Lithuania security reports

O

OfficeDay

officeday.lt

65

OfficeDay operates a professional e-commerce platform focused on office supplies, business gifts, school supplies, cleaning and hygiene products, and food and beverages primarily serving the Lithuanian market. The website demonstrates a broad product catalog and clear navigation, targeting businesses and consumers seeking comprehensive office-related products. The technical infrastructure is based on the OXID eShop CMS platform, utilizing common web technologies such as jQuery, Google Analytics, Facebook Pixel, and Hotjar for analytics and marketing, with cookie consent mechanisms in place to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible exposed sensitive data, though security headers are not evident in the provided content. The absence of WHOIS data limits domain registration insights, but the website's professional presentation and contact information support its legitimacy. Overall, the site is well-positioned in its retail niche with moderate to good technical and security maturity.

U

Uraga

uraga.lt

57

Uraga is a small creative digital production agency specializing in games, cinematics, and AR/VR/XR interactive content creation. The company positions itself as a digital metaverse producer collaborating globally with brands and game companies to create impactful projects. The website is built on the Wix platform, leveraging standard Wix technologies and Google Tag Manager for analytics. While the site is visually professional and mobile optimized, it lacks comprehensive privacy and cookie policies, contact information, and advanced security headers. The absence of WHOIS data due to query limits restricts domain trust verification. Overall, the technical infrastructure is moderate with room for improvement in security and privacy compliance.

The domain manadrinks.lt currently hosts a non-existent website, displaying a standard server error message indicating the site is not configured or inactive. There is no accessible business content, metadata, or structured data to analyze. The lack of HTTPS and security headers further diminishes the site's security posture. No contact or compliance-related information is present, indicating the site is not operational or maintained. This severely limits any meaningful business or security analysis and suggests the domain is either abandoned or under preparation. From a technical perspective, the site is hosted on a server identified as kurtinys.serveriai.lt but lacks any detectable CMS, frameworks, or modern technologies. The absence of content and SEO elements points to a minimal or placeholder setup. Security best practices are not implemented, and no privacy or cookie policies are available, indicating non-compliance with GDPR and related regulations. Overall, the security posture is weak due to missing HTTPS and security headers, and the domain's WHOIS data is unavailable due to query limits, preventing verification of registration details. The domain's legitimacy is questionable given the inactive status and lack of business presence. Strategic recommendations include securing the domain with HTTPS, publishing relevant business and compliance information, and properly configuring the website to serve content.

A

Apvalaus Stalo Klubas

asklubas.lt

32

Apvalaus Stalo Klubas is a hospitality business located in Trakai, Lithuania, offering a Michelin Guide recommended restaurant, a four-star hotel and spa, a pizzeria, and a terrace with panoramic views of Trakai castle. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content targeting tourists and business event organizers. The business model focuses on providing comprehensive hospitality services including dining, accommodation, and event hosting. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Owl Carousel, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and incident response information are missing. Privacy compliance is basic but present, with a privacy policy and cookie banner in place. WHOIS data is unavailable due to query limits, which limits domain trust verification. Overall, the website is trustworthy and professional but could improve transparency and security practices.

Terra IT is a Lithuanian IT company specializing in business management software solutions tailored for various industries such as transport, logistics, manufacturing, and services. Their product portfolio includes ERP systems, project management, transport management, equipment maintenance, and personnel task management systems. The company targets businesses of all sizes within Lithuania, offering both onsite and remote services. The website is professionally designed, mobile responsive, and provides comprehensive information about their services and products. Technically, the website is built on Joomla CMS with Bootstrap 4 framework, integrating modern tools such as Google Analytics, Google Tag Manager, reCAPTCHA, Tawk.to live chat, and Hotjar for analytics and user interaction. The site uses HTTPS with good SSL configuration and employs security best practices like CSRF tokens and CAPTCHA on forms. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a solid baseline with no visible vulnerabilities or exposed sensitive data. Privacy compliance is addressed with a cookie consent banner and a privacy policy page in Lithuanian, indicating GDPR awareness. Contact information is clear and consistent with business operations, enhancing trustworthiness. WHOIS data is unavailable due to query limits, but the domain appears legitimate with privacy protection likely justified for this business type. Overall, Terra IT's website reflects a credible, professional IT service provider with a good security posture and compliance awareness. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance trust and resilience.

V

VBH Lithuania UAB

vbh.lt

47

VBH Lithuania UAB operates as a leading distributor of window and door fittings, serving primarily B2B clients such as manufacturers in Lithuania and internationally. The company offers a broad product range, additional services including CE marking support, and an e-commerce platform for order management. The website reflects a medium-sized enterprise with a strong market position in its niche. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

N

NARVESEN

narvesen.lt

34

Narvesen.lt represents a well-established Lithuanian retail convenience store brand offering fresh coffee, snacks, press publications, transport tickets, and other services. The website is professionally designed with good SEO and mobile optimization, targeting Lithuanian consumers seeking quick and convenient shopping experiences. The business model focuses on retail convenience with a strong market presence in Lithuania. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics, Google Tag Manager, and Cookiebot for analytics and privacy compliance. Security posture is moderate with HTTPS implied but lacking explicit security headers and detailed security policies. Cookie consent is implemented comprehensively, reflecting GDPR awareness, though no explicit privacy policy or terms of service pages were found in the provided content. Overall, the site is functional and professional but could improve in security and compliance documentation. WHOIS data was unavailable due to query limits, limiting domain trust assessment.

Europa Group Hotels operates a regional hospitality business with multiple hotels and related services across Lithuania, Latvia, and Romania. Their website presents booking options, hotel information, and special offers targeting travelers seeking accommodation and hospitality services in these regions. The business model focuses on hotel accommodation, conference centers, restaurants, and spa services, positioning Europa Group Hotels as a medium-sized player in the Baltic and Romanian hospitality market. Technically, the website relies on outdated technologies such as Flash and an old version of jQuery, with visible server-side errors indicating poor error handling and potential security risks. The site uses HTTPS but lacks modern security headers and cookie consent mechanisms, which impacts privacy compliance. The WHOIS data is missing or unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the website requires significant technical and security improvements to enhance user experience, security posture, and compliance.

V

Vyno klubas

vynoklubas.lt

54

Vyno klubas is a Lithuanian e-commerce and event services business specializing in wine sales, gourmet food products, wine tastings, professional training, and event organization. It positions itself as the largest wine store in Lithuania, targeting wine enthusiasts and professionals. The website is built on the Intuero CMS platform and uses a variety of modern tracking and marketing tools including Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for consent management. The site is accessible over HTTPS and demonstrates a moderate level of digital maturity with good design and user experience. However, the absence of explicit privacy policy and terms of service pages, as well as the use of an outdated jQuery version, indicate areas for improvement in compliance and security. No WHOIS data was available due to query limits, but the website's content and technology usage suggest a legitimate business presence.

F

Finance Engineering

fengineering.lt

27

Finance Engineering is a Lithuania-based company specializing in financial engineering services, primarily targeting financial institutions and insurance companies. Their offerings include actuarial services, product management, insurance reporting, business intelligence solutions, and risk management. The website content is bilingual (English and Lithuanian) and focuses on presenting their specialized services and solutions. The company positions itself as a niche service provider in the finance and insurance sectors with a small business size profile. Technically, the website is built on an outdated Joomla 1.5 CMS platform and includes deprecated Flash content, which negatively impacts modern usability and security. The site lacks HTTPS, which is a critical security shortfall. Google Analytics and Google Tag Manager are used for user tracking, but no privacy or cookie policies are present, indicating poor privacy compliance. The site navigation is clear, but overall design and content quality are basic. From a security perspective, the absence of HTTPS and security headers, combined with deprecated technologies, exposes the site to potential risks. No contact information or incident response channels are provided, limiting transparency and trust. WHOIS data is unavailable due to query limits, preventing full domain legitimacy verification. Overall, the site demonstrates moderate business credibility but requires significant technical and security improvements to meet modern standards.

B

BSS IT, UAB

bss.biz

56

BSS IT, UAB is a Lithuanian technology company specializing in ERP business management software solutions. Their offerings include document management, payroll and personnel management, accounting, real estate management, trade management, ERP/CRM, and pension and investment fund management systems. The company has an established market presence since 2002 and targets businesses seeking comprehensive ERP solutions. The website reflects a professional and consistent brand image with clear product information and client references. Technically, the website is built on WordPress using the Flatsome theme and integrates modern technologies such as Bootstrap, jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel. Performance optimizations like WP Rocket and lazy loading are implemented, resulting in fast loading times and good mobile responsiveness. SEO and structured data usage are well executed, enhancing discoverability. From a security perspective, the site uses HTTPS with a good SSL configuration and employs some best practices. However, it lacks certain security headers like Content-Security-Policy and does not provide explicit security policies or incident response contacts. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is detected. Contact information is comprehensive and clearly presented, supporting business credibility. Overall, the website is trustworthy and professionally maintained, with room for improvement in security headers, privacy compliance, and incident response transparency. The domain's WHOIS data supports legitimacy with a long registration history and consistent country presence.

W

Wavin Baltic

wavin.lt

66

Wavin Baltic is a leading European company specializing in efficient solutions for water distribution, wastewater management, and energy-efficient building systems. The company targets construction and infrastructure professionals in Lithuania, offering a broad product catalog and technical support. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, hosted on Azure, and integrates analytics and consent management tools. Security posture is strong with HTTPS enforcement and domain locking, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a professional and trustworthy business with a solid market position.

K

Klaipėdos Laisvoji Ekonominė Zona | Klaipėdos LEZ | FEZ.LT

fez.lt

65

The website www.fez.lt represents Klaipėdos Laisvoji Ekonominė Zona (Klaipėda Free Economic Zone), a regional economic zone authority focused on promoting investment and business development in Klaipėda, Lithuania. The site targets businesses and investors interested in free economic zone opportunities, offering services related to economic zone management and investment promotion. The business model centers on facilitating economic growth within the region by attracting and supporting enterprises. Technically, the website is built on WordPress, utilizing common frameworks and libraries such as Bootstrap, jQuery, and various plugins for enhanced user experience and functionality. The site is served over HTTPS with a valid SSL certificate, indicating a secure connection. Performance and mobile optimization are moderate to good, with SEO practices implemented via meta tags and structured data. However, accessibility features are basic. From a security perspective, the site employs HTTPS and a cookie consent mechanism, demonstrating awareness of privacy and security compliance. However, no explicit security headers were detected, and no visible privacy or terms of service policies were found, which are areas for improvement. The WHOIS data is unavailable due to query limits, limiting domain legitimacy assessment, but the website content and SSL usage suggest a legitimate business presence. Overall, the website is functional and moderately secure but would benefit from enhanced privacy disclosures, security headers, and visible contact information to improve trust and compliance. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, and providing clear contact channels for incident response.

E

EMPIRIJA

empirija.lt

44

EMPIRIJA is a Lithuanian company specializing in the production, sale, installation, and servicing of modern POS (Point of Sale) systems and fiscal cash register blocks. Established in 1991, the company has grown to become one of the leading providers in the Baltic region, serving major retail chains, service companies, and sales points. Their offerings include technologically advanced POS systems tailored for various sectors such as retail, hospitality, sports clubs, and entertainment centers. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site leverages WordPress CMS with integrations of Google Analytics and Tag Manager for user behavior tracking and marketing insights. Security posture is strong with HTTPS enforced and privacy policies clearly communicated, although additional security headers and incident response information could enhance their security maturity. Overall, EMPIRIJA demonstrates a credible and professional business with a solid market position and trustworthy online presence.

UAB Audėjas is a well-established Lithuanian textile manufacturer specializing in upholstery and decorative fabrics since 1946. The company maintains a modern web presence with an e-shop and showcases its participation in EU co-financed projects, reflecting a commitment to innovation and competitiveness. The website is professionally designed, mobile-optimized, and provides clear contact channels and privacy compliance features, including GDPR-aligned policies and cookie consent mechanisms. Technically, the site employs a modern JavaScript stack including jQuery, Swiper.js, and Google reCAPTCHA for form security. While HTTPS is enforced, the absence of explicit security headers such as CSP and HSTS suggests room for improvement in hardening the security posture. The site demonstrates good SEO and accessibility basics but could enhance accessibility features further. Security-wise, the use of Google reCAPTCHA and cookie consent indicates awareness of bot mitigation and privacy regulations. However, the lack of published security policies or incident response contacts limits transparency. The WHOIS data is unavailable due to query limits, which slightly reduces trust but is likely privacy protection rather than malicious concealment. Overall, the website presents a credible and professional business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and security posture.

U

UAB „Diginet LTU“

diginet.lt

53

Diginet LTU is a Lithuanian digital media company established in 2003, operating several leading online portals in Lithuania including Autoplius.lt, Aruodas.lt, Skelbiu.lt, Cvbankas.lt, Paslaugos.lt, and Kainos.lt. These portals serve diverse audiences ranging from vehicle buyers, real estate seekers, job applicants, to consumers comparing prices. The company holds a strong market position in Lithuania's online classifieds and portal management sector, targeting both consumers and businesses. Technically, the website uses legacy JavaScript libraries such as jQuery 1.7.1 and integrates Google Analytics and OneTrust for cookie consent, indicating a moderate level of digital maturity. The site is accessible, mobile responsive at a basic level, and employs HTTPS for secure communication. Security posture is adequate but could be improved by adding modern security headers and updating legacy libraries. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy or terms of service. Overall, the website presents a professional and trustworthy front but would benefit from enhanced security and compliance documentation.

U

UAB LATAVA

latava.lt

46

UAB LATAVA operates as a Lithuanian real estate agency specializing in brokerage services for selling and renting various property types including apartments, houses, and land plots. The company targets individuals and businesses within Lithuania, particularly in Kaunas and Vilnius. Their website offers property listings, valuation services, and consultation to facilitate real estate transactions. The business model is focused on commission-based brokerage and advisory services within the local real estate market. Technically, the website employs a traditional jQuery-based stack with plugins such as Chosen for enhanced select inputs and Lightbox for image display. It integrates Google Analytics and Facebook SDK for tracking and social media engagement. The site is served over HTTPS, indicating a secure transport layer, but lacks advanced security headers and cookie consent mechanisms. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site demonstrates fundamental protections such as HTTPS and no visible exposure of sensitive data. However, the absence of security headers, cookie consent, and incident response information suggests room for improvement in compliance and security posture. The lack of WHOIS data due to query limits reduces confidence in domain registration transparency, though the website content and contact information appear legitimate and consistent. Overall, the website is functional and professional with a moderate risk profile. Strategic improvements in security headers, privacy compliance, and transparency would enhance trust and reduce potential vulnerabilities.

U

Uždaroji akcinė bendrovė „LITESKO“

litesko.lt

64

Litesko is a Lithuanian energy company specializing in district heating and hot water supply services. The company operates multiple local branches serving various cities, providing residential and business customers with heating solutions. Their website offers comprehensive information on energy consumption, billing, energy saving tips, and customer electronic service access. The business model is that of a regional utility provider with a medium-sized market presence in Lithuania's energy sector. Technically, the website is built on Drupal 7 CMS with jQuery libraries and includes modules for cookie compliance and user interaction features like Fancybox. The site is served over HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. Performance and mobile optimization are basic but functional. Accessibility features are present but could be improved. From a security perspective, the site uses HTTPS and has secure login forms, but lacks visible HTTP security headers such as CSP or HSTS in the provided content. No explicit security or incident response policies are published. The WHOIS data is unavailable due to query limits, limiting domain trust analysis. However, the website content and company information appear consistent and legitimate. Overall, the website is professional and trustworthy with good content quality and business credibility. Security posture is moderate with room for improvement in headers and policy transparency. Privacy compliance is good with GDPR-aligned cookie consent and privacy policy. The main risk is the lack of WHOIS data and some missing security headers, which should be addressed to enhance trust and security.

K

Kauno Tiltai

kaunotiltai.lt

50

Kauno Tiltai is a Lithuanian company likely operating in the transportation or infrastructure sector, suggested by the company name and website language. The website is built on WordPress and uses modern web technologies including jQuery, Owl Carousel, Font Awesome, and Cookiebot for cookie consent management. The presence of Google Tag Manager indicates active analytics and marketing tracking. The site is accessible without any WAF or blocking mechanisms, indicating good availability. From a security perspective, the website uses HTTPS and implements a detailed cookie consent mechanism, which is a positive indicator for privacy compliance. However, no explicit privacy policy, terms of service, or security policies were found in the scanned content, which could be improved to enhance transparency and compliance. The WHOIS data could not be retrieved due to query limits, limiting the ability to fully verify domain legitimacy and registration details. Overall, the website demonstrates a moderate level of technical maturity and privacy compliance but lacks visible contact information and formal security or privacy documentation. Strategic recommendations include publishing clear privacy and security policies, adding contact details, and implementing security headers to improve security posture and trustworthiness.

A

Arijus, UAB

arijus.lt

51

Arijus, UAB is a well-established Lithuanian logistics company operating since 1992 with a strong regional presence across five countries. The company offers a comprehensive range of logistics services including freight forwarding, shipping line agency, trucking, oversized cargo handling, warehouse services, cross-border logistics, customs brokerage, and special projects. With over 374 professional staff and 13 group companies, Arijus positions itself as a leader in the Baltic and European logistics market. The website reflects this maturity with good content quality, consistent branding, and clear navigation.

D

DIONE

dioneicecream.com

46

DIONE is a Lithuanian-based premium ice cream brand emphasizing natural, fresh ingredients and high-quality taste. The company operates with international quality standards such as ISO and BRC International Standards and has received recognition from Michelin-starred chefs and nutritionists. The website showcases a well-structured product catalog and brand story targeting consumers seeking premium natural ice cream. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and reCAPTCHA but lacks advanced security headers and a published security policy. Privacy compliance is partial due to absence of privacy and terms of service pages, though a cookie consent banner is present. Overall, the domain registration data supports the legitimacy and maturity of the business.

X

Xplicity

xplicity.com

62

Xplicity is a Lithuania-based software development company specializing in full-cycle software development services including web, mobile, desktop applications, quality assurance, and project management. Established since 2004, the company positions itself as a reliable partner for businesses seeking IT outsourcing and co-sourcing solutions. Their website reflects a professional and client-focused approach with clear service offerings and client testimonials. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Analytics and Facebook Pixel for marketing insights. Security posture is good with HTTPS enforced and reCAPTCHA implemented on forms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website and domain registration details support a credible and mature business presence.

Enefit Lietuva is a well-established energy company specializing in the supply of 100% green electricity and renewable energy solutions to residential customers in Lithuania. The company emphasizes sustainability and innovation, offering solar panel installations, battery storage, and electric vehicle charging infrastructure. Their market position is strong with over 18 years of experience and a large customer base exceeding 500,000 users in the Baltic region. The website reflects a professional and user-friendly digital presence, leveraging modern technologies such as React and Next.js, and integrating comprehensive privacy and cookie consent mechanisms. Security posture is robust with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly disclosed. Overall, the site demonstrates a mature digital infrastructure and a commitment to privacy compliance, though WHOIS data limitations reduce transparency regarding domain registration details.

C

Cardinity

cardinity.lt

60

Cardinity is a licensed payment institution based in Lithuania, operating since 2007, providing online payment processing services primarily for e-commerce merchants across Europe. The company offers a comprehensive suite of payment solutions including international payments, recurring billing, one-click payments, and mobile payments, supported by PCI DSS certification and registration with VISA Europe and MasterCard International. The website is professionally designed, well-structured, and optimized for mobile users, reflecting a mature digital presence. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, alongside security measures like HTTPS and Google reCAPTCHA to protect user interactions. Privacy and cookie policies are clearly presented with GDPR compliance, enhancing user trust. However, WHOIS data is unavailable due to query limits, limiting domain age and registrant verification. Overall, Cardinity demonstrates a strong security posture and business credibility with room for improvement in publishing explicit security policies and incident response contacts.

A

AIAI architects

aiaiarchitects.lt

62

AIAI architects is a small Lithuanian architecture and interior design firm specializing in creative interior solutions for offices, clinics, stores, cafes, restaurants, and residential homes. The company targets businesses and individuals primarily in Vilnius, Lithuania, offering tailored interior design services to enhance business success and lifestyle. The website is built on Hostinger's platform using modern technologies such as the Astro framework and Google Analytics for visitor tracking. The site is well-designed, mobile-optimized, and provides clear navigation and contact information, including email and phone. However, it lacks essential privacy and cookie policies, which poses compliance risks. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but it lacks security headers and vulnerability disclosure mechanisms. Overall, the domain appears legitimate despite unavailable WHOIS data due to query limits, and the business presents a professional online presence.

O

Open Circle Capital Fund

opencirclecapital.lt

39

Open Circle Capital Fund is an early stage venture capital firm specializing in investments in ICT, robotics, and high-tech companies primarily in Lithuania and surrounding regions. The fund targets startups with initial revenues and high growth potential, led by experienced entrepreneurs. Their business model focuses on providing capital along with strategic support including fundraising assistance and business development. The website presents a professional image with detailed portfolio listings and team profiles, indicating a credible market position within the early stage tech investment sector. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and video background features. It uses HTTPS with Google reCAPTCHA v3 for form security and Google Analytics with IP anonymization for user tracking. However, some outdated libraries like jQuery 1.12.4 are used, which could pose security risks. The site is mobile optimized and has good navigation and content structure. From a security perspective, the site employs HTTPS and reCAPTCHA but lacks several important HTTP security headers and uses an outdated JavaScript library. No privacy or cookie policies are explicitly found, which may impact GDPR compliance. The WHOIS data is unavailable due to query limits, but the website content and linked domains suggest a legitimate and professional operation. Overall, the website is functional and professional but could improve security posture and privacy compliance to enhance trust and reduce risk.

Programmers of Vilnius (UAB "Programuotojų artelė") is a Lithuania-based small software development company specializing in Python web applications using frameworks such as Django, Pyramid, and Zope Toolkit. The company offers consulting and custom software development services to clients primarily in Europe, Australia, and the US. Their website presents a professional image with client logos and testimonials, indicating a niche market position focused on Python-based web solutions. Technically, the website uses a modern Python-centric tech stack and includes Google Analytics for visitor tracking. The site is built with valid HTML and CSS and has a clear navigation structure, though mobile optimization and accessibility are basic. No CMS or hosting provider details are evident. Security best practices are partially implemented; however, no security headers or HTTPS enforcement details are visible in the provided data. From a security and compliance perspective, the site lacks visible privacy, cookie, or terms of service policies, and no vulnerability disclosure or incident response information is provided. WHOIS data is unavailable due to query limits, limiting domain registration trust verification. The site uses Google Analytics without a cookie consent mechanism, indicating potential GDPR compliance gaps. Overall, the website is functional and professional but would benefit from enhanced security headers, privacy compliance measures, and transparent domain registration data to improve trust and security posture.

H

HELIOS GROUP

helios.lt

45

Helios Group is a Lithuanian real estate company specializing in the development, management, leasing, and sale of commercial, administrative, and residential properties primarily in Vilnius, Kaunas, and Klaipėda. The company presents itself as a medium-sized regional player with a focus on high-quality real estate projects. The website is professionally designed using WordPress and incorporates modern SEO and analytics tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and secure forms, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data due to query limits reduces transparency but the website content and contact information support legitimacy. Overall, the site is functional and trustworthy with room to enhance privacy compliance and security best practices.

H

Hegelmann Group

hegelmann.lt

73

Hegelmann Group is a prominent logistics and transportation company offering a broad spectrum of services including road, intermodal, air, and maritime transport, alongside warehousing and hospitality solutions. Their global network and multimodal capabilities position them as a leading service provider in the transportation sector. The website reflects a mature digital presence with multilingual support and comprehensive service descriptions. Technically, the site is built on WordPress with modern integrations such as Google reCAPTCHA and Google Tag Manager, indicating a focus on security and analytics. Security posture is solid with HTTPS and bot protection, though improvements are recommended in security headers and published policies. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though the absence of WHOIS data slightly impacts domain trustworthiness.

B

BPTI.LT

bpti.lt

53

BPTI.LT appears to be a Lithuanian technology-focused website, likely representing the Baltic Institute of Advanced Technology or a similar entity. The site is built on the Wix platform, indicating a small to medium scale digital presence. The content is primarily in Lithuanian and targets local technology professionals and interested audiences. Technically, the site uses Wix's Thunderbolt framework and standard web technologies, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and policies. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is accessible without WAF or blocking mechanisms but lacks comprehensive business and security transparency.

The domain rndvgroup.eu is registered with a Lithuanian registrar UAB "Interneto vizija" but the website content is a placeholder error page indicating the site does not exist on the server varputis.serveriai.lt. There is no active business information, contact details, or content available, which suggests the website is either not deployed or has been taken down. The lack of metadata, structured data, forms, or external links further confirms the absence of an operational website. Technically, the site does not present any detectable technologies, scripts, or security headers, and no SSL or HTTPS information is available from the provided data. Security posture is minimal to non-existent, with no privacy or cookie policies, no incident response contacts, and no vulnerability disclosures. Overall, the website is not accessible for meaningful analysis and presents a very low trust and credibility profile.

J

Jungent Lietuva UAB

jungent.lt

52

Jungent Lietuva UAB is a well-established sales promotion and brand marketing company operating in the Baltic region since 1991. It represents over 60 international and local suppliers, serving retail, HoReCa, pharmacies, and other B2B clients. The company is part of the Jungent Group, which employs over 700 people and has a broad client base across Estonia, Latvia, and Lithuania. The website reflects a professional and consistent brand image with clear business information and active social media presence. Technically, the website is built on the Voog CMS platform using modern web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It employs Google Tag Manager for analytics and tracking. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data. However, it lacks some recommended security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is partially addressed with privacy and cookie policies present, but no active cookie consent mechanism is implemented. Overall, the website is credible and trustworthy with a solid business foundation. The main risks relate to improving security best practices and enhancing privacy compliance to meet evolving regulatory standards. Strategic recommendations include implementing security headers, adding a security.txt file, establishing incident response contacts, and deploying a cookie consent mechanism to strengthen user trust and regulatory adherence.

U

UAB Informaciniu technologiju organizacija

ito.lt

61

iToDEV is a Lithuanian technology company specializing in mobile app and custom web development, serving medium and large businesses primarily in retail, telecommunications, logistics, and healthcare sectors. With 18 years of experience, the company emphasizes long-term partnerships and offers comprehensive digital transformation services including AI solutions, UX/UI design, project management, and maintenance. The website reflects a mature digital presence with detailed case studies and a professional design. Technically, the site uses modern frameworks such as Next.js and React, integrates Google Maps APIs, and supports mobile responsiveness. Security posture is strong, evidenced by ISO 27001 certification and adherence to OWASP guidelines, with secure development practices and scanning tools in use. Privacy compliance is good but could be improved by adding explicit cookie consent mechanisms and terms of service. Overall, the company demonstrates a high level of business credibility and technical maturity, with clear contact channels and social media presence.

Skado Medis UAB is a Lithuanian family-owned company established in 1999 specializing in manufacturing wooden construction systems including laminated log houses and prefab timber frame houses, campers, and apartments. The company positions itself as a quality-focused manufacturer with multiple certifications including ISO and SINTEF. Their website is bilingual and provides comprehensive product and company information, contact details, and certifications, supporting a trustworthy business presence. Technically, the website uses modern JavaScript libraries and is served over HTTPS with good SSL configuration. Security best practices such as anti-CSRF tokens and input validation are implemented in forms, though security headers and cookie consent mechanisms could be improved. WHOIS data is unavailable due to query limits, limiting domain trust verification, but the website content and contact info support legitimacy. Overall, the website is professional, secure, and business credible with room for privacy compliance enhancements.

U

UAB Paspara

paspara.com

49

UAB Paspara is a medium-sized technology company specializing in SAS software solutions, consulting, and technical support across Lithuania, Latvia, and Estonia. The company holds official partnership status with SAS Institute and maintains certifications including ISO 9001:2015 and ISO/IEC 27001:2013, underscoring its commitment to quality and security. The website reflects a professional digital presence with good content quality and user experience, targeting business clients requiring advanced data warehousing and analytics services. Technically, the site is built on WordPress with modern JavaScript libraries and enforces HTTPS, though some security headers are missing. Privacy compliance is addressed with a cookie consent banner and a comprehensive privacy policy. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trustworthiness.

E

Europos socialinio fondo agentūra

esf.lt

51

Europos socialinio fondo agentūra is a Lithuanian government agency responsible for managing and implementing projects funded by the European Social Fund. The agency focuses on social inclusion, education, social innovation, civil rights, and international cooperation. It serves Lithuanian residents and stakeholders involved in social and educational development. The website is professionally designed, content-rich, and well-structured, providing clear information about the agency's activities, contact details, and news updates. The presence of official registration data and active social media accounts supports its legitimacy. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and WPML for multilingual support. It uses HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. The site demonstrates good mobile optimization and accessibility features, although some security headers are not detected and could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data due to query limits restricts full domain trust verification. The site uses Google Analytics for user tracking with moderate privacy compliance. Overall, the website presents a trustworthy and professional digital presence for a government agency. Strategic recommendations include enhancing security headers, publishing explicit security policies or incident response contacts, and performing regular plugin vulnerability audits to maintain a strong security posture.

U

UAB "Gitana"

gitana.lt

53

UAB "Gitana" operates a professional e-commerce platform specializing in tools and industrial equipment primarily serving construction workers, craftsmen, and industrial clients in Lithuania. The website offers a broad catalog of products including battery-powered, electric, pneumatic, hydraulic, and hand tools, as well as related equipment and accessories. The company emphasizes fast delivery and professional consultation services, positioning itself as a significant player in the Lithuanian tools retail market. Technically, the website is built on the PrestaShop CMS platform and incorporates modern web technologies such as Google Tag Manager, Stripe.js for payments, and responsive design frameworks like Bootstrap. The site demonstrates moderate performance and good mobile optimization, with clear navigation and structured content. SEO practices are adequately implemented with proper meta tags and product structured data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms with granular consent management, reflecting basic privacy compliance efforts. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. The absence of WHOIS data due to query limits restricts full domain legitimacy verification, slightly impacting trust. Overall, the website presents a professional and functional e-commerce presence with moderate security and privacy maturity. Strategic improvements in transparency, security headers, and incident response communication would enhance trust and compliance.

I

Icybit, UAB

icybit.co

59

Icybit, UAB is a Lithuanian scientific research and innovation company specializing in Artificial Intelligence, Distributed Computing, and Big Data Analytics. Founded in 2015, it positions itself as an expert in advanced technology research and experimental development. The website reflects a professional and modern digital presence using React and Bootstrap technologies, hosted on AWS infrastructure. The company targets organizations seeking cutting-edge AI and big data solutions, operating in a niche technology sector with a small company size. Technically, the website is well-structured with modern frameworks and good mobile optimization. However, there is room for improvement in accessibility and SEO features. Security posture is moderate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. No privacy or cookie policies are present, which impacts compliance and user trust. Contact information is limited but clearly presented in the footer. Security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of incident response contacts and vulnerability disclosure mechanisms is a gap. The domain is privacy protected but consistent with the business history and claims. Overall, the website is functional and professional but would benefit from enhanced security and compliance transparency. Strategically, the company should prioritize implementing privacy and cookie policies, security headers, and incident response information to improve trust and compliance. Enhancing accessibility and SEO would also support better user engagement and market reach.

Alisa Management Laboratory is a Lithuanian-based professional training and coaching organization established in 2010. The company offers a broad range of services including employee training at various levels, personnel recruitment, organizational research, coaching training, and employee testing and evaluation. Their market position is solid within Lithuania, serving over 2000 clients with a focus on professional development and organizational effectiveness. The website is well-structured, professionally designed, and localized in Lithuanian, targeting specialists and managers seeking to enhance skills and organizational performance. Technically, the site is built on WordPress with WooCommerce for e-commerce functionality, enhanced by multilingual support via WPML, and uses modern SEO and analytics tools such as Rank Math and Google Tag Manager. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some advanced security headers are not confirmed. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Contact information is available primarily via phone and contact forms, with social media presence on Facebook and LinkedIn. Overall, the website reflects a trustworthy and professional business with moderate to good technical maturity and security practices.

A

Asociacija „Mentor Lietuva“

mentor.lt

55

Mentor.lt is a Lithuanian non-profit informational website operated by Asociacija „Mentor Lietuva“, affiliated with the international organization Mentor International. The site provides educational content focused on gambling strategies, awareness, and prevention, targeting primarily Lithuanian-speaking audiences interested in roulette, bingo, poker, and slot machines. The business model is centered on providing free informational resources to protect youth and gamblers from harmful habits. Technically, the website is built on WordPress 6.8.1 with common plugins like Contact Form 7 and jQuery, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS and standard security headers, but lacks advanced privacy compliance features such as cookie consent. No WHOIS data was available due to query limits, but the domain appears privacy protected, which is typical for non-profits. Overall, the site is trustworthy with good content quality but could improve privacy and contact transparency.

S

Sigli

cortlex.com

71

Sigli is a medium-sized software development company founded in 2015, specializing in digital transformation and AI-driven solutions. The company targets mid-market and enterprise clients, offering services such as product development, QA on demand, staff augmentation, and compliance support for regulations like DORA and EUDR. Their market position is strengthened by a strong local presence in Lithuania, Belgium, and the UK, and partnerships with recognized industry players. Technically, the website is built on modern frameworks including React, Angular, .NET, and Java, hosted on Webflow, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are absent. The domain WHOIS data is missing, which introduces some trust concerns despite the professional presentation and certifications. Overall, Sigli demonstrates a mature digital presence with room for improvement in transparency and domain registration trust.

C

CRAFT bearings JSC

craft-bearings.com

51

CRAFT bearings JSC is a Lithuania-based manufacturer and distributor specializing in industrial, automotive, and agricultural bearings. The company positions itself as a top-quality European bearing factory with extensive stock and global distribution across 90 countries. Their services include manufacturing, quality control via an in-house laboratory, testing, and developed logistics for on-time global delivery. The website is professionally designed with multilingual support and comprehensive downloadable resources, reflecting a mature business model focused on manufacturing and wholesale distribution. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, with frameworks such as fullPage.js and Isotope enhancing user experience. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Performance is moderate, with rich multimedia content including video backgrounds. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, no explicit security headers were detected, and there is no published security or incident response policy. The WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the security posture is good but could be improved by adding security headers and formal policies. The overall risk is moderate; the business appears legitimate and professional, but the lack of WHOIS data and some missing security best practices suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to improve trust and compliance.

C

Creston

creston.lt

46

Creston is a Lithuanian real estate company specializing in property brokerage and related services. The website targets local buyers, sellers, and investors, offering services such as property sales, purchase assistance, and career opportunities in real estate. The company maintains a professional online presence with consistent branding and relevant content tailored to its market segment. Technically, the website is built on WordPress using Bootstrap and integrates common analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is secured with HTTPS and employs Google reCAPTCHA to protect forms from abuse. However, there is a lack of explicit privacy and cookie policies, and no visible security headers, which are areas for improvement. The WHOIS data is unavailable due to query limits, but no suspicious indicators are present in the website content, suggesting legitimacy. Overall, the site demonstrates a moderate to good level of digital maturity and security posture.

A

Apvalaus Kvadrato Mokykla

akmokykla.lt

55

Apvalaus Kvadrato Mokykla is a small private school located in Vilnius, Lithuania, offering full-day education from pre-kindergarten through primary and lower secondary levels. The school emphasizes emotional and physical safety, individual development, and self-regulated learning in small groups. Their business model focuses on providing a nurturing educational environment with additional activities such as clubs and seasonal camps. Technically, the website is built on WordPress using Elementor and integrates modern tools like Google Tag Manager and Facebook Pixel for analytics and marketing. The site is well-structured, mobile-optimized, and includes a comprehensive cookie consent mechanism, though explicit privacy and terms of service pages are missing. Security posture is good with HTTPS enforced but lacks some security headers and explicit policies. WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this business type. Overall, the site presents a professional and trustworthy image suitable for its target audience.

U

UAB „Plasteksus”

plasteksus.eu

45

UAB „Plasteksus” is a medium-sized manufacturing company based in Lithuania, specializing in the design and production of plastic packaging, including PET, PP, and PE materials. It holds a strong market position as one of the largest plastic packaging designers and manufacturers in the Baltic region, serving industries such as food, beverages, personal hygiene, household chemicals, and chemical production. The company also provides consultancy services in packaging design and technical parameter selection. The website reflects a professional and consistent brand image, with clear contact information and subsidiary company links, indicating a well-structured business ecosystem. Technically, the website is built on WordPress 6.5.5, utilizing modern plugins such as Slider Revolution and Contact Form 7, with jQuery libraries for enhanced interactivity. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, HTTPS is enforced, but the absence of explicit security headers and incident response policies suggests moderate security maturity. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates good privacy compliance with GDPR, including a cookie consent mechanism and a privacy policy page. However, the lack of WHOIS data due to privacy protection slightly reduces transparency. There are no signs of WAF or content blocking, allowing full content accessibility. The business credibility is supported by clear contact details and professional content, though the absence of terms of service and security policies could be addressed. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, improving accessibility features, and maintaining up-to-date technical components to ensure ongoing security and compliance.

M

Media Partner

mediapartner.lt

46

Media Partner is a Lithuanian digital marketing agency specializing in performance marketing, social media management, graphic design, and SEO services. The company positions itself as a growth partner for businesses, emphasizing partnership, creativity, and measurable results. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. The presence of client testimonials and a portfolio enhances their credibility in the market. Technically, the website uses modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and Google Analytics with a cookie consent mechanism, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and JWT-based payment widget integration, though some security headers are missing. Overall, the site demonstrates good privacy compliance with GDPR-aligned policies and cookie consent. The WHOIS data is unavailable due to query limits, but the domain appears privacy protected, which is reasonable for this business type. The overall risk is low, with recommendations to improve security headers and publish explicit security policies.