Skip to main content

Security report for ms-ic.cz

Moravskoslezské inovační centrum (MSIC) · Other · Czech Republic

Security score

No score

The scan could not complete, so no score was produced. Try a rescan.

Moravskoslezské inovační centrum (MSIC) is a regional innovation support organization based in the Czech Republic, founded in 2017. The website presents MSIC as a key player in supporting business and innovation in the Moravian-Silesian region, offering services such as financing, know-how, matchmaking, and infrastructure support. The site targets local businesses and entrepreneurs, providing resources, events, and expert networks to foster innovation and growth. Technically, the website is built on WordPress with modern integrations including Google Analytics, Microsoft Clarity, Hotjar, and Google Tag Manager, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and reCAPTCHA implementations, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-branded, with strong regional partnerships and client testimonials enhancing credibility.

Scanned

This scan of ms-ic.cz failed before its checks completed, so it has no score and the results below are incomplete.

NIS2 and GDPR posture

NIS2 outside view
Not assessed
GDPR outside view
Not assessed

Both readouts depend on the site's pages, which could not be loaded in this scan.

Priority findings

The scan did not complete, so there are no findings to show. A rescan usually gets through if the site was briefly unreachable.

Keep watching ms-ic.cz

This scan could not reach the site. Monitoring re-runs every check daily and fills in the results once the site responds to the scanner.

Daily monitoring

€25per month

  • TLS certificates and expiry
  • DNS records
  • SPF, DKIM and DMARC
  • Security headers
  • GDPR and NIS2 posture
  • Exposed services
  • Third-party trackers
  • Security score drift

Email alerts on material changes and an exportable JSON history of every change.

Billed monthly to your card. Cancel anytime. See sample alerts.

Prices incl. 21% VAT. Secure checkout by Mollie; sold by SEQ SIA, Latvia.

Results by check

Each check with its score, findings and the evidence it collected.

Breach exposure

Leaked credentials and lookalike domains from OffSeq Breach. The counts are free; the detailed lists are paid add-ons.

Dark web exposure

Add-on

Leaked records that mention ms-ic.cz, from OffSeq Breach.

Total records
1
Employees
0
Customers
1
Third parties
0
Weak passwords
0%

1 subdomain affected

See the 10 newest leaked credentials

A one-off add-on to this report that lists the most recent identifier and password pairs OffSeq Breach holds for ms-ic.cz.

Select it in the checkout above.

Breach keeps ingesting new leaks, so these numbers can grow between scans.

Open in Breach(opens in a new tab)Monitor on Breach(opens in a new tab)

Technical appendix

Business context, site observations and technical notes gathered during the scan, and the standards behind each reference.

Business context

Business profile

MSIC operates as an important regional innovation center, collaborating with local government bodies, universities, and business networks. Its business model focuses on providing advisory, financial, and infrastructural support to startups and SMEs in the region. The organization leverages partnerships with regional authorities and academic institutions to strengthen its market position. Revenue streams likely include grants, government funding, and service fees. The website content and structure indicate a mature digital presence with active event promotion and client engagement. The partnership ecosystem is robust, including regional government sites and innovation networks, supporting MSIC's strategic goals of regional economic development and innovation facilitation.

Security posture

The website demonstrates a good security baseline with HTTPS enforced and Google reCAPTCHA protecting forms. Multiple analytics and tracking tools are used responsibly with asynchronous loading. However, the absence of explicit security headers such as Content-Security-Policy and HSTS reduces the overall security posture. No direct contact information for incident response or security policies are published, which is a compliance and transparency gap. No vulnerabilities or exposed sensitive data were detected in the HTML content. The site would benefit from publishing a security policy, incident response contacts, and implementing a vulnerability disclosure program to enhance trust and compliance.

Recommendations

  1. Implement and verify security headers including CSP, HSTS, X-Frame-Options, and X-Content-Type-Options.
  2. Add a cookie consent banner/mechanism to comply fully with GDPR requirements.
  3. Publish a dedicated security policy and incident response information on the website.
  4. Consider creating and publishing a vulnerability disclosure policy and security.txt file.
  5. Regularly audit third-party scripts and tracking tools for security and privacy compliance.
Site observations

Automated reading of the public site. Ratings are indicative.

Business

Company
Moravskoslezské inovační centrum (MSIC)
Description
Moravskoslezské inovační centrum (MSIC) podporuje podnikání a inovace v kraji.
Key services
Financování, Know-how, Matchmaking, Zázemí
Content quality
excellent
Branding
consistent

Technology

Stack
WordPress, jQuery, Google reCAPTCHA, Google Analytics, Google Tag Manager, Microsoft Clarity, Hotjar, Fancybox
Frameworks
Bootstrap
Platforms
WordPress
Performance
moderate
Mobile
good
Accessibility
good
SEO
good

Security

Observed score
85/100
Good practices seen
  • HTTPS enforced
  • Google reCAPTCHA v3 implemented
  • Use of security and analytics scripts asynchronously
  • No exposed sensitive data in HTML

Analytics and tracking

Services
Google Analytics, Microsoft Clarity, Hotjar
Tracking level
moderate
Privacy practices
basic

Advertising

Tracking pixels
Facebook Pixel, Microsoft Clarity, Hotjar
Marketing tools
Facebook Pixel, Microsoft Clarity, Hotjar
Transparency
basic

Site quality

Design
excellent
User experience
excellent
Content relevance
excellent
Navigation
excellent
Professionalism
excellent
Trustworthiness
high

Key observations

  1. Website is fully accessible with no blocking or WAF challenges.
  2. Content is professionally presented in Czech language targeting regional businesses.
  3. Strong use of structured data and SEO best practices.
  4. Multiple client testimonials and partner logos enhance trust.
  5. No explicit privacy or cookie consent banner detected, which is a GDPR compliance gap.
  6. Use of multiple analytics and tracking tools with moderate user tracking.
  7. No direct company emails or phone numbers found in HTML; contact via contact form and contact page link.
  8. No explicit security or incident response policies published.
  9. Domain WHOIS data is consistent and domain age supports legitimacy.
Technical notes

Notes

The website is built on WordPress CMS with a modern tech stack including Bootstrap for responsive design, jQuery, and various analytics and tracking services such as Google Analytics, Microsoft Clarity, and Hotjar. Performance is moderate with asynchronous script loading and optimized images. SEO is well implemented with meta tags, Open Graph, and JSON-LD structured data. Mobile optimization and accessibility are good, supporting a wide range of users. Hosting is via REG-WEDOS, a Czech registrar, consistent with the regional focus. Technical risks are low but could be improved by enhancing security headers and privacy compliance mechanisms.
Standards and sources

Reference chips under each finding point to the standard, regulation or specification the finding relates to. They are taken from the official datasets below and mapped conservatively: a finding with no defensible link shows none. NIS2 and GDPR references mark where a finding is relevant evidence, not a compliance verdict. Implementing Regulation (EU) 2024/2690 binds digital infrastructure and digital service providers; for other entities it is the most detailed public reading of the Article 21 measures. WCAG, EN 301 549, European Accessibility Act and Web Accessibility Directive references name the requirement an automated accessibility rule relates to; they are not a conformance verdict.

Retrieved 2026-10-25

Earlier scans of this domain

  1. 58/100Medium34 findingsView report
Reviews of this site

Share your experience with ms-ic.cz. Every review is verified by email and published after moderation.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

No published reviews yet. Be the first to review ms-ic.cz.

Feedback on this report

Rate this report, add an optional comment, and tell us if you want a security specialist to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.