Lithuania security reports

D

DO architects

doarchitects.lt

55

DO architects is a small, established architectural firm based in Vilnius, Lithuania, specializing in architecture, urban planning, and interior design. The company targets innovative clients seeking transformative projects in cities, houses, and landscapes. Their website showcases a comprehensive portfolio of projects and maintains an active social media presence, reinforcing their market position. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and integrated analytics tools. The site is well-designed, mobile-optimized, and provides clear navigation, although some accessibility features could be improved. Security posture is moderate; while no critical vulnerabilities were found, the absence of security headers and explicit HTTPS confirmation are areas for improvement. Privacy compliance is basic, with a cookie policy and consent mechanism present but no dedicated privacy or terms of service pages. WHOIS data for the domain is unavailable, which limits domain trust verification, but the website content and branding suggest legitimacy. Overall, the site scores well in content quality and business credibility but should enhance security and privacy practices.

L

LIDL Lietuva

lidl.lt

66

LIDL Lietuva operates as a large retail supermarket chain in Lithuania, offering weekly promotions and a variety of food and non-food products. The website is professionally designed with a modern frontend technology stack including Vue.js, and it provides comprehensive privacy and cookie consent mechanisms compliant with GDPR. However, the absence of WHOIS data and explicit contact or security incident information limits the ability to fully verify domain legitimacy and security posture. The website employs HTTPS and tracking tools such as Google Analytics and Kameleoon, indicating a mature digital infrastructure. Security best practices are partially implemented, but the lack of security headers and vulnerability disclosure information suggests room for improvement. Overall, the website presents a trustworthy and professional retail presence with moderate technical and security maturity.

K

Kauno technologijos universitetas

kmtp.lt

38

Klaipėdos mokslo ir technologijų parkas, registered under Kauno technologijos universitetas, is a well-established technology park in Lithuania founded in 2004. It offers scientific research, experimental development, startup support, expert consultations, and infrastructure services to technology-oriented businesses. The organization manages numerous international and national projects, positioning itself as a regional innovation hub with a broad European partner network. The website is built on WordPress with a modern tech stack including Divi Builder and various plugins, providing a professional and user-friendly experience. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though security headers and incident response policies are lacking. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site reflects a credible and stable institution with room for improvement in privacy and security transparency.

E

EIFL (Electronic Information for Libraries)

eifl.net

55

EIFL (Electronic Information for Libraries) is a well-established non-profit organization founded in 2000, headquartered in Lithuania, focused on enabling access to knowledge through libraries worldwide. The organization provides key services including licensing, copyright advocacy, open access programs, and public library innovation initiatives, targeting libraries, researchers, students, and policy makers across multiple continents. Their website reflects a mature digital presence with comprehensive content, active news and events updates, and strong branding consistency. Technically, the website is built on Drupal 7 with a moderate performance profile and good mobile optimization. It integrates modern web technologies such as Google reCAPTCHA for form security, Vimeo for video content, and social media widgets for engagement. The site employs HTTPS with good SSL configuration and domain security measures like clientTransferProhibited status, though DNSSEC is not enabled. From a security perspective, the site demonstrates good practices including secure forms, CAPTCHA usage, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. However, there is room for improvement by enabling DNSSEC and additional security headers. Overall, EIFL's website is trustworthy, professional, and well-maintained, supporting its mission effectively. The domain registration data corroborates the organization's legitimacy and long-standing presence. Strategic recommendations include enhancing DNS security, updating legacy libraries, and implementing further security headers to strengthen the security posture.

I

Insoft

insoft.lt

42

Insoft is a Lithuania-based IT solutions provider specializing in bespoke software development and digital transformation services primarily targeting governmental institutions and the enterprise sector. The company offers a broad range of services including legacy system transformation, smart government solutions, system integration, customs and tax service automation, data transformation, and testing services. Their client portfolio includes reputable organizations and government bodies, indicating a strong market position within their niche. The website content is professionally presented with clear navigation and consistent branding, supporting their credibility. Technically, the website employs modern web technologies such as SVG graphics, asynchronous CSS loading, and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good SEO practices with appropriate meta tags and Open Graph data. HTTPS is enforced, and a cookie consent mechanism is implemented, reflecting a moderate level of digital maturity and privacy compliance. From a security perspective, the site shows good practices such as HTTPS usage and no visible exposure of sensitive data. However, the absence of security headers and lack of explicit security or incident response policies suggest room for improvement. The WHOIS data for the domain is unavailable or inaccessible, which slightly reduces trustworthiness but is somewhat mitigated by the professional website and client references. Overall, Insoft presents as a credible and professional IT service provider with a solid digital presence. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to further strengthen trust and compliance.

C

Corner Case Technologies

cornercasetech.com

69

Corner Case Technologies is a Lithuania-based digital product studio specializing in modern, cloud-ready web and mobile applications. Established in 2016, the company serves governments and global businesses, offering services such as digital advisory, custom software development, and optimization. They hold ISO certification and are an AWS Partner, reflecting a strong market position and trustworthiness. Their portfolio includes multiple EU co-funded projects and recognized client testimonials, positioning them as a reputable technology service provider in their region. Technically, the website demonstrates a modern tech stack including Python, Django, React, Typescript, and AWS infrastructure. The site is well-optimized for performance and mobile responsiveness, with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and certifications in place, though additional security headers and incident response policies could enhance their security maturity. Overall, the company exhibits a professional and trustworthy online presence with comprehensive privacy and cookie policies. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further investigation. The website is free from WAF blocks or security challenges, allowing full content access and analysis. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response policies, and maintaining up-to-date dependency management to mitigate risks. These steps will strengthen their security posture and compliance, supporting continued growth and client trust.

M

M Capital

mcapital.lt

42

M Capital is a Lithuanian company specializing in financial education and consulting services, offering seminars, personal consultations, educational articles, and a mortgage loan academy. Established in 2009, it has a solid market presence with over 15 years of experience, serving a broad audience interested in personal finance and long-term financial planning. The website is well-structured, professionally designed, and optimized for mobile devices, providing a good user experience with clear navigation and relevant content. Technically, the site is built on WordPress with WooCommerce integration, uses modern libraries such as jQuery, and incorporates tracking and marketing tools like Google Analytics, Facebook Pixel, and Mailerlite. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are absent. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the site demonstrates a mature digital presence with good compliance and marketing practices.

V

Valstybinių miškų urėdija

vivmu.lt

61

Valstybinių miškų urėdija is a Lithuanian governmental organization responsible for sustainable management and protection of state forests. The website serves as an information portal for forestry activities, public services, and environmental projects, targeting citizens, forest owners, and industry stakeholders. The organization emphasizes sustainability, social responsibility, and economic contribution through forestry management. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses reputable plugins for SEO, multilingual support, and event management. The site is well-optimized for mobile and accessibility, with good SEO practices and structured data. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is robust with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and aligned with its governmental mission.

C

CPVA

cpva.lt

54

CPVA is a Lithuanian government agency responsible for administering significant public investment programs and international development cooperation projects. The organization manages multiple EU and national funding programs, aiming to ensure responsible and effective use of public funds. The website reflects a professional government entity with clear focus on transparency, compliance, and public service. The technical infrastructure is based on WordPress with Elementor, supported by Cloudflare DNS services, and includes modern web technologies such as jQuery and Google reCAPTCHA for security. The site is well-optimized for mobile and accessibility, with good SEO practices and structured data implementation. Security posture is strong with HTTPS enforced, proper security headers, and no visible vulnerabilities. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and detailed privacy policy aligned with GDPR requirements. Contact information is primarily via web forms, with no direct emails or phone numbers explicitly listed. Overall, the website demonstrates a mature digital presence suitable for a government agency, with minor recommendations to enhance security policy transparency and incident response details.

The website ltg.lt is currently inaccessible due to a Cloudflare Turnstile human verification challenge, which blocks access to the actual site content. The domain is registered with a Lithuanian registrar, UAB "Interneto vizija", and was created in late 2020, indicating a relatively new but legitimate registration. Due to the access restriction, no privacy policies, contact information, or business descriptions are available for analysis. The site relies on Cloudflare services for security and performance, including the use of Turnstile for bot mitigation. The lack of accessible content and metadata prevents a full assessment of the website's technical maturity, security posture, and compliance status. Overall, the domain registration appears consistent and legitimate, but the website itself cannot be evaluated beyond the presence of Cloudflare protection mechanisms.

V

Vilniaus universitetas

vu.lt

61

Vilniaus universitetas is a prestigious Lithuanian higher education and research institution offering world-class academic programs and scientific activities. The university targets students, researchers, and academic partners, maintaining a strong market position as a leading university in Lithuania. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the site uses Joomla CMS with modern libraries such as jQuery and Bootstrap, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with detailed policies and opt-in consent. Overall, the site is professional, trustworthy, and well-maintained, supporting the university's reputation and outreach.

G

Getjet Airlines

getjet.aero

64

GetJet Airlines is a Lithuanian-based airline specializing in ACMI leasing, charter flights, and aircraft management services. Established in 2014 and headquartered in Vilnius, the company holds IOSA certification and serves a regional market with a fleet of Airbus and Boeing aircraft. The website reflects a professional and consistent brand image targeting both business clients and passengers, providing detailed service information and active news updates. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for performance and mobile use. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some advanced security headers and policies could be improved. Overall, the domain registration details align well with the business claims, supporting high legitimacy and trustworthiness.

U

UAB "Interneto vizija"

btt.lt

40

Best Triathlon Team (BTT) is the largest triathlon team in Lithuania, uniting children, youth, amateurs, and professionals. The organization operates primarily as a sports club offering membership and organizing triathlon events across Lithuania. The website serves as the official platform for team information, event calendars, news, and membership applications. The business is well established with a domain registered since 2007, indicating a stable presence in the Lithuanian sports community. The target audience includes sports enthusiasts and triathlon participants in Lithuania.

The website siaureslicejus.lt is currently inaccessible beyond a Cloudflare Turnstile security challenge page, preventing direct content analysis. The domain is registered recently in 2023 with a Lithuanian registrar, indicating a new or early-stage business or project. No business descriptions, contact information, or policies are publicly visible, limiting assessment of business operations or compliance. Technically, the site uses Cloudflare's security services and standard web technologies but lacks visible SEO or accessibility features. Security posture benefits from Cloudflare's protection but lacks visible security headers or policies. Overall, the site presents a low trust profile due to lack of accessible content and transparency.

G

Gridin's Group

gridins.com

52

Gridin's Group is an established industrial services company specializing in offshore and onshore works, including shipbuilding, ship repair, steel structure production, and offshore rig maintenance. With over 25 years of experience and multiple certifications such as ISO, DNV GL, and NEN 4400, the company positions itself as a trusted provider in the energy and transportation sectors. The website reflects a professional and consistent brand image targeting industrial clients requiring complex technical services. Technically, the site uses ImpressPages CMS, modern JavaScript libraries like Plyr and Slick slider, and integrates Google Analytics for user tracking. The site is mobile optimized with good SEO practices but could improve accessibility features. Security posture is adequate with HTTPS and domain transfer protection but lacks advanced security headers and explicit incident response information. Privacy compliance is basic with a privacy policy and cookie consent banner present, though terms of service and security policies are missing. Overall, the website is credible and functional but would benefit from enhanced security and compliance transparency.

U

UAB EIT sprendimai

eit.lt

61

UAB EIT sprendimai is a medium-sized Lithuanian IT and telecommunications company, part of the ATEA Group, founded in 2019. The company offers a broad range of IT services including video surveillance solutions, information and management systems, telephony and call centers, video conferencing solutions, office equipment, and IT infrastructure. It holds multiple ISO certifications indicating a strong commitment to quality, information security, IT service management, and environmental standards. The website is professionally designed, mobile-optimized, and provides clear contact information and service descriptions, targeting business clients in Lithuania. Technically, the site is built on WordPress with Elementor and uses modern libraries and analytics tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although cookie consent mechanisms and incident response contacts are missing. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.

S

Sportuok.lt

sportuok.lt

41

Sportuok.lt is a Lithuanian e-commerce platform specializing in the sale of sports equipment, inventory, and accessories for both professionals and enthusiasts. Established in 2014, the company offers a wide range of products with competitive pricing, fast delivery, and professional consultations. The website demonstrates a solid market position within Lithuania, supported by customer reviews and a professional online presence. Technically, the site employs modern web technologies including JavaScript, jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, and New Relic for performance monitoring. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and uses monitoring tools but lacks explicit security headers and comprehensive privacy and terms of service documentation. Overall, the site is trustworthy and professionally managed but could improve privacy compliance and security transparency.

N

NEO GROUP

neogroup.eu

70

NEO GROUP is a prominent European manufacturer specializing in PET resins and polyols, with a strategic location in Lithuania. The company emphasizes sustainability by producing PET resins with recycled content and serves a broad European market with a large manufacturing capacity. Their website reflects a mature digital presence built on WordPress, utilizing modern libraries and frameworks to deliver a responsive and user-friendly experience. Security practices include HTTPS enforcement and security headers, alongside a cookie consent mechanism, though dedicated security and incident response policies are not publicly available. Overall, the website demonstrates a solid security posture with room for improvement in transparency and incident readiness.

A

AB „Lifosa“

lifosa.com

56

AB „Lifosa“ is a major European fertilizer manufacturer based in Kėdainiai, Lithuania, specializing in phosphate fertilizers with a strong export orientation to about fifty countries. The company website is professionally designed, mobile-optimized, and uses a moderately modern technology stack including AngularJS and EasyWeb CMS. The site includes cookie consent mechanisms and privacy policy content in Lithuanian, indicating awareness of GDPR compliance. However, no explicit contact emails or phone numbers are present on the main pages, and no terms of service page was found. Security-wise, HTTPS is enabled but no security headers were detected, and the WHOIS data for the domain is missing or unavailable, which is unusual for a large commercial entity and reduces trustworthiness. Overall, the website is functional and professional but could improve transparency and security posture.

L

Leximum advokatų profesinė bendrija

leximum.lt

44

Leximum is a Lithuanian law firm established in 2000, providing a broad range of legal services including real estate law, public procurement, financial law, business law, and defense. The firm positions itself as a trusted partner with over twenty years of experience and a team of highly qualified legal professionals. The website reflects a professional and consistent brand image targeting businesses and individuals seeking legal assistance in Lithuania. Technically, the site uses modern frontend libraries such as Bootstrap, jQuery, and OwlCarousel, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and well-structured, offering good user experience and SEO optimization. Security posture is moderate with HTTPS implied but lacking visible security headers and cookie consent mechanisms. WHOIS data for the domain is unavailable, which limits domain trust verification. Overall, the website is professional and credible but could improve in privacy compliance and security best practices.

The website smpf.lrv.lt is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which prevents retrieval of substantive content or business information. The domain appears to be government-related based on its naming convention and language indication (Lithuanian), but no WHOIS data is available to confirm registration details or legitimacy. The technical infrastructure leverages Cloudflare's security and performance services, including Turnstile captcha and Cloudflare Insights for analytics. Due to the access restrictions, no privacy, cookie, or terms of service policies are visible, nor are any contact details or business descriptions. The security posture benefits from Cloudflare's protection but lacks visible security headers or explicit compliance disclosures. Overall, the site cannot be fully evaluated without bypassing the WAF challenge, resulting in a low AI score and limited insights.

U

Urbo

medbank.lt

70

Urbo is a Lithuanian bank established in 2023, offering a comprehensive range of banking services to private individuals and business clients. Their services include housing and consumer loans, business financing, deposits, payment services, insurance, and digital banking solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to their target audience in Lithuania. The company maintains an active online presence with social media links and multiple service subdomains for internet banking, document management, loan applications, and API access. Technically, the website leverages modern JavaScript frameworks such as Alpine.js and Livewire, is hosted behind Cloudflare, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with accessible privacy and cookie policies and a consent mechanism. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, Urbo presents a trustworthy and professional digital presence consistent with a modern financial institution.

E

ERGOLAIN GROUP

ergolain.lt

37

Ergolain Group is a medium-sized Lithuanian company specializing in the production and sale of high-quality ergonomic and office furniture, serving primarily the Baltic states. The company offers professional office installation projects and targets businesses and institutions seeking ergonomic furniture solutions. Their market position is strong within the Baltic region as a leading furniture producer and seller. The website is built on WordPress CMS and employs modern web technologies including jQuery, Bootstrap, and various marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is well-structured with good SEO practices and mobile optimization. Security posture is solid with HTTPS enforced and form validation implemented, though it lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable due to an invalid domain WHOIS response, which slightly reduces trustworthiness. Overall, the website presents a professional and credible business presence with room for improvement in privacy compliance and security best practices.

K

Kauno kolegija

kaunokolegija.lt

58

Kauno kolegija is a well-established Lithuanian higher education institution offering a wide range of study programs across multiple faculties including technology, arts, social sciences, and medicine. The website reflects a professional and comprehensive digital presence targeting prospective and current students, staff, and the community. The institution provides academic and non-academic support services and maintains active social media channels to engage its audience. Technically, the website is built on WordPress with modern plugins and libraries, ensuring good mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in implementing security headers and explicit incident response information. The absence of WHOIS data limits domain trust verification, but the website's professionalism and content quality support its legitimacy. Overall, the site is functional, user-friendly, and compliant with basic privacy standards.

T

Teltonika

teltonika.lt

74

Teltonika IoT Group is a well-established provider of Internet of Things solutions, offering a broad ecosystem that includes telematics, networking, telemedicine, EV charging, and electronics manufacturing services. The company positions itself as a reliable partner with 25 years of experience and significant investment in research and development, targeting businesses across multiple industries such as transport, energy, and healthcare. The website reflects a professional and consistent brand image with clear navigation and good content quality, supporting its B2B business model and market presence. From a technical perspective, the website employs modern technologies including Nuxt.js and Tailwind CSS, hosted with reputable providers like Amazon Registrar and Cloudflare DNS. The site is mobile-optimized and accessible, with good SEO practices evident. However, some security best practices such as enabling DNSSEC and publishing security headers are missing, which could be improved to enhance the security posture. Security-wise, the site uses HTTPS and Cloudflare DNS, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No privacy or cookie policies were found, which is a compliance gap especially under GDPR. The absence of contact emails and phone numbers on the main site reduces transparency and user trust. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures, improved DNS security, and clearer contact information to strengthen compliance and user confidence.

N

NORTHWAY medical centre

nmc.lt

51

NORTHWAY medical centre is a well-established private healthcare provider operating multiple medical centers across Lithuania, including Vilnius, Kaunas, Klaipėda, and Kretinga. The organization offers a broad range of medical services such as allergology, gynecology, surgery, diagnostics, and specialized treatments like infertility care. The website reflects a professional healthcare business targeting patients seeking quality private medical services in Lithuania. The business is part of the larger „Northway“ corporate group, founded in 2011, and maintains a consistent brand presence with active social media channels and comprehensive service information. Technically, the website is built on WordPress with modern plugins and tools including Yoast SEO, Google Tag Manager, Cookiebot for consent management, and MailerLite for marketing communications. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine visibility. Performance is moderate, with no blocking or WAF detected, allowing full content access. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, NORTHWAY medical centre demonstrates a strong digital presence with good privacy compliance and business credibility. Strategic improvements in security transparency and incident response readiness would further strengthen its security posture and stakeholder trust.

B

BlueBridge

bluebridge.lt

70

BlueBridge is a Lithuanian IT services company specializing in comprehensive IT infrastructure solutions for businesses, including software deployment, maintenance, data management, cybersecurity, and network services. The company positions itself as a professional and reliable IT partner for enterprises seeking efficient and secure IT solutions. The website is built on WordPress with modern plugins such as WPBakery and Yoast SEO, indicating a moderate level of digital maturity and technical infrastructure. The site is mobile-optimized and includes cookie consent mechanisms via Cookiebot, demonstrating awareness of privacy compliance requirements. Security posture is generally good with HTTPS enabled and consent management in place; however, the absence of explicit privacy policies, terms of service, and incident response information indicates areas for improvement. Overall, the domain registration is transparent and consistent with the business's founding year, supporting legitimacy. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing contact transparency, and implementing additional security headers to strengthen trust and compliance.

M

MV GROUP

mv.lt

59

MV GROUP operates a Lithuanian language website primarily focused on age verification services, targeting users to confirm if they are 20 years or older. The website is built on WordPress and employs modern web technologies such as jQuery, Swiper.js, and Cookiebot for cookie consent management. The presence of Cookiebot indicates a commitment to GDPR compliance regarding cookie usage, with detailed cookie categorization and user consent mechanisms. However, explicit privacy policy and terms of service pages are not found on the analyzed page, which limits transparency and compliance completeness. The website uses HTTPS, but lacks visible security headers, which could be improved to enhance security posture. No direct contact information or incident response details are provided, which may affect user trust and responsiveness to security incidents. Overall, the website is functional and moderately secure but would benefit from enhanced compliance documentation and security best practices.

A

AB Kauno Grūdai

kggroup.eu

64

AB Kauno Grūdai is a leading Lithuanian food and feed production company with a rich history spanning approximately 130 years. The company operates in multiple sectors including flour and flour products, ready-to-eat foods, compound feeds, veterinary pharmaceuticals, and pest control products. It is part of the larger AB Akola group, which is publicly traded on Nasdaq Vilnius and has annual revenues around 2 billion euros. The website reflects a mature digital presence with modern technologies such as Nuxt.js and Cookiebot for privacy compliance. The site is well-structured, mobile-optimized, and professionally designed, targeting both B2B and B2C audiences in Lithuania and the Baltic region. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected.

I

Invertus

invertus.eu

63

Invertus is a Lithuania-based digital commerce technology company specializing in scalable software solutions for e-commerce businesses. They provide a comprehensive suite of services including digital strategy, consulting, e-commerce development, custom software, maintenance, and digital marketing. The company positions itself as a trusted partner with strong alliances with major e-commerce platforms such as PrestaShop, Shopware, and Sylius, targeting businesses seeking digital transformation and enhanced customer experience. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and marketing tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. WHOIS data is consistent and transparent, registered under a Lithuanian university, aligning with the company's geographic claims. Overall, the website is professional and credible but should improve privacy and security transparency to enhance trust and compliance.

V

Virši

virsi.lt

56

Virši is a medium-sized energy and retail company operating primarily in Lithuania, offering fuel, electric vehicle charging, and convenience store services targeting private individuals. The website is professionally designed with good content quality and clear navigation, supporting multiple languages including Lithuanian, Latvian, and English. The technical infrastructure includes modern JavaScript libraries and Google Tag Manager for analytics and marketing. Security posture is adequate with HTTPS and CSRF protections, though additional security headers could enhance protection. Privacy compliance is well addressed with comprehensive cookie and privacy policies and consent mechanisms. However, the absence of WHOIS data limits domain trust verification, which is a notable concern. Overall, the website presents a trustworthy and professional front for the business, but domain registration transparency should be improved.

A

Areaal.lt

areaal.lt

46

Areaal.lt is a Lithuanian-based e-commerce retailer specializing in electronics, audio equipment, and household appliances. The company offers a broad range of products from well-known brands and targets consumers in Lithuania and the Baltic region. The website is professionally designed with clear navigation, multiple language support, and a comprehensive product catalog. The business model focuses on online retail with features such as multiple payment options and order tracking, positioning itself as a reliable regional player with over 30,000 completed orders. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies and third-party integrations such as Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization and moderate performance, with standard SEO and accessibility features. From a security perspective, the site enforces HTTPS, uses security headers, and secures forms with nonce tokens. However, it lacks a dedicated security policy or incident response information, and no vulnerability disclosure mechanism is present. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, though GDPR compliance indicators could be enhanced. Overall, Areaal.lt presents a trustworthy and professional online retail presence with a solid technical foundation and good security practices. Strategic improvements in security transparency and privacy compliance would further strengthen its posture.

D

DigiMart

digimart.lt

55

DigiMart is a regional e-commerce retailer specializing in electronics, household appliances, tools, and related products primarily serving Lithuanian and Latvian consumers. The website offers a broad product catalog with a professional design and clear navigation, supporting multiple languages and mobile optimization. The technical infrastructure leverages the EcomCart platform, Cloudflare DNS, and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, all managed with user consent mechanisms. Security posture is solid with HTTPS enforcement and cookie consent, though explicit security policies and incident response contacts are absent. The WHOIS data presents inconsistencies, notably a future domain creation date and a university as the registrant, which slightly undermines trustworthiness. Overall, DigiMart demonstrates a good balance of business professionalism, technical maturity, and privacy compliance, with room for improvement in security transparency and domain legitimacy verification.

P

PHH Group

pigugroup.eu

61

PHH Group operates a multilingual website presenting itself as a marketplace platform and corporate group entity, likely focused on hobby or retail sectors in Lithuania or the Baltic region. The website content is minimal, with basic promotional information and no detailed business descriptions or contact data. Technically, the site uses AngularJS 1.8.2, Google Tag Manager, Microsoft Clarity for analytics, and Cookiebot for cookie consent management. The site is served over HTTPS, ensuring secure transport, but lacks advanced security headers and comprehensive privacy documentation. No forms or direct user data collection points are present on the homepage. Overall, the site demonstrates a moderate level of digital maturity but lacks transparency in privacy and contact information, which may impact user trust and compliance.

The domain ksd-images.lt is registered to UAB "Interneto vizija", a Lithuanian company established in 2017. The website currently serves only a minimal 404 error page with no accessible content, metadata, or business information. This severely limits the ability to assess the company's market position, services, or digital maturity. Technically, the site is hosted behind Cloudflare nameservers with HTTPS enabled, but lacks any advanced security headers or content. No privacy, cookie, or terms policies are present, indicating poor compliance posture. Overall, the website quality and professionalism are very low, and the lack of content and contact information reduces trust and business credibility.

Mosta.lt is a Lithuanian language content publishing website focusing on scientific research, statistics, and various lifestyle and business topics. The site operates as a WordPress blog platform, targeting Lithuanian readers interested in research and informational articles. The technical infrastructure is based on WordPress with common libraries such as jQuery and FontAwesome, and it uses Google Tag Manager for analytics. The website is mobile optimized with a good user experience and clear navigation. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies. The domain is recently registered with privacy protection, which limits transparency and slightly reduces trustworthiness. No direct contact information or security incident response contacts are provided, which is a compliance and trust gap.

L

Laisvalaikio Dovanos

superdrive.lt

38

Super Drive is a Lithuanian-based leisure company specializing in supercar driving experiences featuring luxury vehicles such as Ferrari 360 Spider and Lamborghini Gallardo. The company targets individuals and corporate clients seeking unique driving events and gift vouchers. Their market position is niche but well-established within the Baltic region, supported by partnerships with regional leisure experience providers. Technically, the website employs a modern JavaScript stack with Bootstrap and jQuery, integrates Google Tag Manager and reCAPTCHA for analytics and security, and maintains good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforcement and form protection, though formal security policies and incident response contacts are absent. Privacy compliance is addressed through a cookie consent banner and a privacy policy page in Lithuanian, indicating GDPR awareness. Overall, the website is professional, trustworthy, and functional with clear contact information and customer testimonials enhancing credibility.

N

NoriuNoriuNoriu

noriunoriunoriu.lt

61

NoriuNoriuNoriu.lt is a well-established Lithuanian e-commerce platform specializing in hospitality and leisure services, including hotel bookings, sanatorium treatments, spa services, and various entertainment options across Lithuania, Latvia, and other Baltic countries. The platform offers a wide range of curated offers with discounts and special promotions, targeting individuals, families, and groups seeking quality and affordable relaxation experiences. The website demonstrates a strong market position as one of the largest hospitality service providers in the Baltic region, supported by a professional and user-friendly online presence. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and multiple analytics and marketing tools such as Facebook Pixel, Cookiebot for consent management, and OneSignal for push notifications. The site is mobile-optimized with good SEO and accessibility features, ensuring a positive user experience across devices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses several security best practices, although explicit security headers like CSP and X-Frame-Options are not clearly present in the HTML. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and mechanisms for user consent, aligning with GDPR requirements. Overall, the website presents a low-risk profile with a solid business credibility and technical foundation. Strategic improvements in security headers and ongoing monitoring of third-party scripts are recommended to maintain and enhance the security posture.

U

UAB „Laisvalaikio Dovanos“

laisvalaikiodovanos.lt

38

UAB „Laisvalaikio Dovanos“ operates a well-established e-commerce platform specializing in leisure and experience gifts, serving primarily the Lithuanian market with international presence in Latvia, Estonia, Poland, and Finland. The company offers a broad catalog of over 2000 experiences ranging from spa treatments to extreme sports, targeting consumers seeking unique and memorable gifts. The website demonstrates a mature digital infrastructure with modern technologies such as jQuery, Bootstrap, and integration of analytics and marketing tools including Google Analytics, TikTok Pixel, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforced and standard security headers present, although explicit security policies and incident response information are not publicly available. Overall, the site is professional, user-friendly, and trustworthy, reflecting the company's long-standing market presence since 2006.

E

Emoti Group

emotigroup.com

54

Emoti Group is a Lithuania-based group of companies specializing in experience gifting, including spa, leisure, and medical getaway packages. The company operates multiple subsidiaries across several countries, offering experiential gifts both online and offline. Their market position is that of a medium-sized retail and hospitality business focused on emotional and memorable gifting experiences. Technically, the website is built on WordPress using the Kallyas theme and Zion Builder, with common libraries like jQuery and Bootstrap. The site is moderately optimized for performance and mobile use, with good SEO practices but basic accessibility features. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and policies are lacking. Privacy compliance is partial, with a GDPR-related page for candidates but no cookie consent mechanism or comprehensive privacy policy. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

U

UAB "Gera dovana"

bookitnow.lt

51

BookitNow.lt is a well-established Lithuanian online booking platform specializing in a wide range of services including beauty, health, spa, dental, pet care, and leisure activities. It operates as part of the Gera Dovana group, positioning itself as one of the largest daily services and entertainment platforms in Lithuania. The platform offers over 10,000 services with convenient online booking and significant discounts, targeting consumers seeking easy access to everyday and leisure services. Technically, the website employs modern JavaScript libraries such as jQuery, integrates Google Analytics and Tag Manager for tracking, and uses reCAPTCHA v3 for bot protection. The site is mobile-optimized and features a comprehensive cookie consent mechanism, reflecting good privacy compliance. Security-wise, HTTPS is enforced and no critical vulnerabilities are evident, though some security headers could be improved and a formal security policy is absent. Overall, the website demonstrates a solid security posture and professional business credibility with clear contact information and trust indicators.

U

UAB "GERA DOVANA"

geradovana.lt

57

Gera dovana is a well-established Lithuanian e-commerce company specializing in selling gift experiences, vouchers, and gift sets both online and through physical stores. Operating since 2007, it holds a leading market position in Lithuania and also operates in Latvia and Poland through subsidiaries. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, TikTok Pixel, and Google Tag Manager, alongside bot protection via Google reCAPTCHA v3. Security posture is strong with HTTPS enforced and cookie consent mechanisms implemented, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant. WHOIS data confirms the legitimacy and consistency of the business registration. Overall, the website demonstrates a mature digital presence with good security and privacy practices.

R

Rail Baltica

rail-baltica.lt

60

Rail Baltica is a major European railway infrastructure project aimed at connecting the Baltic states with the European rail network through an electrified high-speed rail line. The project is government-led with EU funding and managed by Lithuanian authorities and LTG Infra.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

S

Staticus

staticus.com

30

Staticus is a well-established full-service façade engineering company specializing in the design, production, installation, and maintenance of unitised façade solutions primarily serving the Northern Europe market. With over 18 years of domain maturity and a large market presence, the company positions itself as one of the largest façade contractors in the region, targeting architects, construction firms, and real estate developers. Their business model emphasizes sustainability and collaborative project delivery. Technically, the website is built on WordPress with common plugins such as Yoast SEO and WP Rocket, and integrates marketing and analytics tools like Google Tag Manager, Facebook Pixel, and MailerLite. However, the site suffers from slow load times and lacks modern security configurations, notably missing HTTPS support and security headers, which significantly impacts its security posture. From a security perspective, the absence of SSL/TLS encryption is a critical vulnerability, exposing users to potential data interception risks. While privacy policies and cookie consent mechanisms are properly implemented, the lack of incident response contacts and vulnerability disclosure policies indicates room for improvement in security governance. Overall, Staticus presents a professional and credible business front with strong content and branding, but urgent security enhancements are necessary to protect user data and improve trustworthiness. Strategic recommendations include immediate SSL deployment, security header implementation, and performance optimization to align with best practices and compliance requirements.

U

UAB Toode

toode.lt

40

UAB Toode is a medium-sized Lithuanian company specializing in manufacturing and retailing steel roofing materials and accessories, with a strong presence in the Baltic region supported by factories in Estonia, Latvia, and Finland. The company holds recognized certifications such as ISO 9001 and CE marking, reinforcing its market position as a reputable supplier in the construction sector. Their website provides comprehensive product catalogs, customer testimonials, and multiple contact channels, targeting construction professionals and retail customers. Technically, the website is built on WordPress with WooCommerce, leveraging common web technologies and marketing tools like Google Analytics and Tag Manager. However, the site suffers from significant security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which critically undermines user trust and data protection. Privacy compliance is addressed through GDPR-aligned cookie consent and a privacy policy document, but terms of service and explicit security policies are missing. Overall, the website demonstrates good business credibility and content quality but requires urgent improvements in security infrastructure and performance optimization to enhance user trust and operational resilience.

M

MakeCommerce

makecommerce.lt

40

MakeCommerce is a leading payment solutions provider for e-commerce businesses in the Baltic region, trusted by over 6,000 merchants. The company offers a comprehensive suite of payment services including card payments, bank link payments, recurring payments, POS terminals, and financing options. Their business model focuses on enabling seamless payment processing for online and physical stores, supported by a well-developed API and integration modules for popular e-commerce platforms. The website reflects a mature and professional digital presence with consistent branding and detailed service information. Technically, the website is built on WordPress with a modern plugin ecosystem including GDPR compliance tools, testimonial management, and advanced sliders. However, the site suffers from poor performance with a high load time and a large number of resources. Mobile optimization is good, but accessibility features are basic. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. Other security best practices such as HSTS, OCSP stapling, and modern TLS protocols are not implemented. DNS security features like DNSSEC and CAA records are also missing. The domain registration is consistent and mature, but the absence of domain protection locks is a minor concern. Overall, while the business and website content are strong and trustworthy, the security posture is weak due to missing HTTPS and related configurations. This poses a significant risk to user data and trust. Strategic improvements in SSL/TLS deployment and performance optimization are recommended to enhance security and user experience.