Latvia security reports

F

Factum Interactive

club-interactive.com

52

Club Interactive is a small Latvian-based company operating an online paid survey platform targeting Latvian and Russian-speaking users. The website offers paid surveys with a points and rewards system, supporting multilingual content to cater to its regional audience. The business model focuses on market research through incentivized survey participation, positioning itself as a niche player in the regional market. The company behind the site is Factum Interactive, with clear contact details and legal registration information provided, enhancing business credibility. Technically, the website is built on WordPress using common plugins and themes such as SiteOrigin Panels and Font Awesome. The site is moderately optimized for mobile devices and has a basic SEO setup. Performance is moderate with no major technical issues detected. However, there is room for improvement in accessibility and SEO optimization. The site uses HTTPS with a good SSL configuration but lacks important security headers, which could be added to improve security posture. From a security perspective, the site enforces HTTPS and does not expose sensitive data in the HTML. However, it lacks a cookie consent mechanism and formal incident response or vulnerability disclosure policies, which are important for GDPR compliance and security maturity. No security certifications or advanced security frameworks are indicated. The WHOIS data is consistent with the website's business information, supporting legitimacy. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is functional and credible but would benefit from enhanced security practices, improved privacy compliance, and better transparency regarding incident response. Strategic improvements in these areas would strengthen trust and regulatory compliance, supporting sustainable business growth.

A

As un Dēli, SIA

daas.lv

57

As un Dēli, SIA is a Latvian small business specializing in emergency sewage and plumbing services, offering a range of solutions including sewage suction, pipe cleaning, and video inspections. The company emphasizes 24/7 availability and has over 20 years of experience, positioning itself as a reliable local service provider. The website is professionally designed, with clear contact information and service descriptions tailored to Latvian customers. Technically, the site uses modern web technologies such as jQuery, Google Analytics, Snowplow, and service workers for PWA capabilities, hosted on a specialized CMS platform. Security posture is adequate with HTTPS and secure form handling, though improvements in security headers and incident response transparency are recommended. Privacy and cookie policies are present and GDPR compliant. Overall, the site reflects a trustworthy and professional business with moderate digital maturity.

I

INDIVIDUĀLĀS SAGATAVOŠANAS BASKETBOLA SKOLA

isbs.lv

40

ISBS.lv is a Latvian basketball training school specializing in individual and group basketball preparation services. The website targets local basketball players and sports enthusiasts, offering training schedules, events, and pricing information. The site is built on WordPress using Elementor and includes multimedia content such as images and videos. Social media integration is strong with official Facebook, YouTube, TikTok, and Instagram accounts linked. Technically, the website uses modern web technologies including HTTPS, Google Tag Manager for analytics, and JWPlayer for video content. However, it lacks important security headers and privacy compliance documentation such as privacy and cookie policies. No contact emails or phone numbers are explicitly provided on the site, which may impact user trust and compliance. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure information. Suspicious adult content links are present in hidden off-screen divs, likely injected or unrelated to the main business, which could pose reputational risks. Overall, the website is functional and professionally branded but requires improvements in privacy compliance, security best practices, and removal or mitigation of suspicious hidden content to enhance trustworthiness and regulatory adherence.

A

Avdejevka.lv – bērnu fiziskās sagatavotības centrs

avdejevka.lv

58

Avdejevka.lv operates as a children's physical training center in Latvia, focusing on group sports and fitness activities for children aged 5 to 16. The business maintains multiple physical locations in Riga and Mārupe, positioning itself as a local leader in children's physical development services. The website is built on the Tilda CMS platform, leveraging modern web technologies and content delivery networks to provide a responsive and user-friendly experience. The presence of social media channels and a contact form enhances customer engagement and accessibility. Security-wise, the site uses HTTPS and includes cookie consent mechanisms compliant with GDPR, but lacks advanced security headers and explicit security policies. Overall, the site presents a professional and trustworthy image suitable for its target audience.

B

BTG

btg.lv

44

BTG is a Latvian logistics and transportation company offering a range of services including cargo delivery within Latvia and Estonia, 24/7 warehousing, complex loading/unloading, and transportation of specialized cargo such as dangerous and temperature-controlled goods. The company emphasizes timely delivery and personalized service, supported by a dedicated team and a fleet of vehicles. The website reflects a medium-sized business with a professional online presence, targeting businesses requiring logistics solutions in the Baltic region. Technically, the site uses modern frontend technologies like Bootstrap and jQuery, with Google Analytics for tracking. However, it lacks visible privacy and cookie policies, and no WHOIS data was retrievable to verify domain registration details. Security posture is moderate with room for improvement in headers and form protections. Overall, the site is functional and professional but could enhance trust and compliance by publishing privacy-related policies and improving security controls.

S

SIA MERCO LINKS

mercolinks.lv

40

Merco Links is a Latvian company specializing in the manufacturing and retail of timber products including glued timber beams, pine boards, sawn timber, and heating briquettes. The company targets construction professionals, carpenters, and retail customers within Latvia, positioning itself as a quality local supplier with a business history dating back to at least 2012. The website content is well-structured, professionally presented, and primarily in Latvian, reflecting a focused regional market approach. Technically, the site uses established JavaScript libraries such as jQuery and FontAwesome, integrates Google Tag Manager and Facebook SDK for analytics and social media, and employs HTTPS for secure communication. However, some technologies like jQuery 1.8.2 are outdated and could pose security risks if not updated. Security posture is moderate with HTTPS enabled but lacking visible security headers and public security policies. Privacy compliance is good with a clear privacy policy and cookie consent mechanism in place. The absence of WHOIS data due to query limits limits domain trust analysis, but the website's professional presentation and contact information support legitimacy. Overall, the site is functional, secure enough for its business scope, and compliant with basic privacy regulations.

S

SIA Intra EL

intra-el.lv

51

INTRA EL is a Latvian company specializing in the manufacturing, design, and installation of power and control electrical distribution cabinets. Established in 2004, it has grown to become the largest manufacturer of such cabinets in Latvia, with a strong international presence delivering projects in 18 countries. The company offers a comprehensive range of services including design, production, installation, programming, and 24/7 equipment servicing, targeting industrial clients, data centers, office buildings, and shopping centers. Their business model is B2B manufacturing and engineering services, supported by certifications such as ISO 9001 and partnerships with industry leaders like Schneider Electric. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Bootstrap for responsive design. The site loads moderately fast and is mobile optimized, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. Security posture is moderate with HTTPS enforced but lacks security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure information is present. Overall, the security posture is adequate but could be improved by adding security headers, privacy compliance documentation, and incident response contacts. The WHOIS data was unavailable due to query limits, which reduces trustworthiness assessment. The website content is professional, relevant, and safe for general audiences, with clear contact information and trust indicators. Strategically, the company should focus on enhancing privacy compliance, security best practices, and transparency to improve trust and meet regulatory requirements. Technical modernization and regular updates will help maintain security and performance.

C

Kompozītmateriāli | Epoksīda Sveķi | Stikla Šķiedra | COMPOSITE24

composite24.lv

36

Composite24.lv is an e-commerce website specializing in the sale of composite materials including epoxy, polyester, and vinylester resins, as well as various fibers such as glass, carbon, and Kevlar. The site targets industrial and commercial customers involved in projects requiring high-quality composite materials. The website is built on the OpenCart platform using the Journal3 theme, incorporating modern web technologies such as Google Fonts, Google Tag Manager, and Google reCAPTCHA for analytics and bot protection. The site demonstrates good design quality, mobile optimization, and SEO practices, providing a professional user experience.

ATTA CENTRE is a prominent conference and event center based in Riga, Latvia, positioned as the largest venue of its kind in the Baltic region. The company offers a wide range of event spaces, including over 20 halls, full-cycle catering services, and advanced technical equipment to support diverse event formats such as conferences, exhibitions, banquets, and cultural or sports events. The website demonstrates a professional digital presence with clear navigation, multilingual support, and active social media integration. Technically, the site leverages modern web frameworks like Next.js and React, with media assets hosted on AWS S3 and integration of Google Maps API for location services. Security posture is generally good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published policies. The absence of WHOIS data raises some concerns about domain registration transparency, but the overall business credibility remains high based on website content and contact information. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and clarifying domain registration details to improve trust and compliance.

S

SIA "BLT"

kartridzuuzpilde.lv

10

KartridzuUzpilde.lv is a Latvian-based retail and service company specializing in printer cartridge refilling and sales, offering delivery services across Latvia. The company, operating since 2005, serves a broad audience of printer users seeking affordable cartridge solutions. Their website reflects a mature business with a clear market position, emphasizing quality, competitive pricing, and customer convenience. Technically, the site employs standard web technologies including JavaScript and Google Analytics, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms, though lacking advanced security headers and explicit incident response information. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, though WHOIS data is unavailable due to query limits, limiting domain legitimacy verification.

P

Parketa Grīdas

parketagridas.lv

39

Parketa Grīdas is a Latvian small business specializing in high-quality parquet flooring products and related services such as installation, sanding, restoration, and design solutions. The company targets homeowners and businesses in Latvia seeking custom and quality flooring solutions. Their website is built using Hostinger Website Builder and leverages modern technologies including the Astro framework and Google Analytics for tracking. The site is well-structured, mobile-optimized, and provides clear navigation and contact options including phone, email, and a contact form. Security posture is moderate with HTTPS enabled and secure forms, but lacks security headers and published privacy policies. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website presents a professional and trustworthy image with room for improvement in privacy compliance and security best practices.

D

Display Latvia SIA

displaylatvia.com

10

Display Latvia SIA is a Latvian-based representative of the Swedish company HL Display AB, specializing in retail store equipment and merchandising solutions. The company targets large retail chains and manufacturers in Latvia and Lithuania, offering a wide range of products including POS materials, anti-theft solutions, and digital advertising equipment. The website is professionally designed, multilingual, and provides clear contact information, supporting its B2B business model. Technically, the site uses legacy jQuery, Google Analytics, and Google Maps API, with a valid Comodo SSL certificate ensuring secure HTTPS connections. However, some security best practices such as DNSSEC and security headers are missing, and the privacy policy is basic with GDPR compliance not fully evident. Overall, the site is functional and trustworthy but could improve its security posture and privacy compliance.

S

SIA Experc

experc.lv

9

SIA Experc is a small Latvian logistics company specializing in international car transportation services from Germany, Belgium, Netherlands, and Denmark. The company targets businesses and individuals requiring reliable vehicle transport across European countries. Their website is built on the Wix platform, featuring a professional design and multilingual support, indicating a moderate level of digital maturity. The technical infrastructure includes standard Wix hosting and common tracking technologies such as Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal privacy or cookie policies, which are critical for GDPR compliance. The absence of WHOIS data limits full domain legitimacy verification, but the website content and structured data suggest a legitimate business. Overall, the site provides a good user experience but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

SIA Eihenbaums operates as a small local business specializing in custom-made furniture and carpentry services in Latvia. Their offerings include laminated, solid wood, veneered, painted, and lacquered furniture, with a focus on kitchens, built-in wardrobes, beds, doors, and stairs. The website content is minimal and primarily serves as a basic informational portal without advanced features or comprehensive business details. Technically, the site uses older JavaScript libraries such as Prototype.js and Scriptaculous, and includes outdated Flash content, which poses security and compatibility risks. There is no evidence of HTTPS enforcement or modern security headers, indicating a weak security posture. Privacy and cookie policies are absent, and no contact emails or phone numbers are provided, limiting user trust and compliance with data protection regulations. Overall, the site reflects a basic digital presence with significant room for improvement in security, privacy, and user experience.

T

Treileri.lv Noma | Tirdzniecība

treileri.lv

8

Treileri.lv is a Latvian small business specializing in the rental and sale of living trailers, offering comfort and independence for family and group travel by car. The website presents a professional and consistent brand image with clear contact information and a focus on customer convenience. Technically, the site uses modern JavaScript libraries such as jQuery, Vue.js, and Bootstrap, indicating moderate digital maturity. However, the absence of privacy policies, cookie consent mechanisms, and security headers suggests gaps in compliance and security posture. The lack of WHOIS data limits domain legitimacy verification, but the accessible content and contact details support a moderate trust level. Overall, the site is functional and relevant but requires improvements in security and privacy compliance to enhance trust and protect users.

Š

Šūšanas pakalpojumi Rīgā un Salaspilī

susanapieivetas.lv

9

The website www.susanapieivetas.lv represents a small local tailoring and textile service business operating in Purvciems and Salaspils, Latvia. The company offers a range of sewing services including clothing repair, leather and fur garment repair, curtain and bedding sewing, and chemical cleaning of textiles. The site is primarily targeted at local customers and showcases its services through a gallery and clear navigation. The business model is service-oriented with a focus on quality and local presence. Technically, the website is built on the Multiscreensite platform, leveraging modern web technologies such as service workers and SVG graphics. It uses HTTPS with Cloudfront CDN for hosting, ensuring secure and performant delivery. The site is moderately optimized for mobile devices and SEO, with basic accessibility features. However, there is room for improvement in security headers and advanced privacy compliance features. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and contact information appear consistent with a legitimate small business. Overall, the website presents a professional and trustworthy online presence for a local tailoring service. Strategic improvements in security headers, privacy policies, and technical modernization could enhance its security posture and compliance readiness.