTCHA, Mixpanel, and Intercom for analytics and user engagement. The site is fast, accessible, and SEO-optimized, though no CMS or hosting provider details are explicitly identified. Security practices include HTTPS enforcement and bot protection, but lack visible security headers and explicit cookie consent mechanisms, which are recommended for enhanced compliance and security. The security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness. Privacy and terms of service policies are present and comprehensive, but incident response and security policy information are missing. Overall, the website is low risk but would benefit from improved transparency and security hardening. Strategic recommendations include verifying domain registration details, implementing security headers, adding cookie consent for GDPR compliance, and publishing incident response policies to strengthen trust and compliance. These steps will enhance the company's security posture and business credibility in the competitive SaaS marketing platform space.

Základní škola a Mateřská škola Luka nad Jihlavou is a small public educational institution serving primary and nursery education needs for Luka nad Jihlavou and surrounding villages in the Czech Republic. The website provides comprehensive information about the school, its classes, extracurricular activities, and administrative contacts, targeting students, parents, and the local community. The institution positions itself as a key local educational provider with modern facilities and a supportive environment. Technically, the website is built on a custom CMS platform (IPO Redakční systém) using jQuery and jQuery UI libraries, with integration of Google reCAPTCHA and Matomo analytics for user tracking. The site is mobile responsive and implements cookie consent mechanisms, reflecting a moderate level of digital maturity. Performance is moderate, with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers and published security policies or incident response contacts. The absence of WHOIS registration data is a notable anomaly, potentially indicating domain registration issues or privacy protection, which slightly reduces trustworthiness. Overall, the security posture is adequate but could be improved with better header configurations and transparency. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include enhancing security headers, publishing security and incident response policies, improving accessibility compliance, and clarifying domain registration status to strengthen trust and compliance.

K

Knoflíky Žirovnice a.s.

knofliky.cz

48

Knoflíky Žirovnice a.s. is a well-established Czech manufacturing company specializing in buttons and related accessories for the fashion and clothing industry, with a history dating back to 1863. The company positions itself as one of the largest Czech producers in its niche, offering design, custom production, lacquering, and haberdashery services. The website reflects a professional and consistent brand image targeting manufacturers, fashion businesses, and small sewing workshops. Technically, the site is built on WordPress with WooCommerce and Elementor, employing modern web technologies and ensuring mobile responsiveness and good SEO practices. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanisms. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear credible and trustworthy overall.

A

Agrokompas

agroserver.cz

42

Agrokompas.cz is a Czech Republic-based agricultural information portal specializing in real-time commodity prices, agricultural news, and market reports. The website targets agricultural professionals, commodity traders, and farmers seeking up-to-date market data and personalized reporting services. The business operates as a small-sized entity focused on providing niche market data and news services within the agricultural sector. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google services, offering a responsive and user-friendly experience. Security measures include HTTPS and Google reCAPTCHA integration, alongside a cookie consent mechanism, though explicit security headers and detailed security policies are absent. The WHOIS data is unavailable, which limits domain trust assessment, but the website's professional content and contact information mitigate some concerns. Overall, the site demonstrates moderate digital maturity with room for improvement in security and compliance documentation.

S

Sdružení obcí Vysočiny

obcevysociny.cz

52

Sdružení obcí Vysočiny is a Czech non-profit association representing municipalities in the Vysočina region, focusing on regional development, infrastructure, agriculture, tourism, and social services. The website reflects a well-established organization with 25 years of history, providing consulting and support services to its members. The digital infrastructure is modern, leveraging Bootstrap, jQuery, and Google services, with good mobile optimization and accessibility. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers are missing. Privacy compliance is addressed with a cookie consent banner and GDPR page. The absence of WHOIS data reduces domain trust but the website content and partner affiliations support legitimacy.

M

Město Třešť

trest.cz

48

Město Třešť operates an official municipal website serving as the primary digital portal for residents, visitors, and stakeholders. The site provides comprehensive information about the town, local government services, social and educational offerings, cultural events, and tourism. It targets local citizens and tourists, supporting community engagement and public service delivery. The business model is typical for a government entity, focusing on transparency and accessibility rather than commercial revenue. The domain's long-standing registration since 1999 supports its legitimacy and established presence. Technically, the website uses a traditional HTML/CSS/JavaScript stack with the Vismo CMS platform. It integrates Google services such as reCAPTCHA for form security and Google Translate for multilingual support. The site demonstrates moderate performance and good mobile optimization but could improve accessibility and SEO features. Hosting and domain registration are consistent with a Czech municipal entity. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, which is positive. However, it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is basic, with a privacy policy and cookie information present but no active consent mechanism. No critical vulnerabilities or suspicious content were detected, and the site is accessible without WAF blocking. Overall, the website is a trustworthy, well-maintained municipal portal with good business credibility and moderate technical sophistication. Strategic improvements in security headers, privacy consent, and accessibility would enhance its posture. The risk level is low, but ongoing attention to security best practices is recommended.

M

Městys Stonařov

stonarov.cz

50

Městys Stonařov operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information including government notices, local news, event calendars, and contact channels for residents and visitors. It positions itself as a trusted source for local governance and community engagement. Technically, the website is built on the Vismo CMS platform, leveraging standard web technologies such as HTML5, CSS3, and JavaScript, with integrations like Google reCAPTCHA for form security and Google Translate for accessibility. The site is secured with HTTPS and shows moderate performance and basic mobile optimization. Security posture is adequate with encrypted connections and anti-bot measures, though it lacks advanced security headers and explicit incident response or security policies. Privacy compliance is partially addressed with linked privacy and cookie policies but lacks active consent mechanisms. Overall, the website demonstrates a solid business credibility and trustworthy presence consistent with a small government entity.

M

Městys Luka nad Jihlavou

lukanadjihlavou.cz

51

Městys Luka nad Jihlavou operates an official municipal website serving the local community and visitors by providing essential information about local governance, services, events, and contact details. The website is well-structured, primarily in Czech, and includes official social media channels, public notices, and an event calendar. The business model is focused on government transparency and citizen engagement, positioning it as a trusted local government portal. Technically, the site uses a CMS platform (Vismo), modern web standards, and integrates Google services such as reCAPTCHA and Translate to enhance usability and security. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and spam protection on forms, though some security headers are missing and no explicit incident response contacts are provided. Overall, the site is legitimate, trustworthy, and serves its intended audience effectively.

O

Obec Suchá

obecsucha.cz

51

The website obecsucha.cz serves as the official online presence for the municipality of Suchá in the Jihlava district of the Czech Republic. It provides residents and visitors with access to local government information, public notices, contact details, event calendars, and community updates. The site is clearly targeted at local citizens and government officials, offering essential municipal services and information in Czech language with some translation support via Google Translate. The business model is that of a government information portal, with no commercial activities. The domain age and WHOIS data confirm legitimacy and consistency with the municipal nature of the site. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google reCAPTCHA for form security and Google Translate for language accessibility. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. However, there is room for improvement in modern security practices, including the implementation of security headers and enhanced cookie consent mechanisms. From a security perspective, the site benefits from HTTPS encryption and uses reCAPTCHA to protect its contact form from spam and abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response information, and security headers suggests a moderate security posture. Privacy compliance is basic but present, with GDPR-related information available. Overall, the site demonstrates a reasonable level of security for a small municipal website but could enhance its posture with additional measures. The overall risk assessment is low, given the nature of the site and its content. Strategic recommendations include implementing security headers, enhancing privacy and cookie consent mechanisms, publishing clear security and incident response policies, and maintaining regular audits of third-party scripts. These steps will improve trust, compliance, and resilience against potential threats.

M

Město Polná

mesto-polna.cz

44

The website mesto-polna.cz serves as the official online portal for the town of Polná, Czech Republic. It provides residents and visitors with municipal news, official documents, event calendars, and contact information. The site is positioned as a local government service platform, targeting the community and stakeholders of Polná. The business model is governmental, focusing on public service and information dissemination. The website content is well-structured, professionally presented, and consistent with the town's branding and identity. Technically, the site uses a specialized CMS (Vismo) tailored for municipal websites, leveraging standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for multilingual support. The site is mobile-optimized and accessible, with good SEO practices. Performance is moderate, with no significant technical debt or outdated components detected. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms from abuse. However, it lacks explicit security headers such as Content Security Policy or HSTS, and does not provide a dedicated security policy or incident response contact. Privacy and cookie policies are present but lack active consent mechanisms. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is trustworthy, safe, and professionally maintained, suitable for its governmental purpose. Strategic improvements in security headers, privacy consent, and incident response transparency would enhance its security posture and compliance. The domain registration data aligns well with the website's official nature, supporting its legitimacy and long-standing presence since 2001.

C

Corky's BBQ

corkysbbq.com

60

Corky's BBQ is a regional restaurant chain specializing in Memphis-style BBQ and ribs, offering dine-in services across multiple locations, online ordering for delivery and pickup, nationwide shipping of BBQ products, and catering services including private party rooms. The website reflects a well-established business with a consistent brand presence and active social media engagement. Technically, the site uses a modern technology stack including Umbraco CMS, JavaScript libraries, Braintree payment gateway, and analytics tools such as Google Analytics and Microsoft Application Insights. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable, which reduces domain trustworthiness and suggests further verification is needed. Overall, the website is professional and trustworthy but could improve in transparency and security documentation.

E

equal.brussels

equal.brussels

46

equal.brussels is an official regional public service platform dedicated to promoting equality of opportunity and combating discrimination in the Brussels-Capital Region. The website serves as an information hub presenting the organization's missions, campaigns, and resources aimed at various social themes including gender, handicap, LGBTQIA+, racism, and gender-based violence. The platform targets citizens, stakeholders, and public policy makers interested in inclusive policies and social justice. Technically, the website is built on WordPress with modern frameworks such as Elementor and Bootstrap, ensuring a responsive and accessible user experience. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and GDPR-compliant cookie consent mechanisms, although explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates a strong security posture and high content quality, reflecting its role as a trusted government entity.

I

Iridex Corporation

pascalvision.com

46

Pascal Synthesis is a healthcare-focused company specializing in advanced ophthalmic laser technology, offering the PASCAL Synthesis System designed to improve retinal laser treatments. The company targets ophthalmologists and retinal specialists, positioning itself as an innovator with nearly a decade of market presence. The website is built on WordPress with modern technologies such as Bootstrap and integrates Google Analytics and reCAPTCHA for tracking and security. While the site is professional and content-rich, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the domain registration is consistent and legitimate, supporting the business credibility.

C

COMO

coworking-most.cz

46

Coworking Most (COMO) is a coworking center located in the city of Most, Czech Republic, offering flexible and fully equipped workspaces for freelancers, companies, and teams. The business emphasizes community building, professional development workshops, and networking events, positioning itself as a local hub for business growth and collaboration. The website is professionally designed with clear navigation, responsive layout, and comprehensive information about pricing plans, events, and contact options. The business is supported by the statutory city of Most, enhancing its credibility and local market presence. Technically, the website employs modern frontend technologies including Tailwind CSS for styling, Alpine.js for interactivity, Swiper.js for carousels, and Google reCAPTCHA for form security. The hosting is provided by WEDOS, a known Czech hosting provider. Performance optimizations such as deferred loading of non-critical CSS and scripts are implemented, contributing to fast load times and good mobile optimization. SEO and accessibility considerations are evident, with proper meta tags, font preloading, and ARIA attributes. From a security perspective, the site uses HTTPS and includes anti-spam measures on its contact form. However, explicit security headers are not detected, and there is no published security policy or incident response information. Privacy compliance is addressed with a GDPR-compliant privacy policy, but no cookie consent mechanism is present. The WHOIS data is consistent and transparent, with no privacy protection, and the domain age aligns with the business's recent establishment in 2022. Overall, Coworking Most presents a trustworthy and professional online presence with strong business credibility and technical maturity. Security posture is adequate but could be improved by adding security headers and formal policies. Privacy compliance is good but could benefit from a cookie policy and consent mechanism. The website is safe for general audiences and free from adult or questionable content.

INA Loyalty is a loyalty program website associated with INA, a Croatian energy company. The site serves customers in Croatia, providing loyalty rewards and promotions. The business operates in the energy sector and was established around 2020, consistent with the domain registration date. The website is built on the Salesforce Experience Cloud platform, leveraging modern technologies and trusted third-party payment and analytics services. The technical infrastructure is solid, with good mobile optimization and performance, though accessibility and SEO could be improved. Security posture is strong with HTTPS, Content Security Policy, and bot protection via reCAPTCHA, but lacks explicit privacy and security policies visible on the site. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and contact transparency.

E

emap, Metropolis International Group

elektraawards.co.uk

60

The Elektra Awards 2025 website represents a well-established event platform celebrating innovation and excellence in the global electronics industry. Hosted by Electronics Weekly, part of the reputable emap, Metropolis International Group, the site targets industry professionals, startups, and innovators with a clear focus on awards, partnerships, and event bookings. The business model revolves around event organization, sponsorship, and industry recognition, positioning itself as a key player in the electronics sector within the UK. Technically, the website leverages a modern tech stack including Google Tag Manager, Adobe Analytics, Facebook Pixel, and LinkedIn Insight Tag, hosted on AWS S3 with the Evessio event management platform. The site is mobile-optimized, uses HTTPS, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for forms, and integrates multiple analytics and marketing tools with user consent. While explicit security headers are not fully visible, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. However, the absence of a public vulnerability disclosure or incident response contacts suggests room for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the WHOIS data is unavailable due to a domain lookup error. This discrepancy does not detract significantly from the site's legitimacy given its association with a known parent company and consistent branding. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure information, and improving accessibility features to further strengthen trust and compliance.

H

Hobbytec

hobbytec.si

52

Hobbytec is a medium-sized company specializing in the manufacturing and sale of aluminum winter gardens, pergolas, carports, and other garden and home outdoor structures. Established in 2015, it holds a leading market position in Slovenia and surrounding regions, offering custom-made solutions with a focus on quality and design. The website reflects a professional digital presence with multilingual support and clear navigation. Technically, the site uses a proprietary CMS platform by Shean s.r.o., integrates Google Tag Manager and reCAPTCHA for analytics and security, and is hosted on vshosting.cz. Security posture is solid with HTTPS and spam protection, though security headers are not explicitly detected. Privacy compliance is evident with GDPR-aligned cookie consent and privacy policy pages. Contact information is comprehensive, including multiple sales centers with physical addresses and verified emails and phone numbers. Overall, the website is trustworthy, well-maintained, and business credible.

H

Hobbytec

hobbytec.sk

59

Hobbytec is a medium-sized Slovak company specializing in the manufacturing and installation of aluminum winter gardens, pergolas, car shelters, and glazing solutions for homes and gardens. Established in 2010, it holds a leading market position in Slovakia and the Czech Republic, supported by a large showroom and direct customer engagement. The company emphasizes quality, design, and turnkey installation services, targeting homeowners and businesses seeking premium outdoor living solutions. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and reCAPTCHA, hosted on a CMS platform named Shean. The site is mobile-optimized with good SEO and accessibility features. Security posture is strong with HTTPS, security headers, and anti-bot measures, though explicit security policies and incident response contacts are absent. Privacy compliance is robust with comprehensive cookie and privacy policies aligned with GDPR. Overall, the website reflects a professional and trustworthy business with moderate to good digital maturity.

T

TeamViewer

chatvisor.com

78

TeamViewer is a globally recognized technology company specializing in remote connectivity and collaboration software solutions. The website analyzed is focused on acquisitions, highlighting how TeamViewer enriches its portfolio through strategic company purchases. The site targets business and enterprise customers, offering SaaS-based remote desktop and support services. The company maintains a strong market position as a leader in remote connectivity technology. Technically, the website is built on Adobe Experience Manager, leveraging modern tools such as Google Tag Manager, reCAPTCHA, and OneTrust for privacy compliance. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. Security posture is strong, with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is robust, with comprehensive privacy and cookie policies and consent mechanisms in place. However, WHOIS data is unavailable, which is unusual for a major brand but likely due to privacy protection or registry policies. Overall, the website demonstrates a mature digital presence with good security and privacy practices.