Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
46,801–46,850 of 99,066
Smiltenes novada pašvaldībasmiltene.lv
Government · Latvia
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Smiltenes novada pašvaldība is the official municipal government website for the Smiltenes novads region in Latvia. It provides comprehensive information about local government structure, public services, community news, and administrative contacts. The website targets residents and stakeholders within the municipality, serving as a central hub for governance and civic engagement. The business model is typical for a government entity focused on public service and information dissemination. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies including Google reCAPTCHA for bot protection and Google Analytics for visitor tracking. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. Performance is moderate, with standard use of external libraries and fonts. From a security perspective, the site enforces HTTPS and employs security best practices such as reCAPTCHA and cookie consent mechanisms. However, some security headers could be more comprehensively implemented, and there is no visible security.txt or incident response information published. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is safe, professional, and trustworthy, with no adult or questionable content. The lack of WHOIS data limits full domain legitimacy verification, but the official nature and content quality support a high trust level. Strategic recommendations include enhancing security header implementation, publishing security policies, and adding vulnerability disclosure information to improve transparency and security posture.
- SIA anazana
anazana.com
Technology · Latvia
70Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
anaZana is a Latvian-based company founded in 2010 specializing in digital marketing and IT solutions tailored for businesses. Their offerings include digital marketing management, website and landing page development, mobile application creation, business process automation, and white-label IT system development. The company targets businesses seeking to grow and digitalize their operations, positioning itself as a reliable and personalized IT partner with over 300 active clients and notable partnerships including Google and Latvian development agencies. Technically, the website employs modern tracking and marketing tools such as Google Tag Manager and HubSpot Analytics, with a responsive design and good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and vulnerability disclosure policies are absent. The WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the professional website content and business information mitigate immediate trust issues. Overall, anaZana presents as a credible mid-sized technology service provider with room for improvement in security transparency and contact information clarity.
- Balvu novada pašvaldība
muzejs.balvi.lv
Government · Latvia
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Balvu novada pašvaldība operates as the official municipal government website for the Balvi region in Latvia, providing a wide range of public services and information including local government structure, social support, education, culture, tourism, and public procurement. The website is well-structured, localized primarily in Latvian, and targets residents and stakeholders of the Balvi municipality. Technically, the site is built on Drupal CMS with modern frameworks like Bootstrap and integrates Google Analytics for visitor tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, HTTPS is enforced, and several security headers are present, although explicit security policies and incident response contacts are not found. Privacy compliance is strong with comprehensive cookie and privacy policies and consent mechanisms. Overall, the site is legitimate, professional, and safe for general audiences, although WHOIS data is unavailable due to query limits, which slightly limits domain trust verification.
- Balvu novada pašvaldība
visit.balvi.lv
Government · Latvia
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Balvu novada pašvaldība operates as the official local government website for the Balvi Municipality in Latvia, providing comprehensive information about municipal governance, public services, social programs, education, culture, and community events. The website serves residents and stakeholders by offering access to forms, news, contact information, and resources relevant to the municipality's operations. Technically, the site is built on Drupal CMS, employs modern web technologies including Bootstrap and jQuery, and integrates Google Analytics for visitor insights while respecting privacy through cookie consent mechanisms. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing incident response contacts and vulnerability disclosure policies. Overall, the site is professional, well-structured, and trustworthy, supporting the municipality's mission to serve its community effectively.
Valmieras sākumskolavss.edu.lv
Education · Latvia
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Valmieras sākumskola is a primary educational institution based in Latvia, providing comprehensive educational services including various projects, school management, teaching, and parental support. The website is built on Google Sites, leveraging Google's hosting and analytics infrastructure, indicating a moderate level of digital maturity. The site is well-structured with clear navigation and good mobile optimization, serving its target audience of students, parents, and staff effectively. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies, which are important for compliance and trust. Overall, the website is safe, professional, and legitimate, but could improve privacy compliance and security practices.
Ežiezi.lv
Hospitality · Latvia
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Eži is a Latvian-based full-service event organization agency specializing in creative, active, and unconventional event planning. Their services include event organization, technical production, event concepts, team building, and outdoor adventures. The company targets corporate clients and organizations seeking professional event management and team engagement solutions. The website is built on Drupal 8, employs Google Analytics and Tag Manager with IP anonymization, and offers multilingual support. Contact details and team profiles are clearly presented, enhancing business credibility. However, the site lacks explicit privacy and cookie policies, and no security headers were detected in the provided data, indicating room for improvement in security and compliance. Overall, the website is professional, user-friendly, and content-rich, suitable for its target audience.
- SSIA ENRI
enri.lv
Other · Latvia
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SIA ENRI operates a Latvian website that primarily serves as a redirect portal to its subdomains related to tennis club and car wash services. The business appears to be a small local service provider targeting customers interested in tennis and automotive cleaning services. The website content is minimal, focusing on navigation to related service sites rather than providing detailed information directly. Technically, the site uses basic HTML5, CSS, and an outdated version of jQuery (1.11.1), with no detected CMS or advanced frameworks. Performance and mobile optimization are basic, and accessibility features are minimal. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. No forms or data collection mechanisms are present, reducing risk but also limiting user engagement and compliance capabilities. Overall, the site is functional but lacks modern security and privacy best practices.
Saldus novada domesportaskola.saldus.lv
Government · Latvia
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Saldus novada dome operates the official municipal website for the Saldus region in Latvia, providing residents and visitors with comprehensive information about local governance, public services, news, and events. The website serves as a key communication channel for the municipality, offering access to administrative resources, contact points, and community engagement tools. The site is well-structured and targets a broad audience including citizens, businesses, and tourists. Technically, the website is built on WordPress with a modern tech stack including jQuery, Modernizr, and several plugins for event management and contact forms. It employs HTTPS for secure communications and integrates cookie consent mechanisms to comply with GDPR requirements. The site demonstrates good mobile optimization and basic accessibility features, though there is room for improvement in security headers and explicit security policies. From a security perspective, the site uses HTTPS and cookie consent but lacks visible advanced security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain legitimacy verification, but the website's content and structure strongly indicate a legitimate government entity. Overall, the website presents a professional and trustworthy digital presence for the Saldus municipality, with solid content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and security posture further.
- Pilseta24.lv - Pilsētas interneta portāls
balvi.pilseta24.lv
Media · Latvia
75Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pilseta24.lv is a Latvian city internet portal offering a variety of local services including news publication, classified ads, galleries, forums, city catalogs, and maps. The portal targets general audiences interested in local city events and social networking. The website uses modern frontend technologies such as Bootstrap 5 and jQuery, and integrates advertising and analytics services with user consent mechanisms. Despite the lack of visible privacy policy and contact information, the site demonstrates a moderate level of digital maturity with cookie consent and analytics implementations. Security posture is moderate with room for improvement in security headers and SSL configuration. Overall, the site appears legitimate and functional but would benefit from enhanced transparency and security practices.
- Pilseta24.lv - Pilsētas interneta portāls
saldus.pilseta24.lv
Media · Latvia
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pilseta24.lv is a Latvian local city internet portal providing news, classifieds, galleries, forums, city directories, and maps for multiple Latvian cities via dedicated subdomains. The website targets local residents and community members seeking city-specific information and social networking features. The business model appears to be advertising-driven, leveraging Setupad and Google DoubleClick ad networks. The site uses Matomo analytics and integrates cookie consent mechanisms with multi-language support, reflecting a moderate level of digital maturity. Technically, the site employs Bootstrap and jQuery frameworks, ensuring responsive design and basic accessibility. Security posture is moderate with cookie consent and consent mode integration, but lacks visible security headers and explicit privacy or terms of service pages. WHOIS data is unavailable due to query limits, limiting domain trust assessment. Overall, the site is accessible, safe for general audiences, and professionally designed but would benefit from enhanced security and compliance documentation.
- Pilseta24.lv - Pilsētas interneta portāls
daugavpils.pilseta24.lv
Media · Latvia
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pilseta24.lv is a Latvian local city internet portal providing news, classifieds, galleries, forums, and city maps for multiple cities across Latvia. It serves as a community hub for residents to share information and stay updated on local events. The website uses a modern tech stack including Bootstrap and jQuery, with analytics powered by Matomo and Google Analytics. Advertising is managed through Setupad and Google DoubleClick networks. The site implements a cookie consent mechanism with granular user controls, indicating some level of privacy awareness. However, the absence of a visible privacy policy and terms of service pages, as well as missing WHOIS data, limits full trust assessment. Security headers are not detected, and SSL configuration details are unknown, suggesting room for security improvements.
Other
57Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website at sokolades-masaza.business.site is currently inaccessible, returning a 404 Not Found error page with no visible content or business information. This prevents any meaningful analysis of the company's services, market position, or digital presence. The lack of metadata, structured data, or contact details further limits insight into the business. Technically, the site lacks any detectable technologies, scripts, or security features, indicating either a misconfigured or undeployed website. Security posture is minimal with no HTTPS or security headers observed. Overall, the site presents a high risk due to lack of content and transparency, and it is not possible to verify legitimacy or compliance.
- Pilseta24.lv - Pilsētas interneta portāls
ogre.pilseta24.lv
Media · Latvia
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pilseta24.lv is a Latvian city internet portal providing localized news, events, classifieds, galleries, forums, and social networking features tailored to multiple cities across Latvia. The website targets general audiences interested in city-specific information and community engagement. The portal operates multiple city subdomains, enhancing localized content delivery. Technically, the site employs modern frontend technologies such as Bootstrap 5 and jQuery, and integrates advertising and analytics services with user consent mechanisms. The cookie consent implementation is comprehensive, allowing users to manage preferences for necessary, advertising, and analytics cookies. However, the absence of a dedicated privacy policy and terms of service pages limits transparency and compliance clarity. Security posture is moderate with no explicit security headers or SSL configuration details available, and no visible vulnerabilities or exposed sensitive data. WHOIS data could not be retrieved due to query limits, which restricts domain legitimacy verification. Overall, the website is functional and professionally designed but would benefit from enhanced privacy disclosures and security hardening.
- Pilseta24.lv - Pilsētas interneta portāls
ventspils.pilseta24.lv
Media · Latvia
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pilseta24.lv is a Latvian city internet portal providing localized news, classifieds, forums, galleries, and social networking features tailored to various Latvian cities. The site targets general audiences interested in local events and community engagement. The business model revolves around content publication and advertising revenue, leveraging a network of city-specific subdomains to serve localized content. The website employs modern frontend technologies such as Bootstrap 5 and jQuery 3.5.1, with analytics and advertising integrations including Matomo, Google Analytics, Facebook, Setupad, and Google DoubleClick. Cookie consent mechanisms are implemented, reflecting some privacy compliance efforts. However, explicit privacy policy and terms of service pages are not detected in the provided content, and no direct contact information is found, which may impact user trust and compliance completeness. WHOIS data is unavailable due to query limits, limiting domain registration trust assessment. Overall, the site demonstrates moderate technical maturity and business credibility but could improve transparency and security posture.
- Pilseta24.lv - Pilsētas interneta portāls
limbazi.pilseta24.lv
Media · Latvia
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pilseta24.lv is a Latvian local city internet portal providing news, classifieds, galleries, forums, and city maps tailored for various Latvian cities through dedicated subdomains. The portal targets local residents seeking community information and city-specific updates. The business model appears to be advertising-supported local media with community engagement features. Technically, the site uses modern frontend technologies such as Bootstrap 5 and jQuery, with Matomo analytics for privacy-conscious user tracking and Setupad for advertising. The cookie consent mechanism is well implemented with multilingual support and granular categories, indicating some compliance with privacy regulations. However, the absence of a visible privacy policy and terms of service pages, as well as missing WHOIS data, limits full trust and compliance assessment. Security posture is moderate with no visible security headers or detailed SSL configuration data. Overall, the site is functional and professionally designed but would benefit from enhanced transparency and security hardening.
- Liepājaspec Official
liepaja.pilseta24.lv
Appliance repair service · Latvia
60Medium
NIS2 50 · GDPR 50
NIS2 50 · GDPR 50
Remtes muižaturisms.saldus.lv
Museum · Latvia
62Medium
NIS2 50 · GDPR 50
NIS2 50 · GDPR 50
BARTA Apartament Riga Old Townbartaaptriga.hotelonia.com
Apartment building
55Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
- Daugavpils ledus halle
daugavpils.lv
Sports complex · Latvia
69Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Tērvetes Tarzāna parkstervete.tarzans.lv
Amusement park · Latvia
57Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
- LEIFHEIT CZ a. s.
leifheit.cz
Retail · Czech Republic
52Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
LEIFHEIT CZ a. s. operates as the exclusive distributor of the German Leifheit and Soehnle brands in the Czech and Slovak markets, with a 30-year presence. The company focuses on household products including cleaning, kitchen, and health-related items. The website reflects a medium-sized retail distributor with a professional and consistent brand presentation. Technically, the site uses modern frontend technologies such as React and Bootstrap, providing a good user experience and mobile optimization. However, the absence of privacy and cookie policies, security headers, and WHOIS data limits the overall security and compliance posture. Contact information is clearly provided, and social media channels are actively linked, enhancing trust and customer engagement.
Výrobky z ovčí vlny - Ovečkárna.czoveckarna.cz
—
63Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Daniel Střelecdanielstrelec.cz
Technology · Czech Republic
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Daniel Střelec operates as a seasoned frontend coder and WordPress developer based in the Czech Republic, offering custom web development, WordPress theme creation, web speed optimization, and consulting services. The website showcases a strong portfolio with numerous references and partner collaborations, positioning the business as a credible and experienced small-scale service provider in the technology sector. The business model focuses on direct client engagement with clear service boundaries and transparent pricing. Technically, the website is well-structured, mobile-optimized, and performant, employing modern web standards such as HTML5, CSS3, and SVG icons. However, no CMS or hosting provider details are explicitly identified, though WordPress expertise is highlighted. Security posture is moderate; while HTTPS is implied, no security headers or privacy policies are present, and WHOIS data is unavailable, which slightly reduces domain trust. No tracking or advertising scripts are detected, indicating a privacy-conscious approach but also a lack of formal privacy compliance documentation. Overall, the site is professional, trustworthy, and safe for general audiences.
Feropol s.r.o.feropol.cz
Manufacturing · Czech Republic
51Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Feropol s.r.o. is a Czech-based company specializing in the supply of copper, aluminum, bronze, and brass materials, complemented by custom manufacturing services such as CNC machining and material cutting. The company targets industrial and manufacturing clients requiring high-quality metal products and precision machining. Their website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site is built on WordPress with Elementor and integrates modern tools like Google Tag Manager and CookieYes for compliance and analytics. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a notable gap in domain transparency but does not detract significantly from the overall legitimacy based on website content and compliance indicators.
- EELEKTRO-LUMEN, s. r. o.
el-lumen.cz
Energy · Czech Republic
67Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ELEKTRO-LUMEN, s. r. o. is a Czech manufacturer specializing in interior and exterior LED lighting solutions with over 25 years of experience. The company emphasizes smart city integration through its Lumen Smart concept, offering intelligent control and management of public lighting infrastructure. The website reflects a well-established business with international design awards and multiple ISO certifications, targeting municipalities and commercial clients seeking energy-efficient lighting solutions. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager and Google Analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and form protection, though lacking some advanced security headers and explicit incident response information. The absence of WHOIS data reduces transparency and trust slightly, but overall the site is professional, accessible, and business credible.
FAVEX, s.r.o.favex.cz
Manufacturing · Czech Republic
69Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
FAVEX, s.r.o. is a well-established Czech company specializing in the supply of steel and metallurgical materials supported by a fully digitalized warehouse and just-in-time logistics services. The company targets industrial manufacturers and logistics clients primarily in the Czech Republic and neighboring countries, offering over 1500 stock items and tailored business solutions. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and reCAPTCHA for security and analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is compliant with GDPR and provides clear contact information, enhancing business credibility.
Flexton ITP s.r.o.flexton.cz
Manufacturing · Czech Republic
64Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Flexton ITP s.r.o. is a Czech Republic-based company specializing in intelligent technical parts and custom manufacturing services since 2014. The company positions itself as a professional and experienced provider in the manufacturing sector, emphasizing quality, certifications, and customer-focused service. Their website reflects a modern digital presence built on WordPress with Elementor, optimized for desktop and mobile users, and includes clear contact information and business descriptions. However, the absence of WHOIS data limits external verification of domain legitimacy. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. Overall, the website is professional and functional but could improve transparency and security compliance.
ARGO BOHEMIA, a.s.argogroup.cz
Transportation · Czech Republic
70Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
ARGO BOHEMIA, a.s. is a Czech logistics company specializing in international and domestic transportation of containers and oversized cargo. With nearly 30 years of experience since its founding in 1993, the company offers a comprehensive portfolio of freight services including road, rail, sea, and air transport, as well as container terminal operations. The website reflects a professional business presence targeting companies requiring reliable logistics solutions. Technically, the site employs common analytics and tag management tools such as Google Analytics and Google Tag Manager, with a custom or proprietary CMS platform. The site is mobile-optimized and provides clear navigation and contact information. Security posture is moderate, with HTTPS usage implied but lacking explicit security headers and published security policies. Privacy compliance is addressed through a cookie consent banner and a basic privacy policy page. WHOIS data is unavailable, limiting domain trust assessment, but the website content and contact details support legitimacy. Overall, the site presents a credible and professional logistics service provider with room for security and transparency improvements.
- CARU Praha s.r.o.
caru.cz
Transportation · Czech Republic
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
CARU Praha s.r.o. operates the website caru.cz, specializing in the sale and rental of various container types including shipping, storage, refrigerated, and frozen containers. The company maintains multiple depots across the Czech Republic, indicating a well-established regional presence. Their business model focuses on providing container solutions for transportation and storage needs, targeting businesses and individuals within the Czech market. The website content is professionally presented, with clear navigation and comprehensive contact options, supporting a medium-sized enterprise profile. Technically, the website is built on WordPress using CherryFramework and Bootstrap, leveraging common plugins such as Contact Form 7 and Complianz GDPR for compliance. The site enforces HTTPS and includes Google reCAPTCHA for form security. While performance and mobile optimization are adequate, there is room for improvement in accessibility and SEO. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Security posture is moderate, with HTTPS enforced and cookie consent mechanisms in place. However, the absence of explicit HTTP security headers and lack of a published security policy or incident response plan are areas for enhancement. The missing WHOIS registration data reduces domain trustworthiness, though the website's professional presentation and business information mitigate some concerns. Overall, the site presents a legitimate business with a solid digital presence but would benefit from improved security practices and transparency regarding domain registration and incident response to strengthen trust and compliance.
- DERUTEX, s.r.o.
derutex.cz
Manufacturing · Czech Republic
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
DERUTEX, s.r.o. is a medium-sized manufacturing company based in the Czech Republic, specializing in engineering and machining services. The company is positioned as a leading engineering firm in the northern Moravia region, offering a broad portfolio including design, production of special purpose machines, machining, and plastics processing. Their website reflects a professional business with clear service offerings and certifications such as ISO 9001 and TUV quality, enhancing their market credibility. Technically, the website is built on WordPress with modern JavaScript libraries and analytics tools, providing moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance elements such as a privacy policy or cookie consent. The absence of WHOIS data reduces domain trust, although the website content and contact information support legitimacy. Overall, the site is functional and professional but could improve in security and compliance areas.
Vosíme.czvosime.cz
Retail · Czech Republic
67Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Vosíme.cz is a regional Czech online food delivery service specializing in pizza and related food items, operating since 2015 with 32 branches across Moravia. The website is well designed using modern technologies such as Vue.js and Cloudflare CDN, providing a fast and mobile-optimized user experience. The business targets general consumers looking for quick pizza delivery or pickup options. Security posture is solid with HTTPS and Cloudflare protection, though some improvements are needed in privacy compliance and incident response transparency. Overall, the website is professional and trustworthy with moderate tracking and social media integration.
- Aall4u agency s.r.o.
all4u.cz
Technology · Czech Republic
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
all4u agency s.r.o. is a small Czech digital agency specializing in web design, graphic design, photography, marketing, and IT services. Established in 2011, the company offers a broad range of creative and technical services targeting small and medium businesses seeking simple, clear, and searchable websites along with virtual tours and product photography. The website reflects a consistent brand identity and provides clear contact and company registration information, supporting its legitimacy and local market presence. Technically, the website is built with standard HTML5 and CSS3, featuring responsive design for mobile devices. However, it lacks advanced frameworks or CMS platforms and does not include analytics or tracking technologies. Security posture is basic, with no detected security headers or explicit HTTPS confirmation, and no privacy or cookie policies are published. Overall, the site is functional and professional but could benefit from enhanced security and compliance features.
- Jiří Horák
kolemdokola.cz
Real Estate · Czech Republic
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Kolemdokola.cz is a small Czech business specializing in creating custom virtual tours using 360° panoramic photography for a variety of sectors including hospitality, real estate, cultural centers, and automotive interiors. The website presents a professional and content-rich experience targeting local businesses seeking to enhance their online presence with immersive virtual tours. The technical infrastructure relies on classic web technologies such as jQuery and JavaScript, with hosting and domain registration managed by REG-GRANSY. While the site is functional and well-structured, it lacks modern security headers and privacy compliance features such as cookie consent and privacy policies. Google Analytics is used for tracking without visible user consent mechanisms, which may pose compliance risks.
- Akrij Design Studio
vyroba-stranek.cz
Technology · Czech Republic
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Akrij Design Studio, operating via the domain vyroba-stranek.cz, is a Czech-based small business specializing in custom web design, virtual tours, photography, and related digital services. Established since 2001 with a domain registered in 2005, the company targets small and medium-sized enterprises and individual entrepreneurs primarily in the Czech Republic. Their service portfolio includes website creation, e-commerce solutions, virtual 360° panoramas, professional photography, DTP, and domain registration, positioning them as a comprehensive digital service provider in their local market. Technically, the website employs legacy JavaScript libraries such as jQuery 1.11.1 and plugins like Fancybox and jCarousel, alongside Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Hosting and domain registration are managed by REG-GRANSY, a Czech registrar, aligning with the business's regional focus. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks visible security headers and employs outdated JavaScript libraries, which may expose it to vulnerabilities. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The contact form includes a basic anti-spam field but lacks advanced protections. Overall, the security posture is moderate but could be significantly improved. The overall risk assessment suggests a trustworthy and professional business with a solid market presence but with room for improvement in security and privacy compliance. Strategic recommendations include updating technical components, implementing comprehensive privacy and cookie policies, enhancing security headers, and improving incident response readiness to strengthen trust and regulatory adherence.
Hospitality · Czech Republic
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Františkovy Lázně AQUAFORUM a.s. is a medium-sized hospitality company based in the Czech Republic, specializing in spa medical care, accommodation, gastronomy, and aquapark services. Founded in 2014, it is one of the largest employers in the Františkovy Lázně spa town, offering stable employment and quality wellness services. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site uses modern frontend technologies including Google Analytics and Modernizr, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. WHOIS data is missing, which reduces domain trustworthiness and warrants further investigation. Overall, the site is safe, professional, and trustworthy for general audiences.
- Packeta
zasielkovna.sk
Transportation · Slovakia
74Medium
NIS2 47 · GDPR 73
NIS2 47 · GDPR 73
Packeta.sk is a Slovak parcel delivery and logistics service website offering fast and reliable shipment transportation. The website targets general consumers and businesses requiring parcel delivery solutions within Slovakia and possibly neighboring regions. The business model focuses on transportation and logistics services, positioning itself as a regional player in the parcel delivery market. The website demonstrates good content quality and professional design with a consistent brand presence. Technically, it uses modern frontend technologies such as Bootstrap and Google Fonts, ensuring good mobile optimization and user experience. However, the website lacks explicit privacy and terms of service policies, and no contact information is clearly visible in the provided content. Security posture is moderate with no detected security headers and unknown SSL configuration, indicating room for improvement in security best practices. Cookie consent is implemented via CookieFirst, showing some compliance with privacy regulations. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
TAF Abrasivitafabrasivi.com
Manufacturing · Italy
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
TAF Abrasivi is a well-established Italian manufacturing company specializing in abrasive products, with a market-leading position in the production of flap discs and a broad product portfolio serving professional users. The company emphasizes quality and innovation, backed by 70 years of experience and a strong Made in Italy brand identity. Their website reflects a mature digital presence with multilingual support and comprehensive product information. Technically, the site is built on WordPress with modern SEO and privacy compliance tools, including Iubenda for cookie and privacy management, and Google Tag Manager for analytics. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers could be improved. The absence of WHOIS data is a notable gap, raising questions about domain registration transparency, but the overall business credibility and website professionalism mitigate immediate concerns. Strategic recommendations include enhancing security headers, publishing explicit security policies, and verifying domain registration details to strengthen trust.
Techniflex Sp. z o.o.incoflex.pl
Manufacturing · Poland
53Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Techniflex Sp. z o.o. operates the incoflex.pl website as a professional e-commerce platform specializing in manufacturing and selling abrasive discs under the Incoflex brand. The company has a strong market presence in Poland with a history dating back to 1955. The website targets both B2B and B2C customers, offering a wide range of products with detailed categorization and promotional content. Technically, the site uses modern web technologies including jQuery, Bootstrap, Tailwind CSS, and integrates analytics tools such as Google Tag Manager and Smartlook. The platform is built on Comarch e-Sklep, a known e-commerce CMS. Security posture is good with HTTPS enforced and CSRF protections in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR-aligned data protection officer contact. Overall, the website is professional, trustworthy, and well-maintained.
ATAatagroup.com
Manufacturing · Ireland
73Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
ATA Group is a global precision engineering company specializing in the manufacturing, supply, and distribution of cutting tools. With a presence spanning 11 facilities worldwide and headquartered in Cavan, Ireland, ATA has a longstanding legacy of nearly 60 years focused on quality and service to industrial clients. The website reflects a professional business model targeting industrial and manufacturing sectors with a clear emphasis on precision engineering products. Technically, the website is built on the Wix platform, utilizing Wix's Thunderbolt framework and integrated with HubSpot for analytics and marketing. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimizations. Security posture is moderate with HTTPS usage implied but no explicit security headers detected and no visible security or privacy policies. The absence of WHOIS registration data raises concerns about domain registration transparency, although the website content and branding appear consistent and professional. Overall, the site is functional and trustworthy from a business perspective but would benefit from enhanced security practices, privacy compliance, and transparency regarding domain registration.
Weiler Abrasivesweilerabrasives.com
Manufacturing · United States
65Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Weiler Abrasives is a well-established global leader in the manufacturing and distribution of abrasive products and brushes, serving a wide range of industrial sectors. The company emphasizes productivity partnership and innovation, with a history dating back to 1878 and operations in over 80 countries. Their website reflects a mature digital presence built on the HubSpot CMS platform, featuring comprehensive product catalogs, industry-specific solutions, and customer engagement programs. The technical infrastructure includes modern marketing and analytics tools, cookie consent mechanisms, and secure HTTPS implementation. Security posture is strong with appropriate headers and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not outweigh the professional presentation and global footprint. Overall, the website is high quality, user-friendly, and compliant with privacy regulations.
- SSTELLA GRUPPE
stella-gruppe.com
Manufacturing · Germany
58Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
STELLA GRUPPE is a German manufacturing company specializing in the development and production of precision grinding wheels for various industrial applications. The company positions itself as a specialist with ISO 9001 certification, emphasizing quality and custom solutions. The website is professionally designed, bilingual (German and English), and provides detailed product and company information targeting industrial manufacturers and businesses requiring precision grinding products. Technically, the website uses modern web technologies including service workers for PWA capabilities and is hosted on 1&1 IONOS infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no cookie consent mechanism is present, which may affect GDPR compliance. The WHOIS data is missing or unavailable, which raises some concerns about domain legitimacy, but the professional web presence and certifications mitigate this risk. Overall, the website is trustworthy and well-positioned in its niche but could improve privacy compliance and security headers.
- JIRNO
jirno.eu
Retail · Czech Republic
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
JIRNO is a Czech-based e-commerce retailer specializing in electrical components, industrial equipment, and smart home technology products. The website offers a broad catalog including batteries, lighting, cables, switches, and computer hardware, targeting both business and individual customers primarily in the Czech Republic and neighboring countries. The business model focuses on online retail sales complemented by servicing offerings. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages and currencies.
Excelsiorexcelsior-hotel.cz
Hospitality · Czech Republic
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Excelsior is a mountain hotel and wellness center located in the Moravian-Silesian Beskids in the Czech Republic. The business offers accommodation in hotel rooms and cottages, wellness and spa services including sauna and massages, event hosting for weddings and celebrations, and various activity packages targeting tourists, families, and couples seeking relaxation and nature experiences. The website is professionally designed using WordPress and Elementor, with multilingual support for Czech, English, and Polish. The technical infrastructure includes modern web technologies and Google Tag Manager for analytics. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance elements such as privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy but would benefit from improved privacy compliance and enhanced security practices.
PCsupport.cz s.r.o.balik123.cz
Transportation · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Balik123.cz is an online parcel shipping service operating primarily in the Czech Republic and EU countries. The company, operated by PCsupport.cz s.r.o., offers a simple three-step process for customers to prepare shipments, pay online, and have parcels picked up by courier the next day. The website is professionally designed with clear navigation and integrates social media and chat support tools. The business targets both individual and corporate customers seeking affordable international parcel delivery. Technically, the site uses a custom CMS with common JavaScript libraries and tracking tools, hosted by Gransy. Security practices include HTTPS and input validation but lack advanced security headers and published incident response policies. Privacy compliance is basic with cookie consent but no detailed GDPR disclosures. WHOIS data confirms domain legitimacy and consistency with the business age and operations. Overall, the site is functional and trustworthy but could improve security and privacy transparency.
- AADAMIK Company, s.r.o.
adamikshop.cz
Manufacturing · Czech Republic
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
ADAMIK Company, s.r.o. operates a professional B2B e-commerce website specializing in industrial equipment such as dust extraction systems, woodworking machinery, veneer presses, and related accessories. The company targets industrial manufacturers and woodworking businesses primarily in the Czech Republic. The website demonstrates a solid market position with a comprehensive product catalog and clear business information. Technically, the site is built on Joomla CMS with JoomShopping, using modern JavaScript libraries and frameworks, and includes standard e-commerce features such as shopping cart and user accounts. Security posture is good with HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.
Retail · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
mojemobilka.cz is a Czech Republic based e-commerce retailer specializing in mobile phones, cases, tempered glass screen protectors, and various mobile accessories. The company operates both online and through three physical stores, offering a wide range of products with over 8,000 items in stock. Their business model focuses on affordable mobile accessories targeting consumers seeking quality and variety. The website is built on WordPress with WooCommerce, leveraging standard e-commerce technologies and integrations such as GoPay for payment processing. The site demonstrates good technical maturity with HTTPS, security headers, and structured data for SEO. However, it lacks visible privacy and cookie policies, which impacts compliance and trust. No WHOIS data is available, which limits domain registration transparency and slightly reduces trustworthiness. Overall, the site is professional and functional, serving a medium-sized retail business in the Czech market.
Elektrokola LOVELEClovelec.cz
Transportation · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Elektrokola LOVELEC is a Czech-based e-commerce business specializing in the manufacture and sale of electric bicycles for men, women, and children. The company emphasizes quality with a lifetime warranty on frames and offers a variety of bike types including mountain, trekking, folding, city, and SUV electric bikes. The website is professionally designed, mobile-optimized, and provides clear navigation and product categorization, targeting cycling enthusiasts in the Czech Republic. Technically, the site uses the Shoptet e-commerce platform with integrations for Google Analytics, Microsoft Clarity, Facebook SDK, and Google Ads, indicating a mature digital marketing and analytics infrastructure. Security posture is good with HTTPS enforced and secure login forms, though some security headers could be improved. Privacy compliance is strong with a clear cookie consent mechanism and comprehensive privacy policy in Czech, aligned with GDPR requirements. Overall, the site presents a trustworthy and professional online presence for a small-sized retail business in the transportation sector.
Dveře Hrdinkadverehrdinka.cz
Manufacturing · Czech Republic
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Dveře Hrdinka is a small Czech family-owned business specializing in the manufacturing and sale of custom wooden doors, including interior and exterior doors, door frames, and accessories. The company emphasizes traditional craftsmanship and offers a range of products through its e-commerce platform. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of domestic customers seeking quality wooden doors. The technical infrastructure is based on Joomla CMS with common JavaScript libraries and marketing tools integrated, including Google Tag Manager and Smartsupp live chat. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, compliant with GDPR, and presents a legitimate business with consistent WHOIS data supporting its claims.
MADMONQmadmonq.gg
Retail
70Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
MADMONQ is a specialized e-commerce business focused on health and performance supplements tailored for gamers. The company positions itself as a niche leader offering jitter-free energy supplements designed to enhance gaming performance. Their digital presence is built on a modern WordPress platform with WooCommerce, integrating multiple marketing and analytics tools such as Google Tag Manager, TikTok Pixel, and Cookiebot for consent management. The website demonstrates excellent design quality, mobile responsiveness, and SEO optimization, targeting a global gaming audience. Security posture is strong with HTTPS enforced and security headers likely in place, though explicit privacy and terms of service documents are missing, which could impact compliance and trust. Overall, MADMONQ presents a professional and trustworthy online retail platform with room for improvement in privacy transparency and incident response readiness.
FunTax s.r.o.funtax.cz
Finance · Czech Republic
51Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
FunTax s.r.o. is a Czech Republic-based small business specializing in accounting, tax evidence, payroll processing, and custom module development for information systems. The company targets small and medium-sized enterprises, particularly in the Třinec region, offering professional and tailored financial services. The website reflects a local service provider with a clear focus on finance-related offerings and a consistent brand presence. Technically, the site is built on Joomla CMS, utilizing common JavaScript libraries such as jQuery and MooTools, and integrates Google Analytics for visitor tracking. The site performance is moderate with basic mobile optimization and accessibility features. Security posture is moderate; while HTTPS usage is implied, no explicit security headers or advanced protections are detected. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's founding year and no privacy protection, indicating transparency. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.