Security Directory

S

SmartestEnergy Limited

smartestenergy.com

10

SmartestEnergy Limited is a well-established energy company founded in 2000, specializing in providing energy supply, trading, and origination services with a strong focus on renewable and flexible energy contracts. The company targets large commercial and industrial businesses, independent renewable generators, and partners, positioning itself as a key player in the UK energy market with a significant market share and corporate backing by Marubeni Corporation. Their service offerings include fixed and flexible electricity supply, renewable supply, corporate PPAs, and energy trading solutions. Technically, the website demonstrates a mature digital infrastructure utilizing modern technologies such as EPiServer CMS, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, Cookiebot for consent management, and Microsoft Application Insights for telemetry. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a high level of digital maturity. From a security perspective, the website enforces HTTPS, uses reCAPTCHA on forms, and manages cookie consent effectively. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present, and there is no visible security policy or incident response contact information, which are areas for improvement. The absence of WHOIS domain registration data reduces transparency but does not negate the overall legitimacy supported by the website content and corporate affiliations. Overall, the website presents a professional, trustworthy, and business-focused digital presence with strong compliance to privacy and cookie regulations. Strategic recommendations include enhancing domain registration transparency, publishing a formal security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

A

adminmax

element.how

11

Element How is a specialized educational platform providing advanced tutorials, courses, and addons for Elementor users. The business targets web designers and developers seeking to enhance their Elementor skills with premium content and practical resources. The website demonstrates a mature digital infrastructure built on WordPress with Elementor, optimized for performance and mobile responsiveness. Security measures include HTTPS, anti-spam protections, and GDPR-compliant cookie consent, though explicit security policies and incident response contacts are absent. Overall, the site presents a trustworthy and professional presence with strong customer trust signals and a clear business model focused on premium educational content.

The website shipleycreativetransfer.com serves primarily as an SFTP login portal, likely intended for internal users or clients to securely transfer files. The site lacks public-facing business content such as company information, privacy policies, or contact details, indicating it is not designed for broad public engagement. The domain was registered in 2018 and is maintained by a reputable registrar, IONOS SE, with no privacy protection, supporting legitimacy for a small business or service portal. The website's technical infrastructure is based on ASP.NET Web Forms, an older technology, and the site lacks modern security features such as HTTPS enforcement and security headers. The content is minimal and focused solely on login functionality, with no analytics or advertising scripts detected.

P

ProProfs Chat

live2support.com

10

ProProfs Chat is a technology company offering AI-powered live chat software designed to enhance customer support and sales for businesses. Positioned as a mature SaaS provider, it offers a range of subscription plans including a free tier, targeting small to medium businesses seeking real-time customer engagement solutions. The company is a subsidiary of ProProfs, with a strong brand presence and positive customer ratings. Technically, the website employs modern JavaScript libraries, analytics tools, and is optimized for mobile devices, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include verifying domain registration, publishing detailed security and incident response policies, and enhancing transparency around data protection roles.

W

WWW.KOTVA.CZ, a.s.

mincer.cz

10

Mincer.cz is a specialized e-commerce retailer and contractual partner of the Czech National Bank (ČNB), offering a curated selection of gold and silver commemorative coins and numismatic accessories. The website targets numismatists, collectors, and organized numismatic societies, providing both retail sales and cooperative opportunities. The business operates primarily in the Czech Republic with a small company profile and a focused niche market position. Technically, the website is built on the Upgates e-commerce platform, leveraging modern analytics and marketing tools such as Google Analytics 4, Facebook Pixel, and Matomo, alongside live chat support. The site is well-optimized for mobile devices and demonstrates excellent design quality and user experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust and business credibility scores. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable platform for numismatic product sales.

P

Penta Hospitals CZ

pentahospitals.cz

10

Penta Hospitals CZ is a major healthcare operator in the Czech Republic, managing a broad network of acute and subsequent care hospitals, social care homes, ambulatory services, and home healthcare. As part of the larger Penta Hospitals International group, it holds a strong market position with multiple subsidiaries and a comprehensive service offering. The website reflects a mature digital presence with professional design, clear navigation, and extensive content about their services and history. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates advanced SEO and privacy tools such as Yoast SEO and Cookiebot. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data slightly reduces trust but does not detract from the overall legitimacy and professionalism of the organization. Privacy compliance is well addressed, with a comprehensive GDPR policy and cookie management. Overall, the site demonstrates a high level of business credibility and digital maturity.

S

Shipley Creative

shipleycreative.com

54

Shipley Creative is a well-established UK-based company specializing in super-fast design, print, and direct mail services for businesses across the UK. With over a decade of experience, they offer a comprehensive suite of services including graphic design, digital printing, direct mail, motion graphics, and web-to-print solutions. Their market position is solid, supported by certifications such as Cyber Essentials and Safe Supplier verification, and a strong client base evidenced by testimonials and social media presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies and third-party services for analytics, reviews, and consent management. The site is mobile-optimized and demonstrates good SEO practices. Security posture is strong with HTTPS, reCAPTCHA, and bot management cookies, though there is room for improvement in security headers and DNSSEC implementation. While privacy compliance is addressed through a detailed cookie consent mechanism, the absence of explicit privacy policy and terms of service pages is a notable gap. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve trust and compliance. Overall, the website presents a professional and trustworthy front for Shipley Creative, with recommendations to bolster privacy documentation, security headers, and DNS security to further strengthen their digital maturity and compliance posture.

K

KISA

kisa.it

50

KISA is a well-established municipal IT service provider based in Saxony, Germany, founded in 2003. The company specializes in providing IT infrastructure, software solutions, data protection, and digitalization services tailored for public administration and municipal clients. Their market position is strong within the regional government sector, supported by a comprehensive service portfolio and positive client testimonials. Technically, the website is built on a modern stack including Bootstrap 4, jQuery, and a custom GeoCMS, with good mobile optimization and accessibility features. Security posture is solid with HTTPS, DNSSEC, and privacy-conscious analytics, though some advanced security headers and explicit security policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, featuring clear cookie consent mechanisms. No blocking or WAF interference was detected, allowing full content access and analysis.

HARTMANN is a leading healthcare company specializing in medical devices, hygiene, and wound care products. The website targets healthcare professionals and medical sector stakeholders primarily in France, offering a comprehensive catalog of medical and hygiene products. The company positions itself as a market leader with a broad portfolio of key services including incontinence management, wound care, surgical sets, and diagnostics. The website is built on IBM WebSphere Portal technology and incorporates modern web technologies such as jQuery, JWPlayer, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. WHOIS data is missing, which slightly impacts trustworthiness but the overall digital presence and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility compliance.

C

Care Comm

carecomm.cz

59

Care Comm is a small Czech healthcare service provider specializing in publishing professional medical journals, website development, and organizing medical congresses. The company targets healthcare professionals and organizations within the Czech Republic. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The site demonstrates good design quality and mobile optimization but lacks advanced accessibility and SEO features. Security posture is weak due to absence of security headers and no visible privacy or cookie policies. WHOIS data is unavailable, limiting trust assessment. Overall, the website is functional and professional but requires improvements in security and compliance to enhance trustworthiness.

C

Care Comm s.r.o.

florence.cz

52

Florence.cz is a Czech professional healthcare journal focused on nursing and related medical professions. Operated by Care Comm s.r.o., it provides current news, expert articles, educational resources, and job listings for healthcare professionals. The website is well-structured, content-rich, and targets healthcare practitioners primarily in the Czech Republic. Technically, the site uses a mix of JavaScript libraries including jQuery, Google Fonts, and integrates third-party advertising and tracking services such as Facebook Pixel and Google Analytics. The site is served over HTTPS with cookie consent mechanisms in place, reflecting good privacy compliance. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency. Security headers are not visibly implemented, and no explicit security or incident response policies are published. Overall, the site presents a professional and trustworthy front for its niche audience but would benefit from enhanced security practices and clearer domain registration information.

AMCA, spol. s r. o. operates the website cslr.cz, serving as the online presence for the Czech Society for Wound Healing (ČSLR). The organization focuses on providing professional resources, organizing congresses, and offering educational courses related to wound care. The website targets healthcare professionals and members of the wound care community primarily in the Czech Republic. The business model is that of a professional society supported by memberships, events, and partnerships. The domain has been active since 2003, indicating a well-established presence in the healthcare sector. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and cookie consent mechanisms compliant with GDPR. The site is mobile optimized and uses structured data (JSON-LD) to enhance search engine understanding. Performance is moderate with good SEO and accessibility basics, though some improvements could be made in accessibility and security policy disclosures. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent is implemented properly, but there is no explicit security policy or incident response information published. The WHOIS data is consistent with the website content and business claims, supporting legitimacy. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website presents a professional and trustworthy image with good content quality and technical implementation. Recommendations include publishing a security policy, adding incident response contacts, and improving accessibility features to enhance compliance and user experience further.

ArgoMed.sk is a Slovak e-commerce platform specializing in the distribution and retail of medical supplies, including healthcare materials, disinfection products, diabetic supplies, and related accessories. The website serves healthcare professionals, medical institutions, and individual customers within Slovakia, positioning itself as a regional provider with a sister site in the Czech Republic. The business operates under the parent company Promedica, focusing on healthcare and retail sectors. Technically, the site is built on ASP.NET WebForms with jQuery and integrates Google Tag Manager for analytics. The site demonstrates good content quality with detailed product categorization and a consistent brand presentation. Security-wise, the site enforces HTTPS and provides cookie consent mechanisms with IP anonymization in analytics, but lacks advanced security headers and formal security policies. Privacy compliance is basic, with no explicit privacy policy or terms of service pages detected. Overall, the site is functional and professional but would benefit from enhanced security and compliance documentation.

E

Economist Impact

economistimpact.com

66

Economist Impact is a specialized division of The Economist Group focused on partnering with corporations, foundations, NGOs, and governments to drive change in key global themes such as sustainability, health, and globalisation. The organization leverages a combination of independent research, bespoke content creation, advertising, sponsorship, and large-scale events to influence policy and business decisions worldwide. The website reflects a mature digital presence with professional design, clear navigation, and multimedia content that supports its mission. Technically, the site is built on modern web frameworks including React and Next.js, uses Contentful as a CMS, and integrates advanced monitoring and analytics tools such as New Relic. The presence of a consent management platform indicates attention to privacy compliance, particularly GDPR. Performance and mobile optimization are strong, contributing to a positive user experience. From a security perspective, the site uses HTTPS and monitoring tools but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or suspicious elements were detected in the content or scripts. The WHOIS data for the subdomain is not publicly available, which is typical for subdomains, and the domain is strongly associated with the reputable Economist brand. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and providing vulnerability disclosure information to further strengthen trust and compliance.

L

Loblaw Companies Ltd.

loblaw.ca

66

Loblaw Companies Ltd. is a leading Canadian retail company specializing in grocery, health, beauty, financial services, and fashion. The website showcases a comprehensive portfolio of brands and services aimed at serving Canadian consumers with a focus on affordability, health, and lifestyle. The company operates an extensive network of stores and subsidiaries, positioning itself as a dominant player in the Canadian retail market. Technically, the website is built on modern web technologies including React and Next.js, with integrations for analytics and authentication such as Google Analytics, Google Tag Manager, and Okta. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses secure authentication mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the website presents a professional, trustworthy, and secure digital presence for Loblaw Companies Ltd. The lack of WHOIS data is attributed to privacy protection, which is justified for a large enterprise. Strategic recommendations include publishing a vulnerability disclosure policy and enhancing incident response transparency to further strengthen security posture.

Albertsons Companies, Inc. is a leading retail grocery chain in the United States operating numerous supermarket brands. The company provides grocery and pharmacy services through physical stores and online platforms, targeting general consumers across the country. The business is well-established with a long history dating back to 1939 and operates at an enterprise scale with multiple subsidiaries. The website's technical infrastructure includes protection by Incapsula Web Application Firewall (WAF), which currently blocks access to the site's content, preventing detailed analysis of the site's technical maturity and user experience. Due to this blocking, no metadata, forms, or contact information could be extracted, limiting the assessment of digital maturity and compliance. From a security perspective, the presence of a WAF indicates a focus on protecting the site from attacks, but the lack of accessible content prevents evaluation of security headers, SSL configuration, or privacy compliance. WHOIS data confirms the domain is legitimately registered to Albertsons Companies, Inc., consistent with the business claims and history. Overall, the site is rated safe in terms of content safety, with no adult or questionable content detected. However, the blocking by the WAF significantly limits the ability to assess the website's full security posture, privacy compliance, and user experience. Strategic recommendations include improving content accessibility for analysis, publishing clear privacy and security policies, and enhancing security headers and compliance disclosures.

SlotMagie is a German online gambling platform specializing in slot games, including original Merkur Spielothek titles. The platform emphasizes legal and secure gaming with features such as PayPal payment integration and promotional free spins. The website targets German-speaking adult users interested in online casino gaming. Technically, the site uses modern web technologies including Angular and integrates tracking tools like Microsoft Clarity and SalesManago for analytics and marketing purposes. Hosting and DNS services are provided by Cloudflare, which also offers privacy protection for the domain registration. Security posture is moderate but lacks visible security headers and published policies, which are critical for compliance and user trust. The absence of explicit privacy, cookie, and terms of service policies, as well as contact information, represents compliance and transparency gaps. Overall, the site is functional and moderately optimized for mobile users but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

W

Whow Games GmbH

merkur24.com

69

Merkur24 is a social casino gaming platform operated by Whow Games GmbH, offering free-to-play casino games such as slots, blackjack, and roulette. The platform targets adult users across multiple European languages and markets, emphasizing entertainment without real money gambling. The website demonstrates a solid technical infrastructure with modern web technologies, fast performance, and mobile optimization. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR standards. Security posture is good with HTTPS enforcement and secure login forms, though explicit security policies and incident response details are absent. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but overall business credibility is supported by consistent branding and privacy practices.

A

adSYSTEM

adsystem.eu

51

adSYSTEM is a Czech-based technology company specializing in the design and implementation of internet e-shops, websites, CMS, and CRM systems with rental options. The company targets businesses and organizations seeking integrated administration and publication systems for internet and intranet applications. Their market position is niche-focused within the Czech Republic, offering a proprietary CMS platform and related modules such as e-shop management, CRM, cash register integration, and SEO optimization. The website content is professional, well-structured, and optimized for mobile devices, reflecting a good level of digital maturity. Technically, the website employs standard web technologies including HTML5, CSS3, and jQuery 3.2.1, hosted by a reputable Czech registrar and hosting provider (INTERNET CZ, a.s.). The site enforces HTTPS with strong SSL configuration and basic security headers, though there is room for improvement by adding advanced security headers and publishing a security policy. The cookie consent mechanism and privacy policy indicate awareness of GDPR compliance, enhancing the site's privacy posture. From a security perspective, the site demonstrates good practices such as secure login forms and no visible vulnerabilities or exposed sensitive data. However, the absence of a formal security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for maturity growth. Overall, the risk level is low with no critical issues detected. Strategically, adSYSTEM should focus on enhancing security transparency, expanding accessibility features, and maintaining up-to-date technical components to sustain trust and compliance. The website's professional presentation and clear contact information support strong business credibility within its market segment.

N

ngemailing.cz

ngemailing.cz

55

Ngemailing.cz is a Czech-language SaaS email marketing platform offering affordable, feature-rich email campaign services with a focus on high deliverability and automation. The company targets Czech-speaking businesses and marketers seeking reliable email marketing solutions. The website demonstrates a mature digital presence with comprehensive content, customer testimonials, and active social media engagement. Technically, the site is built on WordPress with the Avada theme and integrates modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and reCAPTCHA, ensuring a robust infrastructure. Security posture is strong with HTTPS enforcement, security headers, and consent mechanisms, though the absence of a dedicated security policy and incident response contact is noted. The lack of WHOIS data reduces domain transparency and trust slightly but does not detract significantly from the overall professional presentation. Strategic recommendations include publishing explicit security policies, adding incident response contacts, and implementing vulnerability disclosure mechanisms to enhance trust and compliance.

F

Fondation de France

fondationdefrance.org

49

Fondation de France is a leading philanthropic foundation in France, providing support and services to donors, founders, and project leaders to promote social good and charitable causes. The website is professionally designed using Joomla CMS and modern frameworks like Yootheme and UIkit, with good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no explicit security policy or incident response contacts are publicly available. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Overall, the site demonstrates a mature digital presence with extensive content and clear calls to action, supporting its role as a major non-profit entity.

W

WWK Lebensversicherung a. G.

wwkarena.com

65

WWK Lebensversicherung a. G. operates the WWK ARENA official website, providing comprehensive information about the stadium in Augsburg, Germany. The site serves fans and visitors with details on ticketing, hospitality, sustainability, and visitor services, positioning itself as a key digital touchpoint for the stadium experience. The business model focuses on information dissemination and enhancing visitor engagement, supported by strong branding aligned with the parent insurance company WWK. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates third-party services like YouTube and eTracker analytics, with a cookie consent mechanism ensuring GDPR compliance. Accessibility is enhanced by tools such as Eye-Able, reflecting a commitment to inclusive design. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though improvements like enabling DNSSEC and adding security headers are recommended. Overall, the website is professional, trustworthy, and well-structured, supporting the business's digital presence effectively.

The domain syryklimes.cz is registered since 2015 with a Czech registrar and hosted by WEDOS. The website itself contains only a minimal HTML page that redirects visitors to korekmikulov.cz, indicating that it does not host original business content or provide direct services. This limits the ability to assess the business operations or digital maturity of the entity behind the domain. Technically, the site lacks metadata, security headers, privacy policies, or any form of user engagement mechanisms. The absence of HTTPS information and security best practices further reduces the security posture. Overall, the website appears to be a placeholder or redirect domain rather than an active business site.

P

Pedro's Foodtruck

pedrosfoodtruck.cz

42

Pedro's Foodtruck is a small hospitality business operating a street food truck and bistro in the South Moravia region of the Czech Republic. They specialize in American-style comfort food such as pulled meat burgers, hot dogs, tacos, and quesadillas, emphasizing local ingredients and homemade sauces. The business has a strong local presence with positive customer reviews and media recognition, positioning itself as a leader in the regional street food market. Technically, the website is built on Joomla CMS using the UIkit framework, offering a visually appealing and mobile-optimized experience. However, the site lacks critical privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS usage but missing security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

U

Vinařské akce - Ulej.cz

ulej.cz

45

Ulej.cz is a Czech regional platform dedicated to promoting wine-related events such as tastings, wine festivals, and winery tours primarily in the South Moravian wine regions including Valtice, Znojmo, and Moravská Nová Ves. The website serves wine enthusiasts, tourists, and wineries by providing event listings, filtering options, and user account features for event submissions. Technically, the site is built on Joomla CMS with Yootheme Pro and UIkit frameworks, hosted by Wedos, a Czech hosting provider. The site demonstrates good design quality, mobile optimization, and clear navigation, though lacks comprehensive privacy and cookie policies. Security posture is moderate with no detected advanced security headers or incident response information. Overall, the site is legitimate and consistent with its regional focus but would benefit from enhanced privacy compliance and security best practices.

A

Agentura Osma a.s.

nutrivino.cz

51

Nutrivino.cz is a specialized digital platform launched in 2023 by Agentura Osma a.s. to assist wine producers in the Czech Republic with compliance to new EU legislation requiring detailed nutritional and ingredient labeling on wine products. The platform offers QR code management, label design integration, and online presentation of mandatory information, targeting wine producers and distributors. The website is professionally designed using modern web technologies like Bootstrap and provides clear contact information for sales and technical support. However, it lacks privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS implied but no visible security headers or incident response contacts. Overall, the domain registration aligns well with the business claims, indicating legitimacy.

O

OSLAVAN, a.s.

restauracenastatku.eu

65

The website www.restauracenastatku.eu represents a small hospitality business named OSLAVAN, a.s., operating a hotel and restaurant called "NA STATKU" in the Czech Republic. The business offers accommodation primarily for work groups, traditional home-style cuisine, event hosting services including weddings and corporate events, and leisure activities such as wellness, minigolf, and a children's playground. The website is professionally designed with good content quality and clear navigation, targeting local visitors and families. Technically, the site uses modern web technologies including Google Analytics and SmartSupp chat, with responsive design and accessibility features. Security posture is adequate with HTTPS enabled and secure form handling, but lacks some important security headers and privacy compliance elements such as privacy and cookie policies. WHOIS data is not publicly available due to EURid privacy policies, which is common for .eu domains. Overall, the site is legitimate and trustworthy but could improve privacy compliance and security header implementation.

S

Střední vinařská škola Valtice, příspěvková organizace

svisv.cz

47

Střední vinařská škola Valtice is a well-established secondary educational institution in the Czech Republic specializing in viticulture, horticulture, and related vocational training. Founded in 2003, it offers both maturita and apprenticeship programs, lifelong learning courses, and public services including wine tastings and an e-commerce wine shop. The school maintains strong partnerships with regional and industry organizations, enhancing its educational offerings and community presence. The website is professionally designed with good content quality and clear navigation, targeting students, parents, and the general public interested in viticulture education and services. Technically, the site uses Joomla CMS with modern libraries such as jQuery, Bootstrap, and UIkit, and integrates Google Analytics and Tag Manager for tracking. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and explicit security policies. Privacy compliance is basic but present, with a GDPR policy and cookie banner. Contact information is clearly provided, supporting business credibility. Overall, the site is trustworthy and functional with room for security and compliance improvements.

G

garcy.studio

garcy.studio

67

Garcy.studio is a professional design studio specializing in branding, website design, and digital product development including apps and SaaS. The company positions itself as a trusted partner for businesses worldwide, emphasizing quality, client satisfaction, and delivering joyful, effective design solutions. The website reflects a modern, well-crafted digital presence with multimedia content and clear service offerings. Technically, the site leverages Webflow CMS, integrates Google Fonts, Google reCAPTCHA, Smartlook analytics, and Vimeo for video content, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and bot protection mechanisms in place, though security headers and incident response policies could be enhanced. Privacy compliance is good, with a comprehensive privacy policy and terms of service available. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

A

ANYCARE s.r.o.

anycare.cz

50

ANYCARE s.r.o. is a Czech healthcare company specializing in telemedicine services by providing remote medical examination devices (TytoCare) and online doctor consultations. The company targets patients, healthcare professionals, organizations, and social care institutions, addressing the shortage of practical doctors in the Czech Republic. The website is professionally designed, mobile-optimized, and uses modern analytics and tracking tools such as Google Tag Manager and Hotjar. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS and secure forms, but could be improved by adding security headers and publishing incident response information. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and provides clear contact information and business details, but should address compliance and transparency gaps to enhance trust and security.

The website represents a group of Czech industrial companies under the ZPS brand, specializing in manufacturing, foundry, mechanical engineering, and transportation services. The companies are well-established with a domain age dating back to 1996, indicating a mature business presence in the Zlín region. The site primarily serves as a contact and informational portal for these entities, targeting industrial clients and partners. Technically, the website is basic with minimal content and lacks modern web technologies, SEO optimization, and mobile responsiveness. There is no evidence of CMS usage or advanced frameworks. Security features such as HTTPS and security headers are either missing or not confirmed, and no privacy or cookie policies are present, indicating low digital maturity. From a security perspective, the site shows limited security posture with no visible incident response contacts or vulnerability disclosures. The absence of HTTPS and security headers reduces trust and exposes potential risks. However, no explicit vulnerabilities or malicious content were detected. The business credibility is supported by consistent WHOIS data and clear contact information. Overall, the website is functional for basic contact purposes but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

Oborová zdravotní pojišťovna zaměstnanců bank, pojišťoven a stavebnictví (OZP) is the third largest employee health insurance company in the Czech Republic. The company offers a broad range of benefits including free preventive check-ups, financial contributions to preventive programs, and discount programs. OZP emphasizes convenience by enabling clients to handle basic administrative tasks online, supported by their VITAKARTA online service and mobile applications. The website reflects a mature digital presence with comprehensive content, clear navigation, and multiple client engagement channels including a chatbot and online appointment booking. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartlook, all integrated with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be explicitly confirmed. The absence of WHOIS data limits domain trust analysis, but the website's professional presentation, clear business information, and social media presence strongly support legitimacy. Overall, OZP demonstrates a well-established healthcare insurance business with a solid digital infrastructure and compliance focus.

G

Granex.cz

granex.cz

63

Granex.cz is a Czech Republic-based e-commerce retailer specializing in automotive spare parts and accessories. Established in 2012, the company offers a wide range of products including parts for various car brands, motor oils, additives, and automotive cosmetics. The website targets individual consumers and businesses in the automotive sector within the Czech market. The business maintains a moderate market position with a focus on regional customers and online sales. Technically, the website is built on the Kvikshop e-commerce platform, hosted on Amazon AWS infrastructure, and employs modern web technologies such as Google Analytics and Tag Manager for tracking and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. No signs of adult or questionable content were found, and the domain registration data is consistent and trustworthy. Overall, the website demonstrates a solid digital presence but would benefit from enhanced privacy compliance and security best practices.

The website c-system.cz is currently a minimal placeholder indicating that the domain is no longer actively used and directs visitors to Globesystem.cz. The original business behind the domain appears to have migrated or consolidated under the Globesystem brand. The website uses basic technologies including jQuery and Mapy.cz API, hosted on the Domena.cz platform. The site lacks substantive content, contact information, privacy policies, and security best practices, reflecting a low digital maturity level. Security posture is minimal with no visible security headers or HTTPS confirmation in the provided data. Overall, the site poses low risk but also offers limited trust or engagement value. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, and providing clear contact information to improve credibility and compliance.

K

Kyndryl

kyndryl.com

78

Kyndryl is a leading global IT infrastructure services provider specializing in designing, building, managing, and modernizing mission-critical technology systems for enterprises worldwide. The company offers a broad portfolio of services including applications, data and AI, cloud, digital workplace, network and edge, cyber resilience, and consulting. With a presence in over 60 countries and a strong alliance ecosystem, Kyndryl positions itself as a trusted partner for digital transformation and operational excellence. The website reflects a mature digital presence with comprehensive content, multi-language support, and professional branding. Technically, the site leverages Adobe Experience Manager, modern JavaScript libraries, and analytics tools such as Microsoft Clarity and Demandbase, indicating a well-maintained and performance-conscious infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though the absence of a public vulnerability disclosure policy and incident response contacts suggests areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, though the lack of WHOIS data introduces some uncertainty about domain registration transparency.

Ž

ŽIVOT 90, z. ú.

zivot90.cz

53

ŽIVOT 90 is a Czech non-profit organization dedicated to supporting seniors in independent living, decision-making, and social participation. The website showcases a broad range of services including helplines, emergency care, advisory centers, respite and care services, physiotherapy, and community engagement through their PROSTOR 90 center and theatre. The organization is well positioned in the Czech social services sector with strong partnerships and government support. Technically, the website employs modern JavaScript libraries such as jQuery, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, though no CMS or hosting provider details were detected. Performance is moderate with good user experience and navigation clarity. Security posture is solid with HTTPS enforced and cookie consent implemented. However, the absence of security headers and a published security policy or incident response contact reduces the overall security maturity. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with cookie consent but no explicit privacy or terms of service pages found. Overall, the website is trustworthy and professional, serving a general audience safely. The lack of WHOIS data is a concern for domain legitimacy but the content and partner affiliations support authenticity. Strategic improvements in security headers, privacy documentation, and WHOIS transparency are recommended.

Ž

Život Plus, z.ú.

zivotplus.cz

50

Život Plus, z.ú. is a Czech non-profit organization dedicated to providing social services primarily for seniors, persons with disabilities, and individuals with chronic illnesses. Their key offerings include emergency care services, professional social counseling, and educational courses for the public. The organization has a strong regional presence across eight regions in the Czech Republic and has been operational for over 27 years, reflecting a well-established market position. The website clearly communicates their mission, services, and contact information, supporting their credibility and trustworthiness. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel, with a cookie consent mechanism in place to comply with privacy regulations. The site is hosted by Wedos, a reputable Czech hosting provider, and demonstrates good mobile optimization and SEO practices. While the site uses HTTPS and some security best practices, there is room for improvement in implementing comprehensive security headers and publishing formal security policies. From a security perspective, the website maintains a good posture with no detected vulnerabilities or exposed sensitive data. However, it lacks publicly available incident response contacts and vulnerability disclosure mechanisms, which are recommended for enhanced security maturity. Privacy compliance is well addressed with accessible privacy and cookie policies, including GDPR compliance indicators. Overall, Život Plus, z.ú. presents a professional, trustworthy, and well-maintained online presence suitable for its non-profit social service mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular updates to software components to mitigate potential risks.

S

STAPRO s. r. o.

stapro.cz

59

STAPRO s. r. o. is a Czech-based company specializing in healthcare information technology solutions, providing a comprehensive range of clinical, laboratory, and management systems primarily for healthcare providers across Europe. Their product portfolio, notably the FONS product line, supports healthcare institutions with modern, secure, and integrated IT systems designed to improve healthcare quality and operational efficiency. The company maintains a strong market position with over 200 hospitals and 550 laboratories using their systems, supported by a sizable user base exceeding 88,000 users. Their business model focuses on software development, integration services, and consulting within the healthcare sector. Technically, the website is built on WordPress with modern plugins such as MasterSlider and Complianz for GDPR compliance. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. Security measures include HTTPS enforcement and cookie consent management, though additional HTTP security headers could enhance protection. Analytics are implemented via Google Analytics with user consent mechanisms in place. From a security perspective, the site shows a mature posture with no evident vulnerabilities or exposed sensitive data. However, the absence of explicit incident response contacts and security.txt files suggests room for improvement in transparency and readiness. The company holds relevant certifications, including MDR Class IIb medical device certification, reinforcing trustworthiness. Overall, STAPRO presents a professional and credible online presence aligned with its healthcare IT business focus. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving accessibility features to further strengthen compliance and user trust.

S

SeneCura s.r.o.

senecura.cz

71

SeneCura s.r.o. is a leading private healthcare provider specializing in senior care homes and specialized dementia and Alzheimer's care centers across the Czech Republic. Operating 17 SeniorCenters, the company offers comprehensive 24/7 care services with a strong focus on individualized, respectful treatment. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to seniors and their families. Technically, the site is built on WordPress with modern SEO and analytics tools, including Google Analytics 4 and Facebook Pixel, integrated with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and use of security plugins, though some HTTP security headers could be improved. The domain registration is consistent with the business claims, showing a legitimate and established entity. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

The website moore.cz is currently inaccessible, returning a 403 Forbidden error page that blocks access to any substantive content. The domain is registered since 2009 under REG-ASCIO with name servers hosted by SiteGround, indicating a stable and legitimate registration. However, the lack of accessible content prevents a full assessment of the business, its services, or its compliance posture. No privacy, cookie, or terms of service policies are present, nor is there any contact information or forms available on the page. The technical infrastructure appears minimal with no detectable scripts or analytics, and no security headers are observed. Overall, the website is in a blocked or restricted state, limiting the ability to evaluate its digital maturity or security posture effectively.

WWW.KOTVA.CZ, a.s. operates a real estate rental business specializing in office, residential, storage, and parking spaces located in a historic building in the center of Prague. The company targets businesses and individuals seeking premium rental spaces in Prague 1, leveraging the unique architectural and historical value of their property. The website presents a professional image with clear descriptions of services and contact information, positioning the company as a niche local real estate provider with a small but stable tenant community. Technically, the website uses modern web technologies including Google Analytics for tracking and Google Maps API for location services. The site is mobile responsive and well-structured, though it lacks some advanced accessibility features and explicit security headers. The absence of a CMS or hosting provider information limits deeper infrastructure insights. Performance is moderate with good SEO practices evident through meta tags and structured content. From a security perspective, the website uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency and readiness. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is not uncommon for small businesses. Overall, the website is safe, professional, and functional with moderate risk due to missing privacy and security policy disclosures. Strategic improvements in compliance and security posture would enhance trust and reduce potential regulatory risks.

I

ICZ Group

icz.cz

63

ICZ Group is a Czech-based technology company specializing in integrated software and network solutions. The company positions itself as a supplier of information technologies, systems, and services aimed at improving business efficiency for its clients. The website content is professionally presented in Czech and targets business clients seeking IT solutions. The company appears to be medium-sized and founded around 2017, with a focus on B2B services in the technology sector. Technically, the website is built on WordPress CMS with modern plugins such as Yoast SEO and Cookiebot for privacy compliance. It uses Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS registration data is a notable concern, potentially impacting domain legitimacy and trust. Overall, the website is professional and secure but would benefit from enhanced transparency regarding security policies and contact information. The missing WHOIS data reduces trustworthiness and should be investigated. Strategic recommendations include adding security headers, publishing security and incident response policies, and providing clear contact details to improve credibility and compliance.

E

EUC

euc.cz

69

EUC.cz is the largest outpatient healthcare provider in the Czech Republic, operating clinics, mamocenters, pharmacies, and laboratories serving approximately one million patients annually. The website presents a professional and consistent brand image targeting Czech healthcare consumers. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent management. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent denying tracking by default, though security headers and explicit incident response policies are absent. No contact emails or phone numbers are directly visible, and no terms of service page was found. Overall, the site is trustworthy and well-positioned in its market segment.

C

ComSource s.r.o.

comsource.cz

69

ComSource s.r.o. is a Czech IT company specializing in integrated security solutions for businesses, with over 15 years of market presence. Their core offerings include IT architecture, operational support, infrastructure transformation projects, cybersecurity, networking, data analytics, and ICT training. The company targets critical infrastructure, education, government, healthcare, e-commerce, and medium to large enterprises. Their website reflects a mature digital presence with professional design, clear navigation, and multi-language support. Technically, the site runs on WordPress with modern plugins and includes a comprehensive cookie consent mechanism, though Google Analytics is installed but not configured. Security posture is strong with HTTPS and reCAPTCHA usage, but lacks some security headers and explicit privacy and terms pages. Contact information is complete and includes multiple channels, enhancing business credibility.

P

Paycom

paycomdfw.com

70

Paycom is a well-established enterprise technology company founded in 1998, specializing in integrated payroll and human capital management software solutions. The website presents a comprehensive suite of services targeting businesses of all sizes across the United States, emphasizing automation, a single database architecture, and AI-driven features. The brand is consistently represented with professional design, clear navigation, and rich multimedia content, reinforcing its market leadership in HR and payroll software. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, ensuring fast performance and excellent mobile responsiveness. The infrastructure appears robust with CDN usage and optimized assets. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and references ISO 27001 and SOC certifications, indicating a mature security posture. However, some standard security headers are not explicitly detected, and there is no public vulnerability disclosure or incident response contact information, which could be improved. The absence of WHOIS data for the domain www.paycomdfw.com introduces some uncertainty about domain legitimacy, though the site content aligns closely with the official Paycom brand and links to verified corporate domains. Overall, the website demonstrates strong business credibility and technical maturity with minor gaps in security transparency and domain registration clarity. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure policies, and clarifying domain registration details to bolster trust and compliance.

Rek.ai, operated by Sandskogen AI Aktiebolag, is a Swedish technology company specializing in artificial intelligence solutions for website personalization. Founded in 2018, the company targets businesses seeking to enhance user experience through AI-driven personalized content and analytics. Their market position is that of a niche AI personalization provider primarily serving the Scandinavian region. The website reflects a modern technical infrastructure built on React and Next.js frameworks, with Cloudflare DNS services and Cookiebot for privacy compliance. The site is professionally designed, mobile-optimized, and provides clear navigation and business-focused content. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is supported by a comprehensive cookie consent mechanism, but lacks a dedicated privacy policy or terms of service pages. Contact information is available via a contact page but lacks direct emails or phone numbers in the visible content. Overall, the website is trustworthy, business-oriented, and safe for general audiences.