Skip to main content

Security report for digitree.cz

DIGITREE CZ s.r.o. · Technology · Czech Republic

Partial score · DNS & email only

75/100

0–100, higher is better. How it is calculated

DIGITREE CZ s.r.o. is a Czech Republic-based IT service provider specializing in web development, IT infrastructure management, hosting, and cloud solutions primarily targeting small and medium-sized businesses. The company positions itself as a reliable IT partner helping clients grow through quality and connected IT services. Their website reflects a professional and modern digital presence with clear service offerings and strong customer testimonials, indicating a solid market position in their niche. Technically, the website leverages modern web technologies including the Astro framework, JavaScript analytics tools like Matomo and Facebook Pixel, and integrates a GDPR-compliant consent management platform (Usercentrics). The site is well-optimized for performance and mobile devices, with good SEO and accessibility features. Security best practices are observed with HTTPS, security headers, and secure forms, although explicit security policies and incident response information are not publicly available. From a security and compliance perspective, the site demonstrates a mature posture with GDPR compliance and secure data collection mechanisms. However, the absence of WHOIS data limits domain trust assessment and raises questions about domain registration transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the risk profile is low, but improvements in transparency and security documentation are recommended. Strategically, DIGITREE should focus on enhancing their security and compliance disclosures, including publishing a security policy, incident response contacts, and vulnerability disclosure guidelines. This will strengthen trust and align with best practices. Continued investment in technical modernization and customer engagement will support sustained growth and market credibility.

Scanned

3 of 7 checks could not complete. The site may be unreachable or blocking automated scans, so the results below cover only what could be checked. Try a rescan later.

NIS2 and GDPR posture

NIS2 outside view
Not assessed
GDPR outside view
Not assessed

Both readouts depend on the site's pages, which could not be loaded in this scan.

Priority findings

1 finding rated critical or high. Fix these first.

  1. SSL/TLS

    TLS encrypts the connection and proves the site is really yours. Weak or expiring certificates trigger browser warnings and put traffic at risk.

    • High

      Weak Protocols Supported

      Server supports weak protocols: TLSv1.1

      What to do: Disable TLS 1.0, TLS 1.1, and all SSL versions

      • CWE-327
      • OWASP A04:2025
      • ASVS V12.1.1

Need hands-on remediation? Email guard@offseq.com

Keep watching digitree.cz

This scan found 15 issues across 4 checks. Monitoring re-runs those checks daily, emails you when something material changes and records each fix, so you can show progress.

Daily monitoring

Recommended

€25per month

  • TLS certificates and expiry
  • DNS records
  • SPF, DKIM and DMARC
  • Security headers
  • GDPR and NIS2 posture
  • Exposed services
  • Third-party trackers
  • Security score drift

Email alerts on material changes and an exportable JSON history of every change.

Billed monthly to your card. Cancel anytime. See sample alerts.

Full report

€39.90one-time

  • The complete analysis as a PDF you can cite
  • Email delivery with an unlock code
  • Lifetime access to this report

Prices incl. 21% VAT. Secure checkout by Mollie; sold by SEQ SIA, Latvia.

Results by check

Each check with its score, findings and the evidence it collected.

How this score is calculated

The security score runs 0–100, higher is better. It is the plain average of the security checks that completed in this scan, each counted equally. A check that could not run is left out: it counts neither as a pass nor as a fail.

Counted in this score

SSL/TLS
62
Email security
70
DNS health
80
Network security
100
Average
78
After the cap
75

Not counted

  • Security headers: did not complete in this scan.
  • GDPR outside view: did not complete in this scan.
  • NIS2 outside view: Re-weights evidence from the TLS, email, DNS, network and hygiene checks, so counting it would count that evidence twice. Shown on its own.
  • OffSeq Observations: An AI reading of the site, useful context but not reproducible evidence. Shown on its own.

Findings that cap the score at 49

Each of these is serious on its own, so while any is present the site cannot rate better than high risk, however good the other checks are.

  • The certificate is not trusted by browsers
  • The website is not served over HTTPS
  • A database, remote desktop, file-sharing or Telnet service is reachable from the internet
  • The page loads a script from a compromised source
  • The domain registration has expired
  • SPF authorises every server to send mail as the domain

Partial scans

When the site blocks Guard or most checks cannot run, the score covers only the checks that ran (usually DNS and email), is capped at 75 and is shown as partial, without a risk level.

Risk levels

  • Critical0–25
  • High26–49
  • Medium50–75
  • Low76–100

Technical appendix

Business context, site observations and technical notes gathered during the scan, and the standards behind each reference.

Business context

Business profile

DIGITREE operates in the technology sector providing essential IT services such as web development, hosting, and IT infrastructure management. Their business model is service-oriented, targeting small and medium enterprises in the Czech Republic. The company leverages a strong portfolio of completed projects and client references to build credibility. Revenue streams likely include project-based web development fees, recurring hosting charges, and hourly IT support services. The company maintains partnerships with various client domains and hosts notable clients, indicating a healthy ecosystem. Growth indicators include over 110 satisfied customers and 165+ projects completed. The company’s digital presence and marketing tools suggest a focus on lead generation and client retention. No parent or subsidiary companies were identified, indicating an independent operation.

Security posture

The website demonstrates a good security posture with HTTPS enforced and multiple security headers implemented, which protect against common web vulnerabilities. The use of a consent management platform ensures GDPR compliance for user data collection. No exposed credentials or sensitive data were found in the HTML content. The forms include consent notices, enhancing privacy compliance. However, the absence of a published security policy, incident response plan, or vulnerability disclosure mechanism limits transparency and preparedness visibility. The lack of WHOIS data reduces domain trust and could be a concern for domain legitimacy verification. Overall, the security maturity is good but could be improved by adding explicit security governance documentation and incident response contacts.

Recommendations

  1. Publish a dedicated security policy page outlining security practices and commitments.
  2. Establish and publicize an incident response contact channel for security issues.
  3. Implement and disclose a vulnerability disclosure program or security.txt file.
  4. Enhance domain registration transparency by ensuring WHOIS data is available and accurate.
  5. Continue to maintain GDPR compliance and update privacy and cookie policies as regulations evolve.

Contact details published on the site

Addresses
Legal name
DIGITREE CZ s.r.o.
Registration number
09604031
Site observations

Automated reading of the public site. Ratings are indicative.

Business

Company
DIGITREE CZ s.r.o.
Description
Pomáháme malým a středním firmám růst díky dostupným, kvalitním a propojeným IT službám. Tvoříme weby, aplikace a spravujeme infrastrukturu tak, aby naši klienti měli jistotu, že o jejich IT se někdo stará – odborně, spolehlivě a s lidským přístupem.
Key services
web development, IT services, web hosting, cloud solutions, IT infrastructure management
Content quality
excellent
Branding
consistent

Technology

Stack
HTML5, CSS3, JavaScript, Matomo Analytics, Google Tag Manager, Facebook Pixel, Usercentrics CMP, Astro framework, Docker, Debian, Proxmox, Mikrotik, Plesk
Frameworks
Astro
Performance
fast
Mobile
excellent
Accessibility
good
SEO
good

Security

Observed score
85/100
Good practices seen
  • HTTPS enforced
  • Security headers present
  • No exposed sensitive data in HTML
  • Secure forms with consent notice

Analytics and tracking

Services
Matomo, Google Analytics (via GTM), Facebook Pixel
Tracking level
moderate
Privacy practices
good

Advertising

Tracking pixels
Facebook Pixel, Matomo
Marketing tools
Usercentrics CMP
Transparency
good

Site quality

Design
excellent
User experience
excellent
Content relevance
excellent
Navigation
excellent
Professionalism
excellent
Trustworthiness
high

Key observations

  1. Website is fully accessible with no blocking or WAF challenge.
  2. WHOIS data is unavailable, which is unusual and reduces domain trust assessment.
  3. Website uses modern technologies and good security practices.
  4. Privacy and cookie policies are present and GDPR compliant.
  5. Contact information is complete and clearly presented.
  6. Multiple customer testimonials and references enhance trust.
  7. No security policy or incident response information found.
  8. No vulnerability disclosure or security.txt found.
  9. Website content is safe and suitable for general audiences.
Technical notes

Notes

The website is built using modern web technologies including the Astro framework, which supports fast and optimized static site generation. It integrates analytics tools such as Matomo and Facebook Pixel via Google Tag Manager, and uses Usercentrics for cookie consent management, indicating a mature approach to privacy and analytics. The site is mobile-optimized with responsive design and good accessibility features. Security headers and HTTPS configuration are well implemented, contributing to a secure browsing experience. The technical infrastructure references technologies like Docker, Debian, Proxmox, Mikrotik, and Plesk, suggesting a robust backend environment. Performance is fast with no broken elements detected. Opportunities exist to improve technical documentation and security transparency to reduce technical risks and enhance trust.
Standards and sources

Reference chips under each finding point to the standard, regulation or specification the finding relates to. They are taken from the official datasets below and mapped conservatively: a finding with no defensible link shows none. NIS2 and GDPR references mark where a finding is relevant evidence, not a compliance verdict. Implementing Regulation (EU) 2024/2690 binds digital infrastructure and digital service providers; for other entities it is the most detailed public reading of the Article 21 measures. WCAG, EN 301 549, European Accessibility Act and Web Accessibility Directive references name the requirement an automated accessibility rule relates to; they are not a conformance verdict.

Retrieved 2026-10-25

Earlier scans of this domain

  1. 58/100Medium37 findingsView report
Reviews of this site

Share your experience with digitree.cz. Every review is verified by email and published after moderation.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

No published reviews yet. Be the first to review digitree.cz.

Feedback on this report

Rate this report, add an optional comment, and tell us if you want a security specialist to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.