Security Directory

R

Race for the Cure | Home

raceforthecure.eu

52

Race for the Cure is a European event organization focused on hosting the largest run and walk events across Europe, primarily aimed at charity participation. The website presents a professional and consistent brand image with clear navigation and a focus on participant engagement. Technically, the site is built on ASP.NET WebForms with Telerik UI components and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and uses modern web fonts and libraries, though accessibility features are basic. Security posture is moderate with HTTPS enabled and IP anonymization in analytics, but lacks explicit security headers and visible incident response or security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Business credibility is moderate with good content quality but no explicit contact or company information disclosed. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and transparency measures.

M

Medline

medline.eu

73

Medline Europe operates as a significant healthcare supplier supporting clinicians, patients, and communities. The website presents a professional and consistent brand image with a focus on medical supplies and healthcare services. The company targets healthcare professionals and institutions across Europe, positioning itself as a trusted business partner in the healthcare sector. The digital presence is built on a Magento e-commerce platform, leveraging modern web technologies and third-party services such as Algolia for search and Cookiebot for privacy compliance. The technical infrastructure is mature, with good mobile optimization and SEO practices, although some improvements in accessibility and security headers could enhance the overall quality. Security posture is strong with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response information. Overall, the website is trustworthy and professionally maintained, though WHOIS data is privacy protected, limiting domain age and registrant verification.

M

Montibello – Skin

montibello.com

65

Montibello is a Spanish-based company specializing in hair care, facial, and body treatment products, targeting professionals in the beauty and aesthetics industry. The website provides product information, professional courses, and inspiration for hairdressers and aesthetic professionals, positioning itself as a reputable brand in the retail beauty sector. The digital presence is built on WordPress with WooCommerce, indicating a mature e-commerce platform with integrated marketing and analytics tools such as Google Tag Manager and Cookiebot for consent management. Security is enhanced by the Wordfence plugin, and HTTPS is enforced, reflecting a good security posture. However, the absence of publicly available WHOIS data raises concerns about domain registration transparency. Additionally, the lack of explicit privacy policy, terms of service, and contact information limits the website's compliance and trustworthiness from a privacy and regulatory perspective. Overall, the website is professionally designed and functional but would benefit from enhanced transparency and compliance documentation.

O

Olivia Garden

oliviagarden.eu

71

Olivia Garden is a professional hair styling tools brand offering products such as hair brushes, combs, and scissors. The website targets professional hair stylists and consumers interested in hair care innovations. The brand appears established with a consistent and professional online presence. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, Google Analytics, Cookiebot for consent management, and reCAPTCHA for bot protection, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website is professional, trustworthy, and well-optimized, with room for improvement in transparency of security policies and contact information.

H

HP Papers - Printing & Copier Paper

hp-papers.eu

66

HP Papers is a European-focused paper product brand specializing in printing and copier paper with a strong emphasis on sustainability and climate action. Their product range includes various paper types certified by ClimatePartner, FSC®, PEFC, and the EU Ecolabel, positioning them as a responsible and quality-conscious player in the manufacturing and retail sectors. The website is built on a modern WordPress infrastructure using Elementor and Astra theme, providing a good user experience with responsive design and clear navigation. However, the absence of explicit privacy and terms of service policies, as well as contact information, limits transparency and user trust. Security posture is adequate with HTTPS and reCAPTCHA usage but lacks visible security headers and formal security policies.

C

CrossCafe Pražírna

crosscafeprazirna.cz

56

CrossCafe Pražírna is a specialized coffee roasting company based in the Czech Republic, offering high-quality coffee products through both retail and wholesale channels. The company emphasizes craftsmanship and quality, operating its own roasting facility and maintaining a strong online presence with an e-commerce platform. Their product portfolio includes various coffee blends, capsules, teas, and merchandise, targeting coffee enthusiasts, cafes, offices, and restaurants. The website reflects a professional and consistent brand image with clear business information and active social media engagement. Technically, the website is built on the Shoptet e-commerce platform, utilizing modern web technologies such as jQuery, Google Tag Manager, Facebook Pixel, and Microsoft Clarity for analytics and marketing. The site is mobile-optimized with good SEO and accessibility basics. Security practices include HTTPS enforcement and CSRF protection on forms, alongside a cookie consent mechanism compliant with GDPR. However, some security headers like Content-Security-Policy are not explicitly present, and no incident response or vulnerability disclosure information is published. The absence of WHOIS data is a notable gap, limiting the ability to verify domain registration details and ownership, which slightly impacts trustworthiness. Despite this, the website content and business information appear legitimate and professionally maintained. Overall, the site demonstrates a solid digital maturity level with room for security enhancements and transparency improvements.

A

Alma Career

lmc.eu

67

Alma Career is a prominent HR and recruitment services provider operating primarily in Czechia and across Europe. The company offers a comprehensive suite of services including job portals, online education platforms, recruitment management tools, employee engagement surveys, and salary benchmarking. Their market position is strong, supported by multiple well-known brands such as Jobs.cz and Platy.cz, serving a broad audience of HR professionals, employers, and job seekers. The website reflects a mature digital presence with modern technologies and a professional design. Technically, the website is built using Next.js and React frameworks, leveraging modern web standards and optimized for performance and mobile responsiveness. The use of Google Tag Manager and Analytics indicates a moderate level of user tracking balanced with privacy compliance. The site employs security best practices including HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. From a security perspective, the site demonstrates a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, although the strong brand presence and consistent business information mitigate this concern. Overall, the risk is moderate with recommendations to enhance transparency around security policies and incident response. Strategically, Alma Career should focus on publishing detailed security and incident response policies, consider a vulnerability disclosure program, and continue to monitor domain registration details to maintain trust. Enhancing accessibility and expanding data retention disclosures would further improve compliance and user trust.

Z

Zalohujme.cz

zalohujme.cz

48

Zalohujme.cz is a Czech environmental initiative focused on promoting the implementation of a deposit return system for PET bottles and beverage cans in the Czech Republic. The website provides comprehensive information about the benefits of such a system, its operation, and examples from other European countries. It targets the general public, environmental advocates, municipalities, and beverage producers. The platform serves as an educational and advocacy tool to support legislative changes and increase recycling rates. Technically, the website is built on WordPress and employs common web technologies including jQuery, Google Analytics, Google Tag Manager, Facebook Pixel, and Smartlook for user behavior tracking. The site is mobile-optimized with good SEO practices including structured data and meta tags. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited as no explicit privacy or cookie policies or consent mechanisms were found. Contact information is limited to an email address in the header, with no phone numbers or physical addresses provided. Overall, the website is legitimate and professional in its presentation and content, though the absence of WHOIS data and privacy policies slightly reduces trustworthiness. Strategic improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance the site's security posture and user trust.

A

Always Advancing Promotions & Manufacturing

alwaysadvancing.net

61

Always Advancing Promotions & Manufacturing operates as a specialized manufacturer of custom finisher medals, awards, apparel, and promotional products primarily serving endurance events and businesses globally. Established in 2008, the company emphasizes custom design and quality, targeting event directors and business owners who require personalized products. The website reflects a medium-sized enterprise with a professional digital presence built on the Duda platform, leveraging modern web technologies and analytics tools. While the site is well-designed, mobile-optimized, and accessible, it lacks explicit privacy and cookie policies, which are critical for compliance and user trust. Security posture is strong with HTTPS and CAPTCHA protections, but security headers and incident response policies are absent. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration consistency, which should be addressed to enhance trust. Overall, the company demonstrates a solid market position with room for improvement in privacy compliance and domain registration transparency.

Run Japan is an online platform dedicated to providing international runners with comprehensive information and registration services for marathons and running events across Japan. The website positions itself as a gateway to Japan's best running events, offering race listings, travel planning assistance, and event registration. The target audience primarily consists of international and domestic runners interested in participating in Japanese marathons. The business operates in the niche sports and events sector, with a small company size and a recent founding date in 2024. Technically, the website employs a modern JavaScript stack including jQuery, Modernizr, and Slick Carousel, hosted on Amazon AWS infrastructure. It uses Google Tag Manager for analytics and tracking. The site is mobile optimized with good SEO practices and a consistent branding approach. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy policy or cookie consent mechanism, which impacts privacy compliance. No vulnerability disclosure or incident response information is provided. The WHOIS data shows privacy protection but is consistent with the business location in Japan, and the domain age aligns with the business launch. Overall, Run Japan presents a professional and functional platform with moderate security and privacy compliance. Strategic improvements in privacy disclosures, security headers, and user data protection would enhance trust and compliance, supporting its growth in the international running community.

S

Supernova

supernova.io

73

Supernova is a technology company providing a SaaS design system platform that integrates design and engineering data to accelerate product development. The platform targets design and engineering teams in medium to large enterprises, offering services such as design system management, code automation, and design tokens. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern web technologies including Webflow CMS, Google Tag Manager, and Hotjar for analytics and user behavior tracking. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the inability to extract WHOIS data limits domain trust verification, slightly reducing overall business credibility. Overall, the website demonstrates a high level of professionalism and technical maturity with room for improvement in transparency of security and contact information.

AIMS (Association of International Marathons and Distance Races) operates as a recognized global organization dedicated to the promotion and coordination of marathon and long-distance running events worldwide. The website serves as a comprehensive hub for race calendars, news, results, directories, and publishes the Distance Running magazine, targeting runners, race organizers, and athletics enthusiasts globally. The organization is registered in Great Britain under MSC Publishing & Design Limited, with a domain age consistent with its operational history since 2016. Technically, the website employs a mix of legacy and modern web technologies including jQuery 1.12.4, Cycle2 plugins, Leaflet for mapping, and Google Analytics for user tracking with IP anonymization. The site is mobile responsive with good navigation and content quality, though some technical debt is evident in the use of outdated JavaScript libraries. SEO and accessibility are basic but functional. From a security perspective, the site benefits from HTTPS and domain registration protections but lacks DNSSEC and security headers, and uses an outdated jQuery version with known vulnerabilities. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a physical address with no emails or phone numbers explicitly provided. No incident response or security policy information is available. Overall, the website is professional and trustworthy with a solid business foundation but requires improvements in privacy compliance, security hardening, and transparency to enhance user trust and regulatory adherence.

Birell.cz is the official website of Birell, a leading Czech non-alcoholic beer brand owned by Asahi CE & Europe Services s.r.o. The company has a strong market position in the Czech Republic, offering innovative non-alcoholic beers and radlers with a focus on flavor variety and health-conscious options. The website is built on WordPress with modern plugins and integrates Google Analytics via Google Tag Manager. It features a cookie consent mechanism compliant with GDPR and provides clear contact information including an email and physical address. However, the absence of a publicly accessible privacy policy page and missing WHOIS data limit full trust assessment. Security posture is generally good with HTTPS enforced but could be improved by adding security headers and publishing a security policy. Overall, the website is professional, user-friendly, and well-branded, supporting the company's market leadership.

P

Prague City Tourism

praguecitytourism.com

61

Prague City Tourism is the official Destination Management Organisation for the City of Prague, focusing on sustainable tourism, cultural heritage preservation, and marketing Prague as a premier travel destination. The organization provides a range of services including guide services, concierge experiences, and business cooperation opportunities targeting tourism industry partners and visitors. The website reflects a well-established entity with a consistent brand and professional content tailored to its audience. Technically, the website is built on WordPress, utilizing modern tools such as Google Tag Manager, Cookiebot for consent management, and Yoast SEO for search engine optimization. Hosting is provided by Active24, and the site demonstrates good mobile optimization and moderate performance. The technical implementation is solid with no critical vulnerabilities detected. From a security perspective, the site uses HTTPS and employs cookie consent mechanisms, indicating compliance with GDPR. However, DNSSEC is not enabled, and no advanced security headers were detected, suggesting room for improvement. No incident response or security policy information is publicly available, which could be enhanced to improve trust and transparency. Overall, the website is professional, trustworthy, and well-aligned with its business objectives. The risk profile is low, with recommendations focusing on enhancing DNS security, publishing security policies, and adding terms of service to strengthen legal and security posture.

B

Bloom Robbins CZ

bloomrobbins.cz

61

Bloom Robbins CZ operates as a specialized e-commerce platform focused on selling vitamin supplements aimed at promoting hair growth and scalp health. The website targets consumers primarily in the Czech Republic and neighboring countries, leveraging a Shopify-based infrastructure to deliver its products. The business model centers on direct online retail with regional sister sites supporting localized markets. The site demonstrates consistent branding and a clear product focus, appealing to a niche audience seeking hair care solutions. Technically, the website utilizes a modern tech stack including Shopify's Dawn theme, JavaScript libraries such as Swiper.js, and integrates multiple marketing and analytics tools like Google Tag Manager, Facebook Pixel, Klaviyo, and Smartlook. The site is hosted on Shopify's CDN, ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. The absence of WHOIS data limits domain trust assessment, though the website content and technology usage suggest a legitimate operation. Overall, Bloom Robbins CZ presents a professional and trustworthy e-commerce presence with room for improvement in security hardening and transparency regarding business and security policies. Strategic enhancements in these areas would bolster customer trust and compliance posture.

C

CrossCafe

crosscafe.cz

49

CrossCafe is a Czech coffeehouse chain providing coffee, cakes, and related products through physical locations and an e-commerce platform. The website demonstrates a solid digital presence with integrated cookie consent mechanisms and advertising/tracking technologies such as Google Analytics, Adform, and Facebook Pixel. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership. No direct contact emails or phone numbers are exposed on the site, which may impact user trust and business credibility. Security policies and incident response information are not publicly available, indicating room for improvement in transparency and compliance documentation.

T

Think Pink Europe

thinkpinkeurope.org

59

Think Pink Europe is a non-profit organization dedicated to raising awareness and funds to combat breast cancer across Europe. The organization runs major campaigns such as Race for the Cure and Pink@Work, engaging the public and corporate sectors to support breast cancer research and patient care. Their website reflects a well-structured, content-rich platform with clear calls to action for donations and participation in events. Technically, the site is built on a mature ASP.NET framework with modern front-end libraries and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no incident response information is published. Overall, the site demonstrates a professional and trustworthy presence suitable for its non-profit mission.

E

Europa Donna

europadonna.org

51

Europa Donna is a well-established European non-profit coalition dedicated to breast cancer awareness, advocacy, and education across 47 member countries. The organization actively engages with European Union institutions, including the European Parliament and Commission, to influence breast cancer policies and guidelines. Their website reflects a professional and consistent brand presence, offering comprehensive resources and information targeted at European women and healthcare advocates. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site includes privacy and cookie consent mechanisms compliant with GDPR, and uses Google Tag Manager and embedded YouTube videos for analytics and engagement tracking. Performance and mobile optimization are good, though accessibility could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent management, but lacks explicit security headers and documented security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The domain WHOIS data is privacy protected or unavailable, which is typical for non-profit organizations, and does not raise immediate trust concerns. Overall, Europa Donna's website demonstrates a solid digital presence with good privacy compliance and a professional approach to content and advocacy. Strategic improvements in security headers, accessibility, and transparency around security policies would further enhance trust and resilience.

S

SPHosting s.r.o.

sphosting.cz

46

SPHosting s.r.o. is a Czech Republic-based hosting service provider established in 2014, specializing in virtual private servers, dedicated servers, managed servers, and cloud/network services. The company targets small to medium businesses requiring tailored hosting solutions with professional management and 24/7 support. Their market position is supported by positive client testimonials and a perfect aggregate rating, indicating strong customer satisfaction and trust. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and slick carousel for UI, alongside Google Tag Manager, Facebook Pixel, and Yandex Metrika for analytics and marketing. The site is hosted behind Cloudflare DNS and uses HTTPS with excellent SSL configuration. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting good digital maturity. From a security perspective, the site enforces HTTPS, uses reCAPTCHA v2 for form protection, and provides granular cookie consent options. However, it lacks explicit security policies, incident response information, and a security.txt file, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected, and security headers could be enhanced. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with moderate to good security posture. Strategic improvements in security transparency and header implementation would further strengthen their risk profile and compliance stance.

S

SPWeb s.r.o.

firmsys.cz

50

Firmsys.cz is a Czech Republic based technology company specializing in providing compliance and business systems focused on whistleblowing and cookie law adherence. The company, operated by SPWeb s.r.o., offers SaaS solutions tailored for firms, schools, public authorities, and other entities required to comply with EU directives such as EU Directive 2019/1937 and ePrivacy regulations. With over 800 clients and more than a decade of IT service experience, Firmsys positions itself as a reliable partner for legal and compliance system needs. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in Czech language. Contact and legal information are transparently presented, enhancing trustworthiness. Technically, the site employs modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Seznam Retargeting. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR policy. Overall, the site demonstrates a mature digital presence with good security posture and compliance awareness.

P

Bezpečné parkování v centru Prahy - Parking Opletalova

parkingopletalova.cz

49

Parking Opletalova is a service provider offering secure parking solutions in the center of Prague. The website targets drivers seeking safe and convenient parking options in a busy urban area. The business model revolves around parking space booking and management, leveraging an e-commerce platform to facilitate reservations. The website is built on WordPress using WooCommerce and the Divi theme, indicating a moderate level of digital maturity with integration of performance optimization tools like WPRocket and multilingual support via Weglot. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS registrant data reduces domain trustworthiness, though the website content and technical setup appear legitimate. Overall, the site presents a functional and user-friendly experience but would benefit from enhanced transparency and security practices.

M

MR.PARKIT

mrparkit.com

71

MR.PARKIT operates an online parking reservation platform focused on the Czech cities of Prague and Brno, offering users the ability to select parking garages on a map and book parking spaces for days or weeks. The business targets drivers seeking convenient, stress-free parking solutions and positions itself as a local service provider with a user-friendly digital presence. The website is professionally designed with good content relevance and clear navigation, supporting a positive user experience. Technically, the site leverages modern technologies including Google Maps API for location services, Cookiebot for consent management, and integrates multiple analytics and advertising platforms such as Google Analytics, Bing Ads, and Facebook Pixel. Hosting is provided by a Czech hosting provider, and the domain is well aged and consistent with the business profile. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in DNSSEC adoption and security headers. Privacy compliance is strong, with a comprehensive cookie policy and GDPR-aligned consent mechanisms. However, the site lacks visible contact information, terms of service, and explicit security policies, which could be enhanced to improve trust and compliance. Overall, MR.PARKIT presents a credible and functional online service with moderate technical maturity and good privacy practices.

A

ADOL Monitor s.r.o.

adol.cz

53

ADOL Monitor s.r.o. is a Czech Republic-based company specializing in providing monitoring services for real estate investment opportunities, particularly focusing on distressed properties such as auctions, executions, and insolvencies. The company has been operating for over 10 years and offers a suite of services including data monitoring, cadastral data access, and educational seminars. Their market position is that of a niche, trusted provider with a strong local presence and a loyal customer base. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various plugins, supporting good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected and could be improved. The absence of WHOIS data limits domain trust assessment but the website content and business information suggest legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR requirements.

Modrý zub s.r.o. operates an established authentic Thai restaurant business in Prague with multiple branches and catering services. The website presents a professional image with detailed descriptions of their culinary offerings and physical locations, targeting tourists, locals, and expats. The digital infrastructure includes modern analytics and tracking tools, with a cookie consent mechanism supporting privacy compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the active and well-maintained website. Security posture is generally good with HTTPS enforced, but lacks some security headers and formal policies such as privacy and terms of service. Overall, the website is functional and credible but would benefit from improved transparency and security documentation.

G

Getriebebau NORD GmbH & Co. KG

nord.com

73

Getriebebau NORD GmbH & Co. KG operates the website www.nord.com, presenting itself as a leading global supplier of mechanical and electronic drive technology solutions including gear motors, industrial gear units, electric motors, and frequency inverters. The company targets a broad industrial audience with a strong B2B focus, emphasizing product competitiveness and energy efficiency. The website supports multiple languages, indicating a global market presence. Technically, the site uses modern web technologies such as Bootstrap, Cookiebot for consent management, and Google Tag Manager for analytics, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected and no dedicated security policy or incident response contacts are published. The absence of WHOIS data for the domain reduces transparency and business credibility, though the website content and branding are professional and consistent with a legitimate enterprise. Overall, the site scores well on content quality, technical implementation, and privacy compliance, but business credibility is slightly impacted by missing WHOIS information.

The Lindner Group website presents a comprehensive portfolio of interior fit-out and custom system products targeting construction and architectural professionals. The company positions itself as a strong partner in the manufacturing sector, focusing on acoustics, fire protection, sustainability, and design. The website is professionally designed with clear navigation and a broad product catalog, indicating a mature digital presence. Technically, the site employs modern JavaScript libraries and tracking tools such as Matomo and Google Tag Manager, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit security policies. The absence of WHOIS registration data is a notable concern, potentially impacting trust and legitimacy perceptions. Privacy compliance is minimal, with no clear privacy or cookie policies detected. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

Z

Zeppelin GmbH

zeppelin-systems.com

57

Zeppelin Systems, a division of Zeppelin GmbH, specializes in customized solutions for bulk material handling and plant engineering, serving industries such as food, chemicals, plastics, and recycling. The company offers a comprehensive portfolio including engineering, components, and services, positioning itself as a key player in the manufacturing sector with a strong B2B focus. The website reflects a mature digital presence with modern technologies like Next.js and AWS hosting, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in DNS security and security headers. Overall, the site demonstrates high professionalism and trustworthiness, supported by clear contact information and legal compliance.

D

DAMI development s.r.o.

damidev.com

67

DAMI development s.r.o. is a Czech Republic based software development company specializing in mobile and web application development with over 13 years of market presence. They serve businesses and startups by delivering software solutions that enhance internal processes and cost efficiency. Their key services include development for multiple mobile platforms (Android, iOS, TV, wearables), web applications, third-party hardware/software integration, and innovative technologies such as IoT, augmented reality, and machine learning. The company showcases a professional website with clear navigation, client references, and modern technology usage, indicating a mature digital presence. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified.

K

Online Kasino Česko ⚡️ Nejlepší Kasina v České Republice

kasinoczech10.com

49

The website kasinoczech10.cz is a Czech-language online casino affiliate and review platform focused on providing detailed information about online casinos available to Czech players. It offers curated casino reviews, bonus offers, payment method guides, and game type information to help users make informed decisions. The site targets adult Czech players interested in online gambling and operates primarily through affiliate marketing partnerships with various casinos. Technically, the site is built on WordPress, uses Cloudflare DNS, and integrates Google Analytics, Google Tag Manager, and OneSignal for analytics and notifications. The site is mobile-optimized with a good user experience and clear navigation. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and formal privacy or cookie policies. The domain is relatively new (created in 2023) but consistent with the business age and model. Overall, the site is professional and trustworthy within its niche but would benefit from enhanced privacy compliance and security policy disclosures.

J

JMP s.r.o.

rozkladacipostele.cz

53

JMP s.r.o. operates the website rozkladaci-postele.cz, specializing in the retail and e-commerce sale of folding beds and mattresses primarily targeting customers in the Czech Republic. The company maintains a medium-sized business with multiple physical stores and an online presence, offering a wide range of products with a focus on quality Czech manufacturing. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Bootstrap, and various plugins for SEO, analytics, and live chat support. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though security headers and formal policies are lacking. Privacy compliance is basic with a cookie consent banner but no published privacy or terms of service pages. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is functional, trustworthy, and well-positioned in its niche.

M

MUDr. Marie Součková

ortopediesouckova.com

61

Lékařské podiatrické centrum, led by MUDr. Marie Součková, is a specialized private healthcare provider in Prague focusing on orthopedics and podiatry services for children and adults. The center offers a comprehensive range of treatments including podiatry, orthopedic care, pedicure services, diabetic footwear (SHAPER), and educational courses. The business holds a reputable market position as a pioneer in private comprehensive care for the musculoskeletal system in the Czech Republic. Technically, the website is built on Joomla CMS with modern frontend frameworks like Bootstrap and UIkit, supported by jQuery and Google Analytics for tracking. Hosting is provided by WEDOS Internet, a reputable Czech provider. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Privacy compliance is well addressed with a clear cookie consent mechanism and GDPR-aligned privacy policy. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit incident response or security policies. No vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a professional, trustworthy, and user-friendly digital presence for a specialized healthcare provider, with room for improvement in security hardening and formal policy disclosures.

A

Autosalon Klokočka

klokocka.cz

53

Autosalon Klokočka is a medium-sized authorized automotive dealership and service provider based in the Czech Republic, specializing in brands such as Volkswagen, Audi, ŠKODA, Kia, and SEAT. The company offers a comprehensive range of services including new and used vehicle sales, authorized servicing, financing, leasing, and vehicle buyback. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at automotive customers in the region. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Hotjar, and Ecomail, alongside live chat and reCAPTCHA for user interaction and security. The site is mobile-optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and CAPTCHA on forms, though it lacks some advanced security headers and published incident response information. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness, but the overall business credibility remains high due to the professional presentation and authorized brand partnerships. Strategic improvements in security headers, incident response transparency, and domain registration verification are recommended to enhance trust and compliance.

R

ROSSMANN

rossmann.cz

69

ROSSMANN.cz is the online presence of ROSSMANN, a large retail chain specializing in drugstore products in the Czech Republic. The website offers a broad assortment of quality goods at competitive prices, including current promotions, flyers, and customer contests. The site targets retail consumers in the Czech market and positions itself as a well-established player in the retail sector. Technically, the website employs modern JavaScript frameworks and libraries, including React components, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and uses preloading techniques for fonts and images to enhance performance. Security-wise, HTTPS is enforced, and cookie consent is implemented, but no explicit security headers or privacy policy pages were detected in the provided content. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and branding suggest a legitimate business. Overall, the site demonstrates good digital maturity with room for improvement in security and privacy transparency.

R

RSJ

rsj.com

56

RSJ is a financial group operating primarily in the Czech Republic with a strong presence in global derivative markets including London, Chicago, New York, Frankfurt, and Tokyo. The company manages a diversified portfolio of investments spanning financial derivatives trading, real estate development, private equity, and emerging sectors such as biotechnology and healthy food production. The website clearly communicates its business scope and warns investors about fraudulent schemes misusing its brand. Technically, the site employs modern web technologies including Google Analytics and Tag Manager, with a cookie consent mechanism supporting GDPR compliance. Security posture is solid with HTTPS enforced, but lacks published security policies or incident response contacts. WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, RSJ presents as a credible financial entity with room for improvement in transparency and security disclosures.

Alfasilver.cz is the official website for Alfasilver HA+, a medical device product designed for wound care, including treatment of abrasions, minor burns, and skin injuries. The product is distributed by Glenmark Pharmaceuticals Distribution, s. r. o., based in Prague, Czech Republic. The website targets consumers seeking effective and easy-to-use wound care solutions, offering sprays and creams with antimicrobial properties and tissue hydration support. The site also provides educational content and retail partner links for product purchase. Technically, the website employs a modern frontend stack including Bootstrap 4, jQuery, and integrates Google Analytics and Google Tag Manager for user tracking and analytics. Cookie consent is managed via CookieScript, ensuring GDPR compliance with granular user consent options. The site is mobile-optimized and features clear navigation and professional design, though no CMS or backend platform is explicitly detected. Hosting and domain registration are consistent with the business location and history. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with a registration date in 2016 and no privacy protection, aligning with the business profile. Contact information is clearly provided, including company address, phone, and official emails, with a dedicated channel for reporting adverse effects. Overall, Alfasilver.cz presents a trustworthy, professional, and compliant online presence for a niche healthcare product. Strategic improvements could include enhanced security headers and explicit security policies to further strengthen trust and compliance.

3

3E PROJEKT, a.s.

3eprojekt.cz

50

3E PROJEKT, a.s. is a Czech Republic-based medium-sized company founded in 1998, operating primarily in hospitality, craft brewing, and real estate sectors. The company emphasizes a blend of tradition and innovation, maintaining a family-oriented culture while expanding its business portfolio. Their key services include managing gastronomy venues, operating a craft brewery, and providing real estate services. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website uses a modern technology stack including jQuery, Slick Carousel, Lightbox, Remodal, Google Maps API, and Google Tag Manager. It is built on the Ibis CMS platform and shows good mobile optimization and SEO practices. The site implements GDPR-compliant cookie consent mechanisms and uses tracking tools such as Microsoft Clarity and Facebook Pixel with consent management. From a security perspective, the site enforces HTTPS and uses consent-based analytics but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain is a notable concern, reducing trust in domain registration transparency. Overall, the website is professional and trustworthy with moderate technical and security maturity. Strategic improvements in security headers, incident response documentation, and WHOIS transparency are recommended to enhance trust and compliance.

D

DARAMIS Management, s.r.o.

daramis.com

55

Daramis Management, s.r.o. is a well-established real estate developer focused on residential projects primarily in Prague, Czech Republic. With over 25 years of experience, the company specializes in transforming urban areas into vibrant residential communities, offering services including residential development, project management, and property sales. Their market position is strong within the local real estate sector, supported by a portfolio of completed projects and a significant number of satisfied residents. The website reflects a professional and modern digital presence, leveraging WordPress with advanced front-end technologies to deliver an excellent user experience across devices. Security posture is robust with HTTPS, security headers, and secure forms, although explicit security policies and incident response information are absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies including consent mechanisms. The domain WHOIS data is missing or privacy protected, which slightly reduces transparency and business credibility but is not uncommon in this sector. Overall, the site demonstrates a mature digital infrastructure and trustworthy business representation with room for improvement in transparency and security disclosures.

P

PLAYzone s.r.o.

playzone.agency

47

PLAYzone Agency is a well-established esports and gaming company based in the Czech Republic with over 15 years of experience. They provide a broad range of services including consulting, gaming zone construction, streaming studios, event content creation, equipment rental, and PR services targeted at the gaming community. The company operates several proprietary projects and maintains partnerships with major brands such as Hyundai, Tipsport, Vodafone, and Logitech, positioning itself as a leading player in the Czech esports market. The website is professionally designed, bilingual (Czech and English), and demonstrates a strong digital presence with active social media and partner links. Technically, the website is built on WordPress with Elementor and uses modern JavaScript libraries like Swiper and Google Tag Manager for analytics and marketing. The site is mobile optimized, accessible, and SEO friendly, with good performance metrics. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and no explicit incident response or vulnerability disclosure information is published. Overall, the website and business exhibit a mature digital infrastructure and a professional security stance suitable for their industry. The lack of WHOIS data transparency slightly reduces trust but is common for privacy reasons. The company maintains GDPR-compliant privacy and cookie policies with user consent mechanisms, reflecting good privacy practices. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to strengthen privacy and security culture to maintain trust and compliance.

O

OnlyU - Web s články o vztazích, společnosti a zdraví.

onlyu.cz

55

OnlyU is a Czech-language media website focused on publishing articles related to relationships, society, and health. The site targets Czech-speaking users interested in these topics and monetizes primarily through advertising networks such as Google Adsense and Taboola. The website is built on WordPress CMS and integrates multiple third-party analytics and marketing tools, including Google Analytics, Gemius, and ShareThis, indicating a mature digital marketing infrastructure. However, the absence of publicly available WHOIS data limits the ability to fully verify domain ownership and legitimacy. The site implements a cookie consent banner, showing some compliance with GDPR requirements, but lacks an explicit privacy policy or terms of service in the analyzed content. Technically, the site shows moderate performance and good mobile optimization but has minor backend issues such as visible PHP warnings. Security posture is moderate with HTTPS enabled but missing security headers and some code hygiene issues. Overall, the website is functional and professionally presented but would benefit from improved transparency, security hardening, and compliance documentation.

K

Království tianDe

kralovstvi-tiande.cz

69

Království tianDe operates a professional e-commerce website focused on selling tianDe cosmetics and health products inspired by traditional Chinese medicine. The site targets consumers interested in natural beauty and health products within the Czech Republic. The platform is technologically modern, leveraging React, Google Tag Manager, Microsoft Clarity, Klaviyo, and Sentry for analytics, marketing, and error monitoring. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, which should be addressed to improve business credibility. Overall, the website is functional, well-designed, and provides clear contact information, but could benefit from enhanced transparency and security documentation.

P

PlastisolTransfer24.com

plastisoltransfer24.com

63

PlastisolTransfer24.com is a German-based company specializing in the production and distribution of high-quality textile transfers, serving primarily B2B customers such as textile printing companies and promotional firms across Germany, Austria, Switzerland, and the UK. The company emphasizes rapid delivery, offering express shipping within 24 hours, and holds OEKO-TEX certification, underscoring its commitment to environmental and social responsibility. Their product portfolio includes a wide range of transfer types including plastisol, blockout, water, neon, digital, DTF, and specialty transfers like glitter and holographic options. Technically, the website is built on the Magento 2 e-commerce platform, leveraging RequireJS, jQuery, and various Magento UI components. It integrates modern payment solutions such as Stripe and employs Google Tag Manager, Google Analytics, and Microsoft Clarity for analytics and marketing purposes. The site is mobile-optimized with good SEO practices and a comprehensive cookie consent mechanism supporting GDPR compliance. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status to prevent unauthorized transfers, and implements CAPTCHA on login forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security or incident response policies are found. The domain registration is consistent with the business claims, having been registered in 2012, aligning with the company's stated experience. Overall, the website presents a professional and trustworthy front with good content quality, technical implementation, and privacy compliance. Strategic improvements could include enhancing security headers, publishing a formal security policy, and enabling DNSSEC to further strengthen trust and security posture.

J

JMP s.r.o.

loznice.cz

50

JMP s.r.o. operates the website loznice.cz, specializing in the manufacture and retail of high-quality mattresses, beds, and bedroom furniture with a strong emphasis on Czech production and certification. The company targets consumers seeking quality sleep solutions and offers custom-made products supported by over 30 years of experience. The website features rich multimedia content, product categories, and multiple physical store locations with clear contact information. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Heureka widgets. The site is mobile-optimized and provides a good user experience with clear navigation and structured data for SEO. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain reduces trust from a domain registration standpoint. The site lacks explicit security policies and incident response information, which could be improved to enhance compliance and user trust. Overall, the website presents a professional and trustworthy front for a medium-sized retail business in the Czech Republic, with recommendations to improve domain registration transparency, security headers, and published security policies to strengthen its security posture and compliance.

N

Národní technické muzeum

ntm.cz

54

Národní technické muzeum is a prominent national museum in the Czech Republic dedicated to preserving and showcasing technical history and innovation. The museum offers a wide range of exhibitions, educational programs, and cultural events targeting diverse audiences including families, schools, adults, and professionals. It maintains a strong market position as a leading cultural institution with multiple exhibition sites and partnerships with governmental and corporate entities. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and Google Tag Manager, with good mobile optimization and accessibility features. The site is well-structured, professionally designed, and provides a rich user experience with clear navigation and relevant content. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks visible security headers and explicit security or incident response policies, which could be improved. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, although the website content and external trust signals strongly support its authenticity. Overall, the website presents a low risk profile but would benefit from enhanced transparency in security policies and domain registration information to strengthen trust and compliance posture.

V

VAKOVAKO | Endowment fund

nf2091.org

62

VAKOVAKO is a Czech Republic-based non-profit endowment fund operating a global donation platform focused on environmental and humanitarian causes. The platform connects donors with carefully vetted nonprofits working in areas such as rainforests, oceans, biodiversity, endangered species, and humanity. The business model emphasizes transparency, with 100% of donations going directly to nonprofits and audited bank accounts. The platform supports donations via a mobile app available on iOS and Android, facilitating easy and fast contributions with no minimum or maximum limits. Technically, the website is built using modern web technologies including React and Next.js, with integrations for Stripe payments, Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is well-optimized for mobile devices, fast loading, and includes accessibility features. Security best practices are observed with HTTPS, security headers, and reCAPTCHA integration, though no explicit security policy or incident response information is published. The WHOIS data for the domain is unavailable or malformed, indicating privacy protection which is common and justified for non-profit organizations. Despite this, the website's transparency, presence of official policies, and contact information support its legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly platform for charitable donations. Recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and security posture.

B

BressKamp s.r.o.

bresskamp.eu

59

BressKamp s.r.o. is a small manufacturing company based in the Czech Republic specializing in contract manufacturing of turned and milled parts, sheet metal parts, and welded constructions. The company emphasizes quality and flexibility, serving primarily German-speaking clients with ISO 9001 and EN 1090-2 certifications. Their website reflects a professional business presence with detailed service descriptions and reference customers. Technically, the website uses established but somewhat outdated technologies such as jQuery 1.11.1 and Bootstrap 3.2.0, with integration of Google Tag Manager and CookieYes for analytics and cookie consent management. Security posture is moderate; HTTPS is assumed but security headers are not detected, and older libraries may pose risks. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy policy page found. Overall, the website is functional and professional but could improve in security and compliance documentation.

Z

Zasedáme.cz, s.r.o.

zasedame.cz

46

Zasedáme.cz, s.r.o. operates a premium event and conference space rental business located in the heart of Prague, offering multiple room sizes with modern technical equipment and comprehensive event services. The company targets corporate clients and individuals seeking well-equipped, centrally located venues with flexible scheduling options. The website is professionally designed, mobile-optimized, and provides clear pricing, contact information, and customer testimonials, supporting a strong market position in the hospitality and real estate sectors. Technically, the website employs a modern tech stack including Bootstrap, Swiper.js, and Usercentrics for cookie consent management, alongside analytics tools like Google Analytics and Hotjar. The site is served over HTTPS with no visible security vulnerabilities in the content, though security headers are not explicitly detected. The presence of a consent management platform indicates good privacy compliance practices. Security posture is solid with HTTPS and no exposed sensitive data, but the absence of explicit security policies or incident response contacts is a gap. The missing WHOIS data reduces domain trustworthiness and should be investigated further. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity. Strategic recommendations include implementing security headers, publishing a security policy, adding incident response contacts, auditing third-party scripts, and considering a vulnerability disclosure policy to enhance trust and compliance.

P

Praha 3

praha3.cz

68

The website www.praha3.cz serves as the official portal for the municipal district Praha 3 in the Czech Republic. It provides comprehensive information about local government services, news, events, and contact details for residents and visitors. The portal supports multiple languages via Google Translate links and offers online services such as appointment booking and downloadable forms. The site is well-branded and maintains consistent messaging aligned with its government entity status. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, jQuery, and Bootstrap components. It is mobile-optimized, accessible, and includes SEO best practices such as meta tags and structured data (JSON-LD). The site uses HTTPS and implements cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses consent-based tracking scripts. However, it lacks explicit security headers and a published security.txt or incident response contact, which are recommended for transparency and vulnerability management. No WAF or blocking mechanisms were detected, and no obvious vulnerabilities were found in the content or scripts. Overall, the site presents a trustworthy and professional government portal with good content quality and technical implementation. The absence of WHOIS registration data slightly reduces trust but is mitigated by the official nature and consistent branding. Strategic improvements in security headers and incident response disclosures would enhance the security posture and trustworthiness further.

K

Klépierre Management Česká Republika s.r.o.

klepierre.cz

54

Klépierre Management Česká Republika s.r.o. operates prominent shopping centers in the Czech Republic, including Nový Smíchov in Prague and Plzen Plaza in Plzeň. The company is part of the larger Klépierre group based in France, specializing in retail real estate management. Their website provides information about their centers, compliance mechanisms including a whistleblowing system, and cookie consent management, reflecting a commitment to regulatory compliance and user privacy. Technically, the website is built using modern web technologies such as Next.js and React, hosted via Gandi registrar's infrastructure. The site includes a comprehensive cookie consent mechanism using tarteaucitron.js and integrates Google Tag Manager for analytics. The website is mobile-optimized and provides a good user experience with clear navigation and branding consistency. From a security perspective, the site enforces HTTPS and uses a high privacy cookie consent mode. It features a whistleblowing system for incident reporting, demonstrating a mature compliance posture. However, explicit security headers and a dedicated security policy page are absent, and no vulnerability disclosure or security.txt file was found. These gaps suggest room for improvement in formalizing security communication and transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The domain age and WHOIS data align with the business claims, indicating legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to strengthen security posture and trust.

N

Nadace Naše dítě

nasedite.cz

44

Nadace Naše dítě is a well-established Czech non-profit foundation dedicated to supporting handicapped, abused, and socially disadvantaged children. With over 31 years of operation, it provides financial aid, legal assistance, and runs awareness campaigns to improve children's lives. The website reflects a professional and consistent brand image, targeting donors and beneficiaries alike. Technically, the site uses modern JavaScript libraries and Google services, ensuring good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust analysis but does not detract from the site's apparent legitimacy. Overall, the foundation demonstrates a strong commitment to transparency and user privacy.

O

OBRAZ – Obránci zvířat, z. s.

albertovakrutost.cz

54

The website albertovakrutost.cz is a campaign platform run by the non-profit organization OBRAZ – Obránci zvířat, z. s., focused on raising awareness and advocating against animal cruelty in supermarket Albert's chicken supply chain in the Czech Republic. The site provides detailed information about the campaign, including calls to action such as signing petitions. The organization positions itself as an animal welfare advocate with a clear mission and target audience of concerned consumers and animal rights supporters. Technically, the site uses modern frontend technologies including Vue.js, Alpine.js, and SwiperJS, supported by analytics and tracking tools like Google Analytics, Microsoft Clarity, and Ecomail. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. Privacy compliance is strong, with comprehensive GDPR-aligned privacy and cookie policies presented in Czech language. Contact information is transparent, including emails, phone number, and physical address. No terms of service or vulnerability disclosure policies were found. The domain is newly registered but consistent with the campaign's recent launch. Overall, the website is professional, trustworthy, and well-structured for its advocacy purpose.