Latvia security reports

C

CleanR | Industry | Verso

cleanr.lv

60

CleanR is a business-oriented website focused on industry-related services, likely in the cleaning sector, as suggested by the domain and branding. The website uses WordPress CMS with Yoast SEO for optimization and integrates Cookiebot for cookie consent management, indicating attention to privacy compliance. The presence of Google Tag Manager and multiple analytics and advertising services such as Google Analytics, Hotjar, and Meta Platforms suggests a mature digital marketing infrastructure. However, the absence of explicit privacy policies, terms of service, and contact information limits transparency and user trust. The website is hosted with Cloudflare DNS, providing some level of security and performance benefits. Security posture is moderate with HTTPS implied but lacking explicit security headers and documented policies. Overall, the site is accessible without WAF or blocking mechanisms and is safe for general audiences.

The website kakiem.lv currently serves a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The visible metadata and HTML content reveal the use of outdated CMS platforms such as Joomla 1.5 and WordPress 2.5, which are no longer supported and pose significant security risks. There is a lack of any privacy, cookie, or terms of service policies, and no contact or business information is provided, limiting the ability to assess the business credibility or compliance posture. Technically, the site shows minimal content with basic styling and a scripted redirect after a countdown, likely part of the security challenge. No modern security headers or HTTPS enforcement are visible in the HTML content, and no analytics or tracking technologies are detected. The external link to BitNinja.IO suggests reliance on third-party security services. Overall, the technical implementation is outdated and lacks modern web best practices. From a security perspective, the site’s use of legacy CMS versions and absence of visible security headers or policies indicates a weak security posture. The presence of a security challenge page improves protection but also limits content accessibility and analysis. The WHOIS data shows an active domain with consistent name servers, but no registrant details are provided, which restricts trust evaluation. Given these factors, the website’s overall risk is elevated due to outdated software, lack of compliance documentation, and limited transparency. Strategic recommendations include upgrading CMS platforms, implementing comprehensive security headers and HTTPS, publishing privacy and cookie policies, and providing clear business contact information to improve trust and compliance.

T

Tet AS

tet.lv

71

Tet AS is a leading Latvian telecommunications and energy provider offering a comprehensive range of services including optical and DSL internet, interactive and terrestrial television, mobile internet, and electricity supply. The company targets both private individuals and business customers within Latvia, maintaining a strong market position supported by a large customer base and extensive service portfolio. The website reflects a mature digital presence with modern technologies, multi-language support, and active marketing campaigns. Technically, the site employs custom web components, integrates Google Tag Manager for analytics, and uses Weglot for translations, indicating a well-maintained and performance-optimized infrastructure. Security posture is strong with HTTPS enforced, proper security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident through comprehensive privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. Overall, Tet demonstrates a high level of professionalism, trustworthiness, and digital maturity, making it a reliable service provider in its sector.

R

Recruitment.lv

recruitment.lv

61

Recruitment.lv is a well-established recruitment agency operating in Latvia and the Baltic region, specializing in personnel selection and talent acquisition for various business sectors. The company is part of Alma Career Latvia SIA group and boasts over 23 years of industry experience, positioning itself as a market leader. Their website reflects a professional and comprehensive service offering, targeting Latvian businesses seeking recruitment solutions. Technically, the website is built on WordPress with modern technologies such as jQuery, Elementor, and uses Cloudflare for DNS and CDN services, ensuring good performance and security. The site implements GDPR-compliant cookie consent and privacy policies, indicating a mature approach to privacy and compliance. Security posture is strong with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

A

Alma Career Latvia SIA

visidarbi.lv

65

VisiDarbi.lv is a prominent Latvian job portal operated by Alma Career Latvia SIA, offering a comprehensive platform for job seekers and employers. The site aggregates thousands of job listings from multiple sources, providing services such as job alerts, vacancy publishing, and user registration. It targets both local and international job markets, with listings in Latvia and abroad. The portal is part of the Alma Career family, indicating a strong backing and market presence. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Facebook Pixel, Hotjar, and reCAPTCHA to enhance user experience, security, and marketing effectiveness. The site is mobile-optimized and uses responsive design principles, although some accessibility features could be improved. Performance is moderate with good SEO practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and manages user consent for analytics and advertising cookies. While some security headers are not explicitly detected, the overall posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, VisiDarbi.lv presents a trustworthy and professional online presence with strong business credibility and technical maturity. The risk profile is low, with recommendations to enhance security headers and accessibility for further improvement.

C

CV-Online

cv.lv

64

CV-Online is a leading online job portal serving the Baltic states, primarily Latvia. The platform offers job listings, CV databases, and recruitment services targeting job seekers and employers. It holds a strong market position with multiple employer partnerships and a professional online presence. The website employs modern web technologies such as React and Next.js, integrated with analytics and marketing tools like Google Tag Manager, Hotjar, Facebook Pixel, and Intercom, indicating a mature digital infrastructure. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is basic with cookie consent mechanisms present but no visible privacy or terms of service pages. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve transparency and security practices.

L

Latvijas Mobilais Telefons

lmt.lv

56

Latvijas Mobilais Telefons (LMT) is a leading telecommunications provider in Latvia, offering a wide range of mobile telephony, internet, and entertainment services. The company maintains a strong market position with extensive 5G coverage and a comprehensive retail offering of devices and accessories. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization, targeting both private consumers and business clients in Latvia. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, hosted on Amazon Cloudfront CDN, ensuring fast performance and good accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website and domain WHOIS data align well, indicating a trustworthy and legitimate business entity.

L

Latvijas Pasts

pasts.lv

58

Latvijas Pasts is the national postal service provider in Latvia, offering a wide range of postal and logistics services including parcel and letter sending and receiving, courier services, and financial services. The organization positions itself as a reliable and modern postal partner connecting the Baltic region with the world. The website reflects a mature digital presence with multilingual support, clear navigation, and integration with digital platforms such as mans.pasts.lv for shipment management. Technically, the site uses modern JavaScript frameworks and consent management tools, hosted on Microsoft Azure DNS infrastructure, indicating a robust and scalable setup. Security posture is good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, serving a broad general audience without any adult or questionable content.

V

Visa

visa.lv

65

Visa.lv is the Latvian regional website for Visa, a globally recognized leader in digital payment solutions. The site provides comprehensive information about Visa's services, including payment cards, mobile payments, and security technologies, targeting consumers, businesses, and fintech innovators. The website reflects Visa's strong market position and commitment to secure, innovative payment technologies. Technically, the site is built on modern web technologies including Stencil.js and leverages Adobe Experience Manager as its CMS, with Cloudflare providing hosting and CDN services. The site is well-optimized for performance, mobile responsiveness, and accessibility, and integrates advanced analytics and marketing tools such as Google Analytics, ContentSquare, Eloqua, and Tealium. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with user consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity, supporting Visa's global brand reputation.

T

Tirdzniecības centrs SPICE

spice.lv

68

Tirdzniecības centrs SPICE is a prominent retail shopping center in Latvia, offering over 200 fashion and lifestyle stores including well-known international brands. The website reflects a professional retail business with a clear market position targeting general consumers interested in fashion and lifestyle products. The business model focuses on providing a comprehensive shopping experience with a wide variety of stores and services. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with good mobile optimization and performance. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is strong with comprehensive privacy and cookie policies and active consent mechanisms. Overall, the website and business demonstrate legitimacy and professionalism with no critical security or content safety concerns.

The website at moolan.lv is currently inaccessible due to a 403 Forbidden error, indicating that access to the content is blocked. As a result, no meaningful business information, contact details, or policies are publicly available. The site appears to be hosted on SiteGround, but no further technical or business details can be extracted from the current content. The lack of accessible content severely limits the ability to assess the company's market position, services, or compliance posture. From a security perspective, the site does not expose any content or forms, but also lacks visible security headers or policies. Overall, the site is not currently usable for external visitors, which poses a significant risk to business credibility and user trust.

Latvijas Valsts mežzinātnes institūts "Silava" is a Latvian government research institute specializing in forestry science. The organization provides scientific research, publications, consulting services, and organizes events related to forestry. The website serves as an information portal targeting researchers, forestry professionals, government entities, and the general public interested in forestry science. Technically, the website is built on Joomla CMS with modern JavaScript libraries such as jQuery and Bootstrap, and includes Google Tag Manager for analytics. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled and CSRF tokens in forms, but lacks important security headers and a published security policy. Privacy compliance is partial with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the domain WHOIS data is consistent and trustworthy, matching the business profile. The website is safe with no adult or questionable content detected.

D

DCL

dcl.lv

39

DCL is a Latvian-based company specializing in technological solutions for the food processing industry, particularly in manufacturing and supplying sausage casings, vacuum and thermo packaging bags, food additives, and related products. The company has a strong presence in the Baltic market and is expanding into international markets including Poland, Israel, Scandinavia, and others. The website is built on WordPress using modern plugins and frameworks, hosted with Cloudflare DNS, and presents a professional and consistent brand image. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy and cookie policies, indicating room for compliance improvement. Contact information is clearly provided through multiple channels including phone, email, and contact forms. Overall, the website is trustworthy and well-positioned for its business sector.

The website srab.lv is currently inaccessible beyond a security challenge page powered by BitNinja.IO, which performs browser integrity checks and automatic redirects. The visible content is minimal, showing only a loading animation and a countdown timer. The site appears to be built on outdated CMS platforms (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities. No privacy, cookie, or terms of service policies are present, nor is there any contact or business information available on the page. The domain is active with Latvian name servers, but no registrant details are provided to verify legitimacy. Overall, the site lacks transparency and modern security practices, limiting trust and usability.

S

SAULAINAS NOMETNES BĒRNIEM 2025

saule.lv

54

The website www.saule.lv represents a small Latvian business organizing children's summer camps for ages 8 to 13. The camps focus on educational and recreational activities including expeditions, language learning, horseback riding, and cultural experiences. The business targets families seeking enriching summer activities for children within Latvia. The site is hosted on Google Sites, leveraging Google Fonts and Google Analytics for tracking. The technical infrastructure is modern and secure with HTTPS and security headers properly configured. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Contact information is limited to phone numbers and Facebook social media links, with no email addresses or incident response contacts published. Overall, the website is professionally presented with good content quality and user experience, but improvements in privacy compliance and security transparency are recommended.

S

Spilva

spilva.lv

43

Spilva is a well-established Latvian food manufacturing and retail company specializing in sauces, preserves, and ready meals since 1992. The website reflects a mature digital presence with a comprehensive product catalog, multimedia content, and clear branding. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The domain registration aligns well with the business history and claims, enhancing trustworthiness. Overall, the site presents a professional and credible business front with good user experience and compliance with privacy regulations.

S

SETUPAD Inc.

setupad.com

62

SETUPAD Inc. operates a specialized website monetization platform focused on optimizing ad revenue for publishers through advanced programmatic advertising technologies. The company offers tailored products such as Setupad Self-Serve, Setupad Bidder, and Managed Prebid services, targeting digital publishers and advertisers globally. With over 500 international websites and partnerships with 31 SSPs, Setupad holds a strong market position in the ad tech industry, supported by certifications like Google Certified Publishing Partner and Prebid.org membership. The website reflects a mature digital presence built on WordPress with modern frameworks and CDN support, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, domain transfer protection, and Cloudflare DNS, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, supported by client success stories and transparent contact information.

T

TVNET GRUPA

tvnetgrupa.lv

47

TVNET GRUPA is a leading Latvian online media group operating multiple media brands and providing advertising services. The company focuses on delivering quality content to strengthen the Latvian informational space and serves a broad audience including general public and advertisers. The website reflects a professional media presence with consistent branding and clear contact information. Technically, the site is built on WordPress with a child theme, uses modern tracking tools like Google Analytics and Facebook Pixel, and is hosted behind Cloudflare, ensuring good performance and security. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR requirements. Security posture is generally good with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and professionally maintained, but should address privacy compliance and security transparency to enhance user trust and regulatory adherence.

I

draugiem.lv

ifrype.com

55

Draugiem.lv is a well-established Latvian social networking platform, founded in 2008, serving as the country's first and most popular domestic social network. It offers users the ability to register, create friendly connections, and utilize various portal features such as messaging, groups, and media sharing. The website is primarily targeted at Latvian users and operates in the technology sector with a focus on social networking services. Technically, the site uses standard web technologies including JavaScript, CSS, and HTML5, with Cloudflare DNS and GoDaddy as the domain registrar. The site is accessible via HTTPS, ensuring encrypted communication, but lacks DNSSEC which could enhance DNS security. Security headers are minimal, with only a Content-Security-Policy enforcing upgrade of insecure requests. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR regulations. No explicit contact information or incident response policies are found, which could impact user trust and regulatory compliance. Overall, the site demonstrates moderate technical maturity and security posture but would benefit from enhanced privacy compliance and security best practices.

N

NIC

nic.lv

61

NIC operates as the official registry for the .lv top-level domain, managed by the Latvian University Mathematics and Informatics Institute. The website provides domain registration and management services directly and through a broad network of partner registrars. It targets domain registrants and registrars primarily within Latvia, maintaining a strong market position as the authoritative .lv domain registry. The site is well-structured, professionally designed, and offers clear navigation and multilingual support (Latvian and English). The presence of social media channels and comprehensive contact information enhances its credibility. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Google reCAPTCHA integrated to secure form submissions. The site is mobile-optimized and uses HTTPS with excellent SSL configuration, ensuring secure communications. While no major frameworks or CMS platforms are detected, the custom implementation appears stable and performant. SEO and accessibility are addressed at a basic to good level, with room for improvement in accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, use of CAPTCHA, and cookie consent mechanisms. However, it lacks explicit security headers and a public incident response contact or vulnerability disclosure policy. No vulnerabilities or suspicious content were detected. The WHOIS data aligns perfectly with the website’s claims, showing a long-standing domain registration consistent with the business history. Overall, NIC’s website is a trustworthy, professional platform serving a critical role in Latvia’s internet infrastructure. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance its security posture and user trust.

L

likumuizsekotajs.lv

likumuizsekotajs.lv

53

Likumu izsekotājs is a Latvian-focused legal technology service that automates the tracking of legislative changes, specifically targeting decisions made by the Cabinet of Ministers and Saeima sessions. The platform leverages artificial intelligence to match user-defined topics with relevant government decisions, streamlining the monitoring process for organizations such as banks, law firms, and municipalities. The service is currently in a pilot phase, inviting large organizations to participate and provide feedback before public release. Technically, the website employs modern frontend technologies including Vue.js and ES modules, delivering a responsive and user-friendly experience. While the site demonstrates good design and content quality, there is room for improvement in security posture, particularly in implementing security headers and cookie consent mechanisms. The absence of explicit contact emails and phone numbers limits direct communication channels, relying instead on a contact form. From a security perspective, the site is accessible without WAF or blocking mechanisms, but lacks several best practices such as security headers and vulnerability disclosure information. The WHOIS data indicates a Latvian natural person as registrant, consistent with the website's regional focus, though detailed organizational information is not provided. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected but with opportunities to enhance trust and compliance. Strategically, the company should prioritize strengthening its security framework, enhancing privacy compliance, and expanding contact options to build greater trust with its target enterprise audience. These improvements will support its positioning as a reliable legal-tech solution in the Latvian market.

A

ALOR.pro / Alor.lv

alor.lv

42

ALOR.pro / Alor.lv is a Latvian-based e-commerce platform specializing in professional and exclusive cosmetics for both home use and salon professionals. The website offers a wide range of beauty products including hair care, face care, body care, makeup, and vitamins, targeting both consumers and professional users. The business model focuses on online retail with special pricing and product access for registered professionals. The site is well-branded and consistent, with a clear focus on the Latvian market and some multilingual support.

L

LMT

viedtelevizija.lv

39

LMT Viedtelevīzija is a Latvian smart television service operated by LMT, a major telecommunications provider in Latvia. The website serves as a digital platform for their smart TV offerings, targeting Latvian consumers interested in digital television and streaming services. The business model appears to be subscription-based, leveraging LMT's established telecommunications infrastructure. The website's market position is consistent with a large telecommunications company expanding into digital media services. Technically, the website employs modern JavaScript ES modules and standard web assets such as CSS and manifest files, indicating a contemporary web development approach. However, the provided HTML content is minimal and lacks visible user-facing content, which limits the assessment of user experience and content richness. Mobile optimization and accessibility are basic, with no advanced SEO or accessibility features detected in the snapshot. From a security perspective, the website lacks visible security headers and does not expose privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, and no vulnerability disclosure mechanisms are evident. The domain WHOIS data aligns well with the LMT brand, using LMT name servers and showing no suspicious patterns, supporting the legitimacy of the site. Overall, the website is functional but basic, with room for improvement in content richness, privacy compliance, and security posture. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, providing clear contact and incident response information, and improving content quality and accessibility to better serve users and comply with regulations.

Invest in Latvia is the official investment promotion website managed by the Investment and Development Agency of Latvia (LIAA). The site promotes Latvia as a prime destination for foreign investment by highlighting key economic sectors such as bioeconomy, biomedicine, smart energy, ICT, and photonics. It targets foreign investors, startups, and business professionals seeking opportunities in Latvia. The website provides comprehensive resources including incentives, success stories, news, and contact information to facilitate investment decisions. Technically, the website employs modern web technologies including Google Maps API for location services, ShareThis for social sharing, and jQuery with Slick Slider for interactive UI elements. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be enhanced. Hosting and domain registration are stable and consistent with a government agency profile. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms and CSRF protection on forms. However, DNSSEC is not enabled and no explicit security headers were detected in the provided data. There is no published security policy or incident response contact, which could be improved to enhance trust and compliance. No critical vulnerabilities or blocking mechanisms were found, indicating a generally secure posture. Overall, Invest in Latvia presents a professional, trustworthy, and informative platform for investment promotion with good business credibility and moderate technical maturity. Strategic improvements in security headers, DNSSEC, and published security policies would further strengthen its security posture and compliance.

K

KurPirkt.lv - Visi interneta veikali. Uzzini, kur pirkt!

kurpirkt.lv

53

KurPirkt.lv is a Latvian e-commerce price comparison and online store catalog website designed to help users find products and compare prices across various Latvian internet stores. The platform targets Latvian online shoppers and offers services such as product search, price comparison, and listings of popular products. The website is primarily in Latvian with an option for a Russian version, indicating a regional focus. The business model centers on aggregating product data from multiple stores to facilitate informed purchasing decisions. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Google Tag Manager for analytics. The design is responsive and user-friendly, providing a good user experience on mobile devices. However, the site lacks advanced technical frameworks or CMS indications and shows moderate performance and SEO optimization. Security-wise, the site uses HTTPS (assumed from URL), but no explicit security headers or advanced protections are detected. There is no visible cookie consent mechanism or comprehensive privacy compliance features, which may pose compliance risks. Contact information is limited to a single email address in the footer, with no phone numbers or physical addresses provided. Overall, the website is functional and serves its business purpose but would benefit from enhanced security measures, privacy compliance, and richer contact information to improve trust and regulatory adherence.

S

SIA TVNET Grupa

apollo.lv

50

Apollo.lv is a prominent Latvian news and entertainment website operated by SIA TVNET Grupa. It offers a wide range of content including news, horoscopes, sports, technology, and entertainment, targeting a general audience in Latvia. The site is well-established with a professional editorial team and strong market presence as part of a larger media group. Technically, the website employs modern web technologies such as Vue.js, Google Analytics, Chartbeat, and a subscription/paywall system via Piano.io, indicating a mature digital infrastructure. The site is mobile-optimized and follows good SEO and accessibility practices. Security-wise, Apollo.lv enforces HTTPS, uses multiple security headers, and integrates a consent management platform for GDPR compliance. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the business information, supporting legitimacy. Overall, Apollo.lv demonstrates a strong security posture, good privacy compliance, and high business credibility.

The website at itvnet.lv currently presents no accessible content, with an empty HTML body and no metadata or visible elements. The domain is active and uses Cloudflare nameservers, suggesting the presence of a Web Application Firewall or security protection that blocks content access. Due to the lack of content, no business information, contact details, or policies are available for analysis. The technical infrastructure appears to rely on Cloudflare for hosting or protection, but no further technology stack details can be determined. Security posture cannot be properly evaluated given the absence of accessible content, and no privacy or compliance indicators are present. Overall, the site appears either under maintenance, protected by a security challenge, or inactive, resulting in a low trust and credibility rating.

V

VILKS Group

vilksgroup.com

50

VILKS Group is a Latvia-based transportation company specializing in international road freight services with a focus on temperature-controlled cargo across Europe. Established in 2007 as a successor to MULTILOG, VILKS leverages over 14 years of industry experience and a dedicated team to provide groupage, full cargo transportation, warehousing, local deliveries, and express freight services. Their market position is that of a reliable and specialized logistics partner serving businesses requiring temperature-sensitive transport solutions, particularly in the Baltic region and Finland. Technically, the website is built on WordPress with standard plugins such as Contact Form 7 and integrates modern tracking and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and content quality, reflecting a mature digital presence. Hosting and domain registration are consistent with professional standards, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA on forms, along with a cookie consent mechanism, indicating compliance with GDPR. However, there is room for improvement in security headers and explicit security policies. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve trust and readiness. Overall, the website and business demonstrate a solid risk posture with no critical vulnerabilities detected. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security policies, and enhancing incident response transparency to further strengthen security and compliance.

S

SIA "Skaistumpasaule"

shopbeauty.lv

53

Shopbeauty.lv is an established Latvian online cosmetics retailer operating since 2009 under the company SIA "Skaistumpasaule". The website offers a wide range of beauty and cosmetic products from numerous brands, targeting Latvian consumers interested in personal care and beauty products. The business model is focused on e-commerce retail with additional customer engagement through promotions, brand filtering, and social media presence. The company provides clear contact information and physical pickup options, reinforcing its local market presence. Technically, the website uses a custom CMS platform with common web technologies including jQuery, Google Analytics, Google Tag Manager, Facebook Pixel, and Tawk.to for live chat support. The site is served over HTTPS, ensuring secure communication. However, the site lacks advanced security headers and a cookie consent mechanism, indicating room for improvement in privacy compliance and security hardening. The website performance and mobile optimization are basic but functional. From a security perspective, the site demonstrates a moderate security posture with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contacts is a gap in transparency and preparedness. The use of third-party tracking and marketing tools is standard but requires ongoing monitoring for privacy compliance. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, shopbeauty.lv is a legitimate and moderately mature e-commerce site with good business credibility and a consistent brand presence. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and regulatory adherence. The site is safe for general audiences with no adult or questionable content detected.

F

FN-Serviss

fnserviss.lv

68

FN-Serviss is a Latvian company specializing in fire safety, occupational safety, environmental protection products, and related training services. Established around 2017, it holds a leading position in the Baltic region for safety expertise. The company operates an e-commerce platform alongside offering professional training and consulting services. Their website is well-structured, professionally designed, and targets businesses and individuals seeking safety solutions and education. The presence of certifications and a comprehensive privacy policy enhances their credibility. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various plugins for analytics, marketing, and user engagement. Hosting is provided by abchost.lv, and the site uses HTTPS with good SSL configuration. The site is mobile-optimized and SEO-friendly, though some technical debt is noted with the use of an outdated jQuery version. Security posture is generally good with HTTPS and cookie consent mechanisms in place, but improvements are recommended in updating libraries and implementing explicit security headers. Privacy compliance is strong, with GDPR-aligned policies and cookie consent banners. Contact information is clearly presented, supporting business credibility. Overall, FN-Serviss presents a trustworthy and professional online presence with moderate technical maturity and good compliance. Strategic improvements in security and technical modernization would further enhance their posture and user trust.

Mehanik LV SIA is a Latvian small business specializing in automotive repair, maintenance, detailing, and car sales, with a strong focus on BMW vehicles. The company offers a comprehensive range of services including diagnostics, engine repair, body and wheels painting, detailing with ceramic coating, carbon parts production, and car sales with ordering and delivery from Germany. Their market position is that of a niche specialist serving car enthusiasts and owners in Latvia and nearby regions. The website is built on WordPress with WooCommerce, indicating a mature digital infrastructure supporting e-commerce and service presentation. The technical stack includes modern libraries and plugins, with Cloudflare DNS providing reliable hosting and security infrastructure. Security posture is moderate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information and company registration details are clearly presented, enhancing business credibility. Overall, the website is professional and functional but would benefit from improved privacy compliance and security best practices.

T

Truesix

truesix.co

52

Truesix is a specialized PR and content marketing agency focused on elevating local brands to international prominence through strategic PR campaigns and high-quality online content. Their service offerings include SEO blogging, international PR, content writing workshops, thought leadership, event PR, and creative brainstorming. The company targets brands with ambitious growth plans seeking global exposure. Technically, the website is built on Webflow with modern analytics and tracking tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and published privacy or cookie policies indicates room for improvement. The WHOIS data is privacy protected, which is typical for agencies, and no suspicious domain registration patterns were found. Overall, the website presents a professional and trustworthy image with strong client testimonials and media mentions, but could enhance compliance and security transparency.

J

Jāņa sēta

balticmaps.eu

58

BalticMaps is a web-based cartographic and geospatial service platform operated by SIA “Jāņa sēta,” a Latvian company specializing in mapping and geospatial data services for the Baltic region. The website offers comprehensive map browsing, address and place search, route planning, traffic congestion information, and measurement tools. It targets general users in Latvia and neighboring Baltic countries, positioning itself as a leading regional map service provider. The business model appears to focus on free personal use with potential commercial services via affiliated sites like kartes.lv. Technically, the site leverages modern web mapping technologies including OpenLayers and Mapbox GL JS, built on React with Material-UI styling, and integrates Google services for analytics and bot protection. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content in Latvian.

Jāņa sēta is a leading cartography and geospatial solutions company based in Latvia, serving the Baltic region. The company specializes in producing traditional cartographic publications, providing high-quality geospatial data services, and delivering custom mapping and research projects. Their market position is strong within the Baltic states, targeting both business and individual customers interested in maps, education, tourism, transport, and research. The website reflects a medium-sized enterprise with a professional digital presence, leveraging WordPress and WooCommerce technologies to offer products and services online. Technically, the website is built on a modern WordPress platform with a comprehensive plugin ecosystem including Yoast SEO, WooCommerce, and cookie consent management tools. The site is mobile-optimized, moderately performant, and SEO-friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved and explicit incident response information is absent. Overall, the website is trustworthy, professionally designed, and compliant with GDPR requirements. It maintains clear contact channels and social media presence, supporting business credibility. No critical vulnerabilities or suspicious patterns were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

V

Viatris Latvija

viatris.lv

51

Viatris Latvija operates as a local branch of the global pharmaceutical company Viatris Inc., providing high-quality medicines and healthcare solutions tailored to the Latvian market. The website serves multiple audiences including healthcare professionals, patients, investors, and job seekers, offering comprehensive information about products, corporate culture, and investor relations. The site is well-branded and consistent with the global Viatris identity, reflecting a mature enterprise-level business model focused on healthcare delivery and innovation. Technically, the website leverages a modern technology stack including jQuery, Backbone.js, and Sitecore CMS, ensuring a responsive and accessible user experience. The presence of Google Tag Manager indicates active analytics and marketing tracking, balanced with GDPR-compliant privacy and cookie policies. The site demonstrates good SEO and accessibility practices, with clear navigation and localized content in Latvian. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious domains were detected. The WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, Viatris.lv presents a professional, secure, and compliant digital presence appropriate for a global healthcare company’s local branch. Strategic improvements in security policy transparency and header implementation could further enhance trust and resilience.

Z

Zentiva Group, a.s. filiāle Latvijā

zentiva.lv

76

Zentiva.lv represents the Latvian branch of Zentiva Group, a multinational pharmaceutical company specializing in the manufacture and distribution of generic medicines. The website targets healthcare professionals and the general public in Latvia, providing information about their products and corporate presence. The company maintains a strong market position with multiple subsidiaries across Europe and beyond, reflecting a large enterprise scale. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for analytics and GDPR compliance, ensuring a good level of digital maturity. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data, though it lacks some advanced security headers and a public security policy. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Sarma & Norde

sarmanorde.lv

49

Sarma & Norde is a Latvian architecture firm specializing in residential and public building projects, as evidenced by their portfolio including Sporta 2 kvartāls and Gāliņciema bibliotēka. The website serves as a professional showcase of their work targeting clients seeking architectural design services primarily in Latvia. The firm maintains a consistent brand presence with clear contact information and social media linkage, enhancing client trust. Technically, the website is built on WordPress with Yoast SEO plugin integration, leveraging Cloudflare for DNS and CDN services. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with modern technologies like jQuery and a custom theme. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and formal security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies. No vulnerability disclosure or security.txt files are present, indicating room for improvement in security transparency. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user confidence.

T

TORMANIS UN PARTNERI SIA

tormans.lv

62

Tormans is a well-established Latvian company specializing in retail and wholesale of interior finishing materials such as tiles, floor coverings, and sanitary ware. With over 25 years of experience, it holds a strong market position as a leading expert in its sector, serving both individual consumers and larger projects. The website reflects a professional and consistent brand image, providing clear contact information and a structured product offering. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Google Fonts, hosted behind Cloudflare, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and employs standard marketing and analytics tools effectively.

E

ESA BIC Latvia

esabic.lv

57

ESA BIC Latvia operates as a space startup incubator and is part of the European Space Agency’s network of incubators. The website presents a professional image consistent with its role in supporting SpaceTech founders and companies with space-related technologies. The technical infrastructure is based on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills. The site is hosted securely with HTTPS and shows moderate performance and good mobile optimization. However, the site lacks explicit privacy, cookie, and terms of service policies, which impacts its privacy compliance score. Security posture is generally good with HTTPS and some security best practices in place, but could be improved by adding security headers and a vulnerability disclosure policy. Overall, the website is trustworthy and credible but would benefit from enhanced privacy and security transparency.

D

Deep Tech Atelier

deeptechatelier.com

52

Deep Tech Atelier is a specialized event organizer hosting the largest deep tech conference in the Baltics, targeting entrepreneurs, scientists, investors, and industry leaders. The website promotes the upcoming Deep Tech Atelier 2025 event in Riga, Latvia, showcasing agenda, speakers, startup pitch competition, and expo information. The business model centers on event organization and industry networking within the technology sector. The site is built on WordPress with SEO optimization and accessibility features, reflecting a moderate level of digital maturity.

S

SIA Qrunch

qrunch.eu

53

Qrunch is a hospitality-focused SaaS platform providing digital hotel menus and room service automation solutions designed to increase upselling revenue and reduce staff workload. The company targets hotels and restaurants, offering multi-language support, order management apps, and marketing integrations. The website is professionally designed using modern web technologies such as Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are recommended in cookie consent and security policy transparency. Overall, the domain registration and website content are consistent and trustworthy, supporting a positive business credibility profile.

Latvijas Tirdzniecības un rūpniecības kamera (LTRK) is the largest business association in Latvia, representing over 8000 members including individual companies and business associations across all regions and sectors. The organization provides business representation, export support, training, and networking services, positioning itself as a key player in Latvia's business ecosystem with a history spanning approximately 90 years. The website is professionally designed, mobile-optimized, and rich in relevant content targeting Latvian entrepreneurs and businesses. Technically, the site is built on WordPress, leveraging modern libraries such as jQuery, Swiper.js, and FontAwesome, and is hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforced, security headers present, and cookie consent mechanisms implemented. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

S

Sviridenko & Partners

sviridenko.law

69

Sviridenko & Partners is a small legal services firm specializing in fintech law, corporate law, compliance, AML, MiCA regulation, and immigration services. The firm targets both B2B clients and private individuals, positioning itself as a trusted legal partner in the fintech and regulatory compliance niche. The website reflects a professional and consistent brand image with clear service offerings and a focus on regulatory expertise. Technically, the website is built on the Tilda CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Cookiebot for consent management. The site is mobile optimized and performs moderately well with good SEO and accessibility basics. Security posture is solid with HTTPS enabled and domain transfer locks in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed through Cookiebot consent mechanisms and a comprehensive privacy policy. However, no explicit terms of service or incident response policies are published. Overall, the website is trustworthy, safe, and professionally maintained, suitable for its business purpose.

C

commercializationreactor.com

commercializationreactor.com

63

Commercialization Reactor is a specialized platform that connects scientists and entrepreneurs to foster the creation and acceleration of deep-tech startups. The company is recognized as the leading deep-tech program provider for talent in Europe, offering structured programs including start-up creation, acceleration, and investment opportunities. The website demonstrates a professional and consistent brand presence, supported by partnerships with notable entities such as the ESA Business Incubation Centre Latvia. Technically, the site is built on WordPress with a modern tech stack and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS and no visible vulnerabilities, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the website is trustworthy and well-positioned in its niche, but improvements in privacy compliance and domain transparency are recommended.

V

Venture Faculty

venturefaculty.io

57

Venture Faculty is a venture partnering hub based in the Baltics, primarily Latvia, offering a comprehensive suite of services including corporate and legal advisory, investments, startup consulting, fintech advisory, software development, and AI integration. The company targets startups, entrepreneurs, corporations, and investors, positioning itself as a key player in the regional venture ecosystem with a strong network of institutional partners and collaborators. The website reflects a professional and modern digital presence, leveraging Webflow CMS and integrating advanced analytics and marketing tools such as Google Analytics, Hotjar, and Calendly for scheduling. Security posture is solid with HTTPS and secure forms, though there is room for improvement in security headers and explicit consent mechanisms. Overall, the business demonstrates strong credibility and trustworthiness with clear contact channels and comprehensive privacy documentation.

W

WISEMEAL

wisemeal.eu

56

WISEMEAL is an e-commerce business specializing in plant-powered backup meals and snacks designed for busy, health-conscious consumers. The company offers a range of plant-rich meal mixes that are quick and easy to prepare, targeting individuals seeking nutritious meal alternatives on the go. The website is professionally designed on the Shopify platform, featuring multilingual support and integrated customer review systems, positioning WISEMEAL as a trusted niche player in the plant-based nutrition market.

A

Alcadrain s.r.o.

alcadrain.lv

42

Alcadrain s.r.o. is a well-established Czech family-owned manufacturer specializing in sanitary technology products, operating since 1998. The company holds a strong market position as the largest sanitary technology manufacturer in Central and Eastern Europe, offering a wide range of products including flushing cisterns, shower channels, siphons, and accessories. Their website reflects a professional and modern digital presence with multilingual support targeting regional markets. Technically, the site leverages Joomla CMS with modern frontend libraries and frameworks, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data limits domain trust verification, but the website content and business information appear consistent and credible. Overall, the site demonstrates a mature digital footprint suitable for a large manufacturing business.

Z

Zauers.lv

zauers.lv

61

Zauers.lv is a well-established Latvian e-commerce business operating since 1998, offering a wide range of products including electronics, toys, mobile phones, home appliances, and sports goods. The company targets general consumers in Latvia, providing online shopping with delivery services and additional repair and data recovery offerings. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site uses a combination of legacy and modern JavaScript libraries, including jQuery and CookieConsent, and integrates popular analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible advanced security headers and explicit incident response policies. Overall, the site is trustworthy and compliant with GDPR, though WHOIS data is unavailable due to query limits, limiting full domain legitimacy assessment.

T

The Higher Education and Science Information Technology Shared Service Centre (VPC)

vpc.lv

67

The website vpc.lv represents The Higher Education and Science Information Technology Shared Service Centre (VPC), a collaborative initiative by Latvia's four largest universities to advance digitalization and IT services in the education sector. The platform offers key academic IT services such as eduGAIN, eduroam, Dataverse, TLS/SSL certificates, and ORCID integration, targeting the Latvian academic and research community. The site is built on WordPress with modern plugins and includes a comprehensive cookie consent mechanism, reflecting a commitment to privacy compliance. Technically, the site is moderately optimized with good mobile responsiveness and basic SEO and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. The lack of WHOIS data limits domain registration insights, but the website's content and affiliations strongly indicate legitimacy. Overall, the site is professional, trustworthy, and focused on serving the educational IT needs of Latvia's academic institutions.

S

SIA Dators x Dizains

mitinatajs.lv

44

The website www.mitinatajs.lv represents a small Latvian company, SIA Dators x Dizains, offering web hosting and domain registration services primarily targeting Latvian and international customers. The business model focuses on direct service provision with individual client support, offering a range of hosting features including cPanel, email hosting, backups, and domain management. The site content is clear and informative, with transparent pricing and partner references, positioning the company as a local niche hosting provider. Technically, the website uses Bootstrap for responsive design, integrates Google Analytics and Facebook SDK for tracking, and supports legacy PHP versions on the hosting side. The site is moderately optimized for performance and mobile, though accessibility and SEO are basic. There is no detected CMS platform, and hosting provider details are not explicit. The site lacks HTTPS enforcement and security headers, which are critical for secure operations. From a security perspective, the site shows basic best practices such as antivirus and antispam support and SSL/TLS availability, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of privacy and cookie policies is a compliance gap, especially under GDPR. WHOIS data is unavailable due to query limits, limiting domain trust analysis, but the business appears legitimate with consistent branding and contact information. Overall, the website is functional and business-focused but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and protect customer data. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and establishing incident response protocols.