Skip to main content

Security report for flukeatelier.cz

FLUKEATELIER.CZ · Other · Czech Republic

Partial score · DNS & email only

7/100

FLUKEATELIER.CZ is a small creative portfolio website representing the work of Štěpán Stránský, focusing on graphic design, photography, and illustration services. The site serves primarily as a showcase and contact point for potential clients interested in creative collaborations. The business appears to be a personal or small studio brand with a modest market presence in the Czech Republic. Technically, the website is built on WordPress with common plugins and uses Google Analytics for visitor tracking. The site is moderately optimized for mobile and SEO but lacks advanced security headers and privacy policies, which are important for compliance and trust. Security posture is basic with HTTPS enabled but missing several recommended headers. The absence of WHOIS data reduces domain trustworthiness, although the website content and social media presence support legitimacy. Overall, the site is functional but could benefit from enhanced security and privacy compliance measures.

Scanned

7 of 7 checks could not complete. The site may be unreachable or blocking automated scans, so the results below cover only what could be checked. Try a rescan later.

NIS2 and GDPR posture

NIS2 posture
Not assessed
GDPR posture
Not assessed

Both readouts depend on the site's pages, which could not be loaded in this scan.

Priority findings

No critical, high or medium findings in the checks that completed.

DNS and email look sound, but most checks were blocked, so this is not a full clean result.

Keep watching flukeatelier.cz

Only DNS and email could be checked this time. Monitoring re-checks every day and emails you when something material changes.

Daily monitoring

€25per month

  • TLS certificates and expiry
  • DNS records
  • SPF, DKIM and DMARC
  • Security headers
  • GDPR and NIS2 posture
  • Exposed services
  • Third-party trackers
  • Risk score drift

Email alerts on material changes and an exportable JSON history of every change.

Billed monthly. Cancel anytime. The full timeline opens with your unlock code.

Prices incl. 21% VAT. Payments by EveryPay; sold by SEQ SIA, Latvia.

Results by check

Each check with its score, findings and the evidence it collected.

Technical appendix

Business context, site observations and technical notes gathered during the scan, and the standards behind each reference.

Business context

Business profile

The business operates in the creative services sector, targeting clients seeking graphic design, photography, and illustration. Its business model is portfolio-driven, relying on showcasing past work to attract collaborations. The presence of related domains in the footer suggests a network of personal projects or partnerships. The company is small with no clear parent or subsidiary entities. Revenue streams likely come from client projects and collaborations. The website's limited content and lack of formal policies indicate a focus on creative work rather than e-commerce or large-scale operations. Growth indicators are minimal, with no explicit calls for hiring or expansion. The partnership ecosystem includes other creative and educational projects linked in the footer.

Security posture

The website demonstrates a basic security posture with HTTPS enabled, which is mandatory. However, it lacks important security headers such as Content-Security-Policy, X-Frame-Options, and HSTS, which help mitigate common web attacks. No incident response or vulnerability disclosure information is provided, indicating limited preparedness for security incidents. The use of common WordPress plugins necessitates regular updates to avoid vulnerabilities. Privacy compliance is weak, with no visible privacy or cookie policies, which could expose the business to GDPR compliance risks. Overall, the security maturity is low to moderate, suitable for a small portfolio site but requiring improvements for enhanced protection and compliance.

Recommendations

  1. Implement comprehensive privacy and cookie policies to improve GDPR compliance and user trust.
  2. Add security headers including Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, and HSTS to strengthen site security.
  3. Regularly update WordPress core and plugins to mitigate vulnerabilities.
  4. Consider publishing an incident response plan or contact information for security issues to enhance transparency.
  5. Improve website content quality and branding consistency to elevate professionalism and business credibility.
Site observations

Automated reading of the public site. Ratings are indicative.

Business

Company
FLUKEATELIER.CZ
Description
Další nový web v rámci sítě Štěpán Stránský síť webů
Key services
graphic design, photography, illustrations
Content quality
basic
Branding
moderate

Technology

Stack
WordPress 5.9.9, jQuery 3.6.0, Google Analytics, Google Tag Manager, Contact Form 7 plugin, Metronet Profile Picture plugin
Platforms
WordPress
Performance
moderate
Mobile
good
Accessibility
basic
SEO
good

Security

Observed score
55/100
Good practices seen
  • HTTPS enabled
  • No exposed sensitive data in HTML

Analytics and tracking

Services
Google Analytics, Google Tag Manager
Tracking level
moderate
Privacy compliance
poor

Advertising

Transparency
basic

Site quality

Design
basic
User experience
basic
Content relevance
basic
Navigation
good
Professionalism
basic
Trustworthiness
moderate

Key observations

  1. Website is a small creative portfolio site for FLUKE atelier by Štěpán Stránský.
  2. No WHOIS data available, which reduces domain trust score.
  3. No privacy, cookie, or terms of service policies found on the site.
  4. Contact information is limited but includes social media and a contact form.
  5. Site uses WordPress CMS with common plugins and Google Analytics tracking.
  6. No advanced security headers detected; HTTPS is enabled.
  7. No adult or questionable content detected; content is safe for general audiences.
  8. Site performance and mobile optimization are moderate to good.
  9. No evidence of incident response or vulnerability disclosure policies.
Technical notes

Notes

The website is built on WordPress 5.9.9 with jQuery 3.6.0 and uses plugins such as Contact Form 7 and Metronet Profile Picture. Google Analytics and Google Tag Manager are integrated for visitor tracking. The site loads external resources from Google Fonts and WordPress.org domains. Performance is moderate with no explicit speed optimizations detected. Mobile optimization is good, with responsive design elements present. SEO is supported by proper meta tags and Open Graph data. Accessibility features are basic, with no advanced ARIA roles or landmarks detected. The absence of security headers and privacy policies indicates technical debt in security and compliance areas. Hosting provider details are not discernible from the content. Overall, the technical infrastructure is standard for a small WordPress site but could benefit from modernization and security enhancements.
Standards and sources

Reference chips under each finding point to the standard, regulation or specification the finding relates to. They are taken from the official datasets below and mapped conservatively: a finding with no defensible link shows none. NIS2 and GDPR references mark where a finding is relevant evidence, not a compliance verdict. Implementing Regulation (EU) 2024/2690 binds digital infrastructure and digital service providers; for other entities it is the most detailed public reading of the Article 21 measures.

Retrieved 2026-10-24

Reviews of this site

Share your experience with flukeatelier.cz. Every review is verified by email and published after moderation.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

Loading reviews…

Feedback on this report

Rate this report, add an optional comment, and tell us if you want a security specialist to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.