Security Directory

B

BLAŽEK PROJEKT s.r.o.

blazekprojekt.com

10

BLAŽEK PROJEKT s.r.o. is a Czech architectural and interior design firm specializing in custom project design and consulting services primarily in Ostrava and Opava. The company has a strong market presence with over 7 years of experience and more than 1000 completed projects, supported by positive client testimonials and a professional online presence. The website is built on WordPress with the Divi theme and includes modern SEO and tracking tools, demonstrating a moderate to high level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site reflects a trustworthy and professional business with a solid technical foundation.

G

Goran Jordović

jordovic.eu

9

The website www.jordovic.eu represents the personal and professional online presence of Goran Jordović, a technology enthusiast and digital professional based in Serbia. The site serves as a portfolio and blog, highlighting his roles as a developer, business owner, and Erasmus+ ambassador. The content is well-structured, professionally presented, and targets a general audience interested in technology and personal insights. The business model is centered on personal branding and professional services, with no direct e-commerce or transactional components. Technically, the site is built on WordPress using the WPBakery Page Builder, incorporating modern web fonts and icons, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and SEO. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site lacks several important security headers and does not provide privacy or cookie policies, which impacts compliance and user trust. No WHOIS registrant data is publicly available due to EURid privacy restrictions, but the domain appears legitimate and consistent with the personal brand presented. No signs of WAF or blocking mechanisms were detected, and no adult or explicit content is present. Overall, the website is a good example of a personal professional site with solid technical foundations but would benefit from enhanced security practices, privacy compliance, and formal policies to improve trust and regulatory adherence.

T

Toada

toada.consulting

45

Toada is a specialized consultancy focused on transforming cultural and event visions into impactful, human-centric experiences. The company positions itself as a premier consultancy that leverages culture to drive action, identity to build communities, and impact to foster sustainable growth. Their core services include strategizing, conceptualizing, and performing, aimed at simplifying complexity and delivering measurable outcomes. The website is professionally designed using Webflow CMS, with a clear and consistent branding approach targeting organizations and stakeholders interested in culture-driven initiatives. Technically, the website employs modern web technologies such as Webflow, jQuery, and WebFont Loader, hosted likely on GoDaddy infrastructure. The site demonstrates good mobile optimization and user experience, though accessibility and SEO optimizations are basic. Security posture is moderate; HTTPS is presumably enabled, but no security headers or explicit privacy and cookie policies are present, indicating room for improvement in compliance and security best practices. Overall, the security posture is adequate for a small consultancy but lacks advanced protections and transparency in privacy compliance. The WHOIS data is privacy protected, which is common for such businesses, and no suspicious patterns are detected. The site is safe for general audiences with no adult or explicit content. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and improving accessibility and compliance features to strengthen trust and regulatory adherence.

A

Apartmenthaus Alpenblick Villach

alpenblick-villach.at

51

Apartmenthaus Alpenblick Villach is a small hospitality business offering apartments and rooms for rent near the city of Villach, Austria. The website targets both vacationers and business travelers, providing modern accommodations with online booking and inquiry capabilities. The business positions itself as a local accommodation provider with a focus on proximity to nature and city amenities. Technically, the website is built on WordPress using common plugins and frameworks such as Bootstrap and jQuery, with GDPR compliance managed via the Complianz plugin. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though security headers are missing and no explicit security or incident response policies are published. Overall, the domain registration data is consistent with the business location and supports legitimacy. No adult or explicit content is present, making the site safe for general audiences.

H

Homestaging-Expert

homestaging-expert.at

51

Homestaging-Expert is a small Austrian company specializing in home staging services aimed at preparing properties for sale or rent to achieve optimal market positioning and pricing. Operating primarily from Villach, Kärnten, it serves a broad Austrian market with additional services including property visualizations and real estate brokerage partnerships. The website is professionally designed using WordPress with the Avada theme and incorporates modern SEO and analytics tools, reflecting a mature digital presence. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. Security posture is solid with HTTPS and basic best practices, though additional security headers and incident response information could enhance trust. Overall, the business presents a credible and professional front with consistent branding and clear contact information.

L

LAMA kominictví s.r.o.

lamakominictvi.cz

46

LAMA kominictví s.r.o. is a Czech small business specializing in chimney maintenance services including cleaning, inspections, milling, lining, repairs, and removals. The company positions itself as a reliable local service provider with a focus on quality and customer trust, supported by testimonials and clear business registration details. The website is built on WordPress using Elementor, reflecting a modern and professional digital presence with good mobile optimization and user experience. Security posture is adequate with HTTPS and secure form handling, though improvements are recommended in security headers and cookie consent compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Bonterra

bonterratech.com

10

Bonterra is a purpose-built software company specializing in nonprofit and social good sectors, offering solutions for fundraising, case management, and corporate giving. Founded in 2021 and inspired by social investing pioneer Sir Ronald Cohen, Bonterra has quickly positioned itself as the second-largest social good software company globally. The company targets a broad audience ranging from new nonprofits to Fortune 500 enterprises, aiming to enhance social impact through integrated software solutions. Technically, the website is built on WordPress with React and Bootstrap frameworks, leveraging modern marketing and analytics tools such as Marketo, Microsoft Clarity, and Google Tag Manager. The site is well-optimized for SEO and mobile devices, providing an excellent user experience. Security posture is good with HTTPS enforced and asynchronous loading of scripts, though it lacks some security headers and explicit privacy and incident response policies. The absence of WHOIS domain registration data is a concern, potentially indicating privacy protection or registration issues, which slightly reduces trustworthiness. Overall, Bonterra presents a professional and credible online presence with room for improvement in privacy compliance and security transparency.

E

EDF Renewables South Africa

edf-re.co.za

10

EDF Renewables South Africa operates as a key player in the renewable energy sector, focusing on the development, construction, and operation of renewable and low-carbon power plants across Southern Africa and globally. The company leverages its expertise to accelerate the energy transition, with a strong presence in multiple African countries and a strategic joint venture with Anglo American to serve the private sector. Their services span project origination, business development, construction management, and asset management, supported by a renewable energy trading platform, Envusa Energy. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Slider Revolution, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are areas for enhancement. Overall, the website presents a professional and trustworthy image aligned with a large energy sector entity. The absence of WHOIS data for the subdomain is expected and does not detract from legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and publishing security and incident response information to improve compliance and trust.

E

EDF Renewables North America

edf-re.ca

40

EDF Renewables North America operates as a leading independent power producer and service provider specializing in renewable energy projects across Canada and the U.S. Their portfolio includes wind (onshore and offshore), solar photovoltaic, energy storage, and electric vehicle charging solutions. With over 200 employees and offices in major Canadian cities, they have developed nearly 2,000 MW of renewable energy capacity and continue to expand their pipeline. The company emphasizes environmental stewardship and community engagement, aligning with the broader EDF Group's sustainability goals. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, providing a professional and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a minor concern but is offset by strong branding and external trust signals. Overall, the company presents a credible and mature digital presence in the renewable energy sector.

E

EDF Renewables Australia

edf-re.com.au

49

EDF Renewables Australia is a large energy company specializing in the development, construction, and operation of renewable energy power generation plants including onshore wind, offshore wind, and solar projects. The company positions itself as a major player in the global energy transition, leveraging expertise and innovation to combat climate change. The website reflects a professional and consistent brand presence with clear business focus and target audience in Australia. Technically, the site is built on WordPress with modern plugins and libraries, offering good mobile optimization and SEO. Security posture is solid with HTTPS and secure forms, though lacking some security headers and visible privacy compliance elements. Overall, the site is trustworthy and well-maintained, though improvements in privacy policy visibility and security headers are recommended.

W

WCRP Coordinated Regional Climate Downscaling Experiment

cordex.org

48

The WCRP Coordinated Regional Climate Downscaling Experiment (CORDEX) website serves as a global scientific platform dedicated to advancing regional climate downscaling research through international collaboration. The site provides comprehensive resources including experiment guidelines, data access, strategic activities, and publications, targeting climate researchers, policymakers, and the scientific community. It is positioned as a reputable non-profit initiative under the World Climate Research Programme (WCRP), with a medium organizational size and a founding date consistent with the domain registration in 2015. Technically, the website is built on a modern WordPress CMS with a robust tech stack including Gantry5 framework, jQuery, and several plugins for search and sliders. Hosting and DNS services are provided by reputable providers, and the site employs HTTPS with good SSL configuration. Performance and mobile optimization are adequate, though accessibility features are basic. SEO practices are well implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. However, it lacks DNSSEC, security.txt, privacy and cookie policies, and a cookie consent mechanism, which are important for compliance and security transparency. The use of Matomo analytics indicates minimal user tracking, but privacy compliance is weak due to missing policies. Overall, the website is a trustworthy and professional scientific resource with strong business credibility and good technical implementation. The main risks relate to privacy compliance and DNS security enhancements. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding a security.txt file, and improving HTTP security headers to enhance trust and compliance.

S

Serbia | E-Commerce For All

ecommerce4all.rs

41

The ecommerce4all.rs website serves as a regional informational and resource platform focused on e-commerce development for Serbia and other CEFTA member countries. It provides modules covering e-commerce data, regulations, success stories, payment systems, delivery, and a regional trustmark badge. The platform targets stakeholders interested in e-commerce growth and regulatory compliance within the CEFTA region. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Google Analytics, and GDPR cookie compliance, indicating a moderate level of digital maturity. The design is professional and mobile-optimized, with good SEO practices implemented. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks advanced security headers and DNSSEC. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the domain registration data aligns well with the website's regional focus and business purpose, supporting legitimacy. The site does not contain any adult or questionable content and is safe for general audiences.

M

Moldova | E-Commerce For All

ecommerce4all.md

10

The website ecommerce4all.md serves as a regional resource and information platform focused on e-commerce for Moldova and other CEFTA member countries. It provides structured modules covering key e-commerce topics such as regulations, payment, delivery, and success stories, targeting businesses and stakeholders in the regional e-commerce ecosystem. The platform positions itself as a trusted information hub with consistent branding and a clear focus on regional cooperation. Technically, the site is built on WordPress with common SEO and analytics tools, including Google Analytics and Facebook Pixel, and uses Bootstrap for responsive design. The site is mobile-optimized and offers a subscription form for updates. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and detailed security or incident response policies. No direct contact emails or phone numbers are provided, with contact primarily via a form. Overall, the site is legitimate, professionally presented, and serves its informational purpose well, though it could improve security posture and transparency.

B

Bosnia and Herzegovina | E-Commerce For All

ecommerce4all.ba

63

The website ecommerce4all.ba serves as a regional informational platform focused on e-commerce development and data for Bosnia and Herzegovina within the CEFTA region. It provides modules covering e-commerce data, regulations, success stories, e-payment, delivery, and a regional trustmark badge. The platform targets stakeholders interested in e-commerce growth and regulatory frameworks in the CEFTA member countries. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, GDPR cookie compliance, and Mailerlite for newsletter management. The design is professional and mobile-optimized, with good SEO practices implemented. Security posture is adequate with HTTPS enabled and secure form handling, but lacks explicit security headers and published privacy or terms of service pages. Overall, the site is trustworthy and legitimate, supported by consistent WHOIS data and regional partner links. Strategic improvements include publishing comprehensive privacy and terms policies, enhancing security headers, and expanding direct contact information.

A

Albania | E-Commerce For All

ecommerce4all.al

62

The website ecommerce4all.al serves as a regional resource and information platform focused on e-commerce development for CEFTA member countries, specifically Albania. It provides modules covering e-commerce data, regulations, success stories, electronic payments, delivery, and a regional trustmark badge. The platform targets businesses, policymakers, and stakeholders interested in e-commerce within the CEFTA region. The site is well-branded and consistent with a clear regional focus. Technically, the site is built on WordPress with modern technologies including Bootstrap for responsive design, Google Analytics and Facebook Pixel for tracking, and Mailerlite for email subscription management. SEO best practices are implemented via Yoast SEO, and the site is mobile optimized with good navigation and content structure. Performance is moderate with room for improvement. From a security perspective, HTTPS is enabled and a GDPR cookie consent mechanism is in place, but no explicit security headers were detected in the provided data. There is no visible privacy policy or terms of service, which represents a compliance gap. Contact information is limited to a subscription form with no direct emails or phone numbers. WHOIS data is consistent and supports the legitimacy of the site. Overall, the website is a credible and useful informational platform with good technical implementation but requires improvements in privacy compliance, security headers, and explicit contact information to enhance trust and regulatory adherence.

E

E-Commerce For All

ecommerce4all.eu

62

E-commerce for all is a regional resource and information platform focused on key aspects of e-commerce for CEFTA member countries. It provides aggregated e-commerce data, market insights, and readiness indicators tailored to the CEFTA region. The platform serves as an information hub for stakeholders interested in e-commerce development within these countries, offering multilingual support and links to country-specific partner sites. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and GDPR compliance plugins. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit privacy policy, terms of service, and incident response information. The domain registration is consistent and legitimate, registered through a reputable registrar without privacy protection. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

I

i2CAT Foundation

i2cat.net

62

i2CAT Foundation is a well-established non-profit research and innovation center based in Catalonia, Spain, focused on advanced Internet architectures, applications, and services. The organization has a strong market position as a CERCA research center, actively participating and leading European and local R&D projects in emerging technologies such as 5G/6G, AI, cybersecurity, and digital society technologies. Their target audience includes researchers, businesses, public administrations, and citizens interested in digital innovation. The website reflects a professional and consistent brand image with good content quality and clear navigation.

O

Observatory of Public Sector Innovation

oecd-opsi.org

57

The Observatory of Public Sector Innovation (OPSI) is an official initiative under the OECD Public Governance Directorate, focused on advancing public sector innovation globally. The website serves as a comprehensive resource hub offering research, case studies, toolkits, and collaboration opportunities for governments and public servants. It holds a strong market position as a trusted government innovation knowledge source, supported by OECD branding and partnerships. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and Google Tag Manager, hosted behind Cloudflare DNS. The site is well-optimized for mobile and accessibility, with good SEO practices and structured data enhancing discoverability. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and explicit security policies such as privacy, cookie, or vulnerability disclosures. No incident response contacts or security.txt files are present, indicating room for improvement in transparency and compliance. Overall, the website is professional, content-rich, and trustworthy, with moderate security posture and privacy compliance. Strategic enhancements in privacy policy publication, DNS security, and incident response transparency would further strengthen its security and compliance profile.

F

Fundació iSocial

isocial.cat

50

Fundació iSocial is a non-profit organization established in 2017, focused on promoting innovation in the social services sector primarily in Catalonia, Spain. The organization connects the third sector, administrations, universities, and companies to foster knowledge sharing, innovation, and transformative impact in social welfare. Their key services include training programs, innovation labs, research projects, and publications. The website reflects a professional and consistent brand presence with multilingual support and active social media engagement. Technically, the site is built on WordPress with WooCommerce and several plugins enhancing functionality and user experience. Hosting is provided by Dinahosting s.l., and the domain registration details align well with the organization's identity, indicating legitimacy.

A

Accessibility Checker

accessibilitychecker.org

67

Accessibility Checker is a technology company specializing in providing automated and expert services for web accessibility compliance, focusing on ADA and WCAG standards. The company offers a suite of tools including automated scanning, code development guidance, statement generation, and expert audits, targeting businesses, agencies, and public sector organizations worldwide. Their market position is that of a trusted provider in the digital accessibility space, with a medium-sized operation founded around 2020. Technically, the website is built on WordPress with modern JavaScript libraries and SEO plugins, demonstrating good digital maturity and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and published policies. Overall, the site is professional, trustworthy, and well-structured, but could improve privacy compliance and transparency.

U

U.COLLEGE OF NEW TECHNOLOGIES, S.L.

enti.cat

61

ENTI-UB is a specialized university center in Barcelona focused on new technologies education, offering undergraduate, higher cycle, master's, and postgraduate programs. The institution is positioned as a medium-sized educational entity with a consistent brand presence and active social media engagement. Technically, the website is built on WordPress using Elementor and Gravity Forms, with Cloudflare DNS and Google Tag Manager integrations, reflecting a modern and moderately performant digital infrastructure. Security posture is solid with HTTPS enabled and domain transfer protection, though improvements are needed in DNSSEC and security headers. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

A

Aulart

aulart.com

60

Aulart is an online education platform specializing in electronic music production, offering expert-led masterclasses in production, DJing, mixing, mastering, and beatmaking. The platform targets aspiring music professionals and enthusiasts seeking to enhance their skills through structured courses and memberships. The website demonstrates a solid digital presence with modern technologies such as WordPress, WooCommerce, and Elementor, supported by various marketing and analytics tools including Google Analytics, Facebook Pixel, and PostHog. Privacy and cookie policies are implemented with GDPR compliance, reflecting attention to data protection standards. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Security posture is strong with HTTPS and security headers, but lacks a publicly available security policy or incident response information.

E

EDF Power Solutions

edf-powersolutions.com

41

EDF Power Solutions is a global energy company specializing in the development, construction, and operation of renewable and low-carbon power plants, as well as flexibility and transmission solutions. The company is positioned as a responsible and innovative industrial entity with a broad international presence, supported by multiple subsidiary websites across various countries. The website reflects a professional corporate image with consistent branding and a clear focus on sustainability and energy transition. Technically, the website is built on WordPress using Elementor and several plugins for SEO, marketing automation, and user experience enhancements. It employs modern web technologies and demonstrates good mobile optimization and SEO practices. Privacy compliance is well addressed with GDPR-compliant cookie consent mechanisms and detailed privacy and terms of service pages. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers, and no public security policy or incident response contacts are provided. The WHOIS data shows inconsistencies, notably a future domain creation date and minimal registrant information, which slightly detracts from trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, but improvements in security transparency and WHOIS data accuracy are recommended to enhance trust and resilience.

SAP is a global leader in enterprise software solutions, with a strong market position in Human Capital Management through its SAP SuccessFactors Recruiting software. The website presents a comprehensive, AI-enabled talent acquisition platform designed for HR professionals and enterprises to attract and hire top talent efficiently. The digital infrastructure leverages modern web technologies including SAP UI5 and React, ensuring a responsive, accessible, and SEO-optimized user experience. Security posture is robust with HTTPS enforcement, security headers, and consent management for privacy compliance. While WHOIS data is unavailable, the domain's global recognition and consistent branding affirm its legitimacy. Overall, the site reflects a mature, professional enterprise-grade digital presence.

H

HRworks GmbH

hrworks.de

74

HRworks GmbH operates the website www.hrworks.de, providing comprehensive HR software solutions tailored for small and medium-sized enterprises in Germany. Their offerings include personnel management, time tracking, travel expense management, payroll integration, and personnel development tools. The company positions itself as a trusted and established player with over 25 years of experience and more than 350,000 users, supported by multiple industry awards and recognitions. The website is professionally designed, mobile-optimized, and rich in content, targeting HR professionals and SMEs seeking efficient digital HR transformation.

E

Energosol s.r.o.

energosol.cz

9

Energosol s.r.o. is a Czech-based company specializing in photovoltaic power plants and related energy solutions, targeting residential, commercial, and municipal customers. Their services include installation of photovoltaic systems for family houses, apartment buildings, companies, and community energy projects, as well as water heating and energy management solutions. The company appears to be relatively young, founded in 2021, and operates primarily within the Czech Republic energy sector. Technically, the website is built on WordPress using the Divi theme, with integration of common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. The site is hosted with WEDOS, a reputable Czech hosting provider, and uses HTTPS with a good SSL configuration. Mobile optimization and SEO practices are adequate, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerability disclosure or security.txt files are present. The WHOIS data is consistent with the business claims, showing no suspicious patterns and a legitimate domain age. Overall, the website presents a professional and trustworthy front for a small energy sector company, with room for improvement in privacy policy transparency, security best practices, and contact information availability.

E

ENERKOM Plzeňsko

enerkom-plzensko.cz

10

ENERKOM Plzeňsko is a small, regionally focused energy community organization established in 2023, providing renewable energy services, energy consulting, and community energy sharing primarily in the Plzeň region of the Czech Republic. The website is built on WordPress with Elementor and uses modern web technologies, offering a professional and user-friendly experience. Privacy and cookie policies are implemented with GDPR compliance, and contact information is clearly available. Security posture is good with HTTPS and security headers, though no explicit security or incident response policies are published. Overall, the site reflects a trustworthy and credible organization with a clear community-oriented business model.

Elmont-invest s.r.o. is a Czech Republic based small enterprise specializing in the manufacture and installation of electrical equipment including charging stations for e-bikes, photovoltaic switchboards, and smart home automation. The company maintains a professional web presence built on Joomla CMS with modern frontend technologies and integrates cookie consent mechanisms to comply with GDPR. Their market position is regional with a focus on energy and electrical services, supported by clear contact information and active social media channels. Technically, the website is moderately optimized with good mobile responsiveness and basic SEO practices. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and business information appear trustworthy. Strategic recommendations include improving security headers, publishing privacy and security policies, and verifying domain registration status to enhance trust and compliance.

G

G-PROJECT, s. r. o.

g-project.cz

10

G-PROJECT, s. r. o. is a Czech-based consulting company specializing in processing applications for European and state grants, project management, and sustainability oversight. The company has a strong market presence with over 7 billion CZK secured for more than 700 projects, targeting municipalities, schools, hospitals, sports clubs, and non-profit organizations. Their business model focuses on success-based payment, enhancing client trust and engagement. Technically, the website is built on WordPress using the Enfold theme and integrates common plugins such as Contact Form 7 and Google reCAPTCHA, though Google Analytics plugins are installed but not configured. The site is mobile-optimized with good SEO practices and clear navigation. Security posture is solid with HTTPS and reCAPTCHA, but lacks some advanced security headers and a vulnerability disclosure policy. WHOIS data is unavailable, which slightly reduces trustworthiness, but the professional content and client testimonials support legitimacy. Privacy and terms policies are missing, which is a compliance gap. Overall, the site is professional, secure, and business credible with room for privacy and security improvements.

E

Enado s.r.o.

enado.cz

11

Enado s.r.o. is a Czech-based company specializing in renewable energy solutions, primarily photovoltaic systems, battery storage, and heat pumps. With 25 years of experience and a significant installed capacity, the company serves a diverse clientele including residential homes, apartment buildings, businesses, and municipalities. Their business model encompasses project design, installation, and ongoing service, positioning them as a trusted expert in the Czech energy market. The website reflects a professional and comprehensive digital presence, leveraging WordPress with modern SEO and user experience practices. Security posture is strong with HTTPS, security headers, and CAPTCHA protections on forms, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and compliant with GDPR, supporting effective customer engagement and lead generation.

S

sun.Energy

sun.energy

10

sun.Energy is a Czech-based energy services provider specializing in solar power plants and heat pumps, offering turnkey solutions including design, financing, installation, and maintenance. The company targets households, businesses, and municipalities, providing services such as solar plant sales, leasing, subsidies, energy storage, and electric vehicle charging. The website is professionally designed using WordPress and Elementor, featuring multilingual support and modern SEO practices. Security measures include HTTPS and Google reCAPTCHA on forms, though some advanced security headers are missing. The WHOIS data is privacy protected, which is common but reduces transparency. Overall, the website presents a credible and professional business with moderate security and privacy compliance.

M

Město Ostrov

ostrov.cz

10

Město Ostrov operates an official municipal website serving the residents and stakeholders of the town Ostrov in the Czech Republic. The site provides comprehensive information about city governance, news updates, legal documents, event calendars, and contact details for various municipal departments. It targets local citizens, businesses, and visitors seeking official information and services. The website is well-branded and consistent with government standards, reflecting a medium-sized municipal entity founded in 1998. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Swiper.js for UI components, Google reCAPTCHA for bot protection, and Google Translate for multilingual support. It is hosted by WEDOS, a known Czech hosting provider, and uses HTTPS with good SSL configuration. The site is mobile-optimized and includes accessibility features, though some improvements are possible. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and integrates Google Analytics with user consent. However, explicit security headers like CSP and X-Frame-Options are not visibly configured, and no public security or incident response policies are published. No vulnerabilities or suspicious patterns were detected. WHOIS data confirms domain legitimacy and long-term registration consistent with municipal use. Overall, the website demonstrates a good balance of content quality, technical implementation, security posture, privacy compliance, and business credibility. It is a trustworthy and professional government portal with room for minor security and accessibility enhancements.

S

SIESTA SOLUTION s.r.o.

siesta-labs.com

10

Siesta Labs is a Czech Republic based innovation lab and startup studio founded in 2020, specializing in software development and startup incubation. Their services include AI, web and mobile applications, system architecture, and business consulting. The company targets innovators, startups, and businesses seeking scalable digital solutions. The website reflects a professional and consistent brand with clear navigation and relevant content. Technically, the site uses modern frameworks like Bootstrap and integrates analytics tools such as Microsoft Clarity, Google Analytics, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is solid with HTTPS and secure forms, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic with privacy and terms documents available but lacking cookie consent mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

M

Místní akční skupina Bobrava

masbobrava.cz

43

Místní akční skupina Bobrava is a Czech regional non-profit organization focused on supporting local municipalities, schools, entrepreneurs, non-profits, and the general public within the Bobrava region. The organization provides information on funding opportunities, promotes regional products and services, and engages the community through news updates and events. Their website reflects a professional and community-oriented approach with clear navigation and relevant content. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap, and it employs Google reCAPTCHA for form security and a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust assessment, but the website's content and structure suggest legitimacy. Overall, the site is well-maintained, user-friendly, and compliant with privacy regulations.

O

Obec Potštejn

potstejn.cz

10

Obec Potštejn operates a municipal government website serving the local community of Potštejn in the Czech Republic. The site provides residents and visitors with access to official documents, public notices, tourism information, event management, and online municipal services. The website is built on WordPress with popular plugins such as WooCommerce and Events Manager, indicating a moderate level of digital maturity. The design is professional and consistent, with good mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced, but lacks some important security headers and explicit privacy and cookie policies, which are critical for compliance and user trust. Overall, the domain registration and WHOIS data align well with the website's claims, supporting its legitimacy.

T

Transference

transference.cz

10

Transference is a Czech-based company specializing in photovoltaic systems, including solar power plants, carports, and battery energy storage solutions. The company targets commercial, public sector, and developer clients, offering comprehensive services from design to installation and administrative support. Their market position is supported by a professional website, client testimonials, and project references, indicating a solid presence in the renewable energy sector. Technically, the website is built on WordPress with Elementor, using modern web technologies and security best practices such as HTTPS and security headers. However, the absence of explicit privacy and cookie policies, as well as incident response information, indicates areas for compliance improvement. Overall, the security posture is good with no detected vulnerabilities or blocking mechanisms. The website is safe for general audiences and demonstrates a trustworthy business presence.

E

Ekowatt

ekowatt.cz

46

Ekowatt is a Czech-based consulting company specializing in energy, economics, and environmental advisory services. Established since 1998, it offers a broad range of services including energy audits, building certifications (LEED, BREEAM, WELL, DGNB), energy performance certificates, economic optimization studies, and carbon footprint calculations. The company targets businesses and organizations seeking to improve energy efficiency and environmental compliance. The website is professionally designed using WordPress with Elementor and Astra theme, providing a good user experience and mobile optimization. Privacy and cookie compliance are well implemented with a visible consent mechanism and comprehensive privacy policy. Security posture is adequate with HTTPS enabled, though additional security headers and explicit security policies could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, indicating stable and accessible infrastructure. Overall, Ekowatt presents a credible and professional online presence aligned with its business domain.

A

Asociace developeru

wedevelop.cz

10

The website represents Asociace developeru, a Czech real estate development association acting as a voice for the development community in the Czech Republic. It focuses on advocacy for transparent and predictable development conditions, fostering cooperation between private and public sectors, and improving the public image of developers. The site is professionally designed using WordPress with modern plugins and frameworks, indicating a moderate level of digital maturity. Google Analytics is used for visitor tracking, but explicit privacy and cookie policies are not found, which is a compliance gap. Security posture is generally good with HTTPS enabled, but lacks visible security headers and has minor UX issues with video playback. Overall, the site is legitimate and trustworthy, though WHOIS data is unavailable, likely due to privacy protection.

H

Hnutí DUHA

hnutiduha.cz

52

Hnutí DUHA is a well-established Czech environmental non-profit organization focused on promoting clean environment, biodiversity, and sustainable economy. The organization engages in advocacy, public campaigns, educational initiatives, and community events. Their website reflects a mature digital presence with clear branding, multiple social media channels, and relevant content for their audience. Technically, the site runs on Drupal 7 with standard web technologies and integrates Google Analytics for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, though modernization of the CMS and enhanced privacy and security measures are recommended.

E

ECM System Solutions s.r.o.

ecmsystem.cz

51

ECM System Solutions s.r.o. is a Czech-based company specializing in comprehensive energy management solutions tailored to various sectors including companies, municipalities, energy communities, and residential buildings. With 16 years of market presence and over 150 implementations, the company offers key services such as energy dispatch management, attendance tracking, and custom system development. It operates as part of the larger LAMA ENERGY GROUP, enhancing its market position and trustworthiness. Technically, the website employs modern JavaScript frameworks including jQuery and Naja for AJAX handling, integrates Google reCAPTCHA v3 for form security, and uses Google Tag Manager for analytics and tracking. The site is hosted under a Czech registrar and shows good mobile optimization and SEO practices, although no explicit CMS is detected. From a security perspective, the website enforces HTTPS, uses reCAPTCHA to protect forms, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and security.txt files. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a professional, trustworthy, and secure digital presence consistent with its business claims. The domain age and WHOIS data support the legitimacy and history of the company. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts.

F

Frank Bold

frankbold.org

46

Frank Bold is a Czech-based expert group specializing in legal services, sustainability consulting, and public interest advocacy. Established in 2013, it operates multiple offices across Central Europe and combines legal expertise with consulting in green finance, energy, and public affairs. The organization is recognized as a certified B Corporation and holds a strong market position in the Czech Republic, particularly in construction, energy, and environmental law. Their business model integrates paid services with free public legal advice and active legislative advocacy. Technically, the website is built on Drupal CMS, employs modern analytics tools, and implements a cookie consent mechanism, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNSSEC and security headers. Overall, the site is professional, trustworthy, and well-aligned with the organization's mission and market presence.

P

PratiMe

pratime.rs

44

PratiMe is a Serbian-based company specializing in GPS satellite vehicle tracking and fleet management solutions. Their platform offers real-time vehicle monitoring, fuel consumption control, driver behavior analytics, and comprehensive fleet management tools. The company targets businesses and fleet operators seeking to optimize operational efficiency and reduce costs through advanced telematics. The website is professionally designed, mobile-optimized, and provides clear navigation and contact channels, reflecting a mature digital presence for a company founded in 2020. Technically, the website employs modern web technologies including Bootstrap, jQuery, GSAP animations, and a 3D globe visualization library (Cobe). It integrates Google Fonts and uses a cookie consent mechanism to comply with privacy regulations. While the site is performant and accessible, there is room for improvement in security hardening, particularly in enabling DNSSEC and implementing security headers such as CSP and HSTS. From a security perspective, the site uses HTTPS and has a contact form with client-side validation, but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of a privacy policy and terms of service is a notable compliance gap. WHOIS data shows transparent and consistent domain registration aligned with the business location and sector, supporting legitimacy. Overall, PratiMe presents a trustworthy and professional online presence with strong business credibility and technical implementation. Enhancing security policies, privacy compliance documentation, and DNS security would further strengthen their posture and trustworthiness.

Pluton Media d.o.o. Beograd is a Serbian digital media company with a minimal web presence currently displayed as a coming soon or placeholder page. The website provides basic company contact information including email and physical address but lacks detailed business descriptions or service listings. The technical infrastructure is based on WordPress with Bootstrap and jQuery libraries, indicating a standard but basic digital setup. The site lacks HTTPS and security headers, which negatively impacts its security posture. No privacy or cookie policies are present, limiting compliance with data protection regulations. Overall, the website is functional but minimal, with room for significant improvements in content, security, and compliance.

S

Solar Solutions GmbH

aeg-industrialsolar.de

59

AEG Solar, operated by Solar Solutions GmbH, is a medium-sized company specializing in solar energy products including solar modules, inverters, and energy storage systems. The company positions itself as a trusted brand with widespread recognition among installers and customers, targeting homeowners, businesses, and project developers seeking sustainable energy solutions. Their business model focuses on manufacturing and distributing holistic photovoltaic solutions to empower energy independence and environmental responsibility. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by One.com A/S. The site demonstrates good digital maturity with responsive design, SEO optimization, and cookie consent mechanisms compliant with GDPR. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and some recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and user consent mechanisms. However, the absence of a published security policy or incident response contact is noted. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic improvements in DNS security, security headers, and incident response transparency would enhance its security posture and trustworthiness.

G

Growatt European Distributor

growatt.tech

52

Growatt.tech operates as a European distributor specializing in photovoltaic inverters and energy storage solutions under the Growatt brand. The company targets European customers, installers, and businesses seeking reliable and innovative solar energy products. Their online presence includes a comprehensive e-commerce platform with product categories, downloads, training resources, and account management features. The business is relatively young, founded in 2022, with a domain age consistent with this timeline. The website demonstrates a professional and consistent brand image with good content quality and user experience.

Benekovterm s.r.o. is a Czech company specializing in manufacturing and selling high-quality automatic solid fuel boilers and hybrid heating technologies, including pellet boilers combined with heat pumps and renewable energy solutions such as photovoltaic systems. The company has a long tradition dating back to 1949 and positions itself as a leader in innovation within the Czech energy sector. Their website provides comprehensive product information, customer references, and multiple contact channels, reflecting a mature business presence. Technically, the website uses common JavaScript libraries and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the active and professional website. Overall, the site is trustworthy and well-maintained, serving a clear target audience of residential and commercial customers interested in energy-efficient heating solutions.

B

Bc. Martin Hůlek

martinhulek.cz

9

The website www.martinhulek.cz represents Bc. Martin Hůlek, a freelance fullstack web developer based in the Czech Republic. The business focuses on delivering custom web development services including responsive websites, e-commerce platforms, tailored web applications, ongoing maintenance, and consulting. The site positions itself as a specialist in modern, secure, and user-friendly web solutions aimed at businesses and individuals seeking professional digital presence. The portfolio includes at least one e-shop project, indicating practical experience in commercial web development. Technically, the website employs modern frontend technologies such as Bootstrap 5, jQuery, FontAwesome, and Google Tag Manager for analytics and cookie consent management. The site is mobile-optimized with responsive design and good SEO practices evident from meta tags and structured navigation. Performance appears fast with asynchronous script loading and minimal external dependencies. However, no CMS or hosting provider details are disclosed. From a security perspective, the site uses HTTPS (implied by external Google Tag Manager scripts loaded over HTTPS), and implements a cookie consent modal, indicating awareness of privacy regulations. However, no explicit privacy policy or terms of service pages were found, and no HTTP security headers were detected in the provided data. The WHOIS lookup failed to return any domain registration data, which reduces trustworthiness and raises questions about domain legitimacy. No vulnerabilities or exposed sensitive data were observed in the content. Overall, the website is professional and functional, suitable for a small freelance business. The main risks relate to missing WHOIS transparency and incomplete privacy compliance documentation. Strategic improvements in security headers, privacy policy publication, and domain registration transparency would enhance trust and compliance.

LEVEL.cz is the official website of LEVEL, a well-established Czech gaming magazine published by Naked Dog, s.r.o. The site offers subscriptions, digital and print magazine issues, advertising opportunities, and access to an extensive archive of past issues. The target audience is primarily Czech gamers and gaming enthusiasts. The website is built on WordPress, using common plugins such as Contact Form 7 and ElasticPress, hosted via Gransy. The site is professionally designed with good mobile optimization and clear navigation, though it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and well-positioned in its niche.

A

ANOMALIA

anomalia.cz

54

ANOMALIA is a professional training provider specializing in animation, games, and VFX education since 2008. The company offers bootcamps and mentorship from industry veterans affiliated with renowned studios such as Pixar and Disney. The website is built on WordPress with modern web technologies and includes analytics and marketing tools like Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS and cookie consent mechanisms, though explicit privacy and terms pages are missing. The domain WHOIS data is privacy protected, which is common for this business type. Overall, the site presents a professional and trustworthy educational service with room for improvement in privacy disclosures and security headers.