Lithuania security reports

T

twoday

twoday.lt

54

twoday is a large IT services company based in Lithuania, specializing in advanced software development, software modernization, and business analytics and AI solutions primarily for the Nordic and Northern European markets. The company positions itself as a leading technology partner with a strong focus on SaaS products and digital transformation, serving over 8000 customers with nearly 3000 employees. The website is professionally designed, content-rich, and well-structured, leveraging HubSpot CMS and modern JavaScript libraries for enhanced user experience and marketing analytics. However, a critical security concern is the invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly impacts the security posture and trustworthiness of the site. Privacy and cookie policies are present and integrated with consent management tools, indicating good privacy compliance. No explicit terms of service or security incident response policies are publicly disclosed. Strategic improvements in SSL configuration and security best practices are recommended to enhance overall security and trust.

S

Saulės spektras, UAB

auto.lt

50

Auto.lt is a Lithuanian online business directory specializing in automotive-related companies and services. It offers comprehensive search capabilities, user reviews, expert advice, job listings, and map-based navigation to serve both businesses and consumers in Lithuania's automotive sector. The platform is operated by Saulės spektras, UAB, positioning itself as a key local player with a consistent brand and good content quality. Technically, the website uses modern JavaScript libraries, Google Analytics, and a custom CMS hosted by Hostex. While the site supports TLS 1.2 with strong cipher suites and has valid SPF and DMARC records, it lacks DNSSEC, HSTS, and OCSP stapling, which are recommended for enhanced security. The cookie and privacy policies are comprehensive and GDPR compliant, with active consent mechanisms. Performance is moderate to slow due to large page size and resource count, but mobile optimization and SEO are well addressed. Overall, the site demonstrates a solid digital presence with room for security and performance improvements.

S

Saulės spektras, UAB

turizmas.lt

44

Turizmas.lt is a Lithuanian tourism portal operated by Saulės spektras, UAB, providing a comprehensive directory of travel-related services including accommodation, rural tourism, travel agencies, and leisure activities. The platform targets both local and international tourists seeking detailed information and booking options within Lithuania. The website demonstrates a solid market position as a national tourism information hub with a medium-sized business model based on listings and advertising revenue. Technically, the site uses a modern but somewhat traditional tech stack including Google Analytics, Bootstrap, and CKEditor, hosted by Hostex.lt. Performance is moderate with good mobile optimization and SEO practices. Security-wise, the site employs a valid SSL certificate with strong cipher suites but lacks advanced DNS security features such as DNSSEC and CAA records. Cookie and privacy policies are comprehensive and GDPR compliant, with a consent mechanism implemented. However, there is no visible terms of service or incident response policy. Overall, the site is professional, trustworthy, and well-branded, but could improve security posture and transparency in some areas.

S

Saulės spektras, UAB

medicina.lt

43

Medicina.lt is a Lithuanian healthcare information portal operated by Saulės spektras, UAB, providing a comprehensive directory of medical institutions, pharmacies, medical equipment suppliers, and expert advice. The site targets Lithuanian healthcare consumers seeking medical services, products, and professional guidance. It holds a strong market position as a trusted source for healthcare-related information with multilingual support and user engagement features such as reviews and Q&A with experts. Technically, the site uses a custom CMS with JavaScript libraries, Google Analytics, and Google Maps API, hosted by Hostex. Performance is moderate with good mobile optimization and SEO practices. However, the security posture is weak due to an invalid SSL certificate and lack of HTTPS, no DNSSEC, and missing security headers, which poses risks to user data confidentiality and trust. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit consent mechanisms implemented. Overall, Medicina.lt is a well-established healthcare portal with room for critical security improvements to protect users and enhance trust.

S

Saulės spektras, UAB

statyba.lt

48

Statyba.lt is a comprehensive Lithuanian online business directory specializing in the construction sector, offering company listings, expert advice, job postings, and industry articles. Operated by Saulės spektras, UAB, it serves as a key platform for connecting construction-related businesses and consumers in Lithuania. The website demonstrates a solid market position with a broad range of services and active content updates. Technically, the site uses modern JavaScript frameworks, Google Analytics, and Google Fonts, hosted by Hostex, but suffers from slow load times due to large page size and resource count. Security-wise, it employs TLS 1.2 with strong cipher suites but lacks TLS 1.3, HSTS, OCSP stapling, and DNSSEC, which are recommended for enhanced security. Privacy and cookie policies are comprehensive and GDPR compliant, with clear user consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for SEO and mobile use, though performance improvements are advisable.

S

Saulės spektras, UAB

saulesspektras.lt

54

Saulės spektras, UAB is a Lithuanian digital marketing company specializing in providing digital marketing solutions for small and medium-sized businesses. Their offerings include website creation, SEO, SEM, and social media marketing services, supported by a network of business information portals. The company positions itself as a trusted partner in the Lithuanian market with certifications such as Google Partner and Duda Expert badges, indicating a strong commitment to quality and professionalism. Their target audience primarily consists of small and medium enterprises seeking to enhance their online presence and marketing effectiveness. Technically, the website is built on the Duda CMS platform, leveraging modern web technologies including Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance. While the site demonstrates good mobile optimization and SEO practices, performance is somewhat slow due to a large page size and numerous resources. Security-wise, the site employs strong TLS protocols and has a valid SPF record, but lacks advanced security headers, HSTS, OCSP stapling, and DMARC, which are recommended for enhanced protection. Privacy and cookie policies are comprehensive and GDPR compliant, with an effective consent mechanism in place. Overall, the company maintains a solid digital infrastructure with room for security enhancements and performance optimization to further strengthen trust and compliance.

S

Saulės spektras, UAB

info.lt

47

Info.lt is a comprehensive Lithuanian business directory platform operated by Saulės spektras, UAB. It offers extensive company listings, categorized business sectors, user reviews, job postings, and advertising opportunities, positioning itself as a leading resource for business information in Lithuania. The website targets both businesses and consumers seeking detailed company data and related services. Technically, the site employs standard web technologies including Google Analytics, Google Tag Manager, jQuery UI, and CKEditor, hosted likely by Hostex. Performance is moderate with good mobile optimization and SEO practices. Security posture is adequate with a valid SSL certificate and SPF records, but lacks advanced security headers, DNSSEC, and CAA records. Privacy and cookie policies are comprehensive and GDPR compliant, with an implemented cookie consent mechanism. Overall, the platform demonstrates a mature digital presence with room for security enhancements.

I

If P&C Insurance AS filialas

if.lt

55

If P&C Insurance AS filialas operates the website if.lt, providing a wide range of insurance products including automobile, home, pet, travel, personal, and business insurance primarily targeting private individuals and businesses in Lithuania. The company is positioned as a leading insurance provider in the Baltic region, offering online services and customer self-service portals. The website is well-branded and provides comprehensive information about insurance products and customer support. Technically, the site uses a mix of technologies including jQuery, Microsoft Application Insights, OneTrust for cookie consent, and Google Tag Manager, hosted on Microsoft Azure DNS infrastructure. However, the website suffers from a critical security issue due to the absence of a valid SSL certificate and lack of modern TLS protocol support, which undermines secure communications and user trust. The site demonstrates good GDPR compliance with detailed privacy and cookie policies and active consent mechanisms. Performance is slow with a high page load time and large page size, but mobile optimization and accessibility are well addressed. Overall, the security posture requires urgent improvement to protect user data and maintain trust.

F

FinteqHub

finteqhub.com

69

FinteqHub is a PCI DSS certified payment gateway platform specializing in integrating multiple payment systems for online businesses. Positioned as an experienced and reliable fintech partner, it offers services including payment processing, account opening assistance, and risk prevention. The company targets merchants, clients, and payment service providers, emphasizing ease of integration and security. Technically, the website is built on WordPress with LiteSpeed Cache and Cloudflare CDN, ensuring fast performance and good mobile optimization. Security headers are well configured, including HSTS with preload, X-Frame-Options, and X-Content-Type-Options, though the SSL configuration lacks modern TLS protocol support. The site includes GDPR-compliant cookie consent mechanisms and multiple contact forms, but lacks explicit terms of service and security policy pages. Overall, FinteqHub demonstrates a solid security posture with room for improvement in SSL protocols and transparency around incident response.

I

IAB Baltics

iabbaltics.com

59

IAB Baltics is a regional industry association representing the digital advertising sector across the Baltic States. The organization focuses on uniting key players in the interactive media market, providing research, advocacy, professional development, and networking opportunities. Their website is built on the Squarespace platform, hosted via Cloudflare, and presents a professional digital presence with valid SSL and security headers. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. The security posture is solid with HSTS enabled and no vulnerable SSL/TLS protocols detected, but the absence of modern TLS versions and comprehensive security policies indicates room for improvement. Overall, the site serves its business purpose well but should enhance compliance and security transparency to reduce risk and build greater trust.

The website labas.lt currently presents a significant security risk, primarily due to critical GDPR compliance failures and weak information security governance under NIS2 requirements. While network security and email security show relative strengths, key vulnerabilities in privacy policies, SSL configuration, and incident response severely undermine its overall security posture and expose the business to legal and reputational risks.

The website https://gemius.lt demonstrates significant security and compliance deficiencies, particularly in privacy regulations (GDPR), security governance (NIS2), and key HTTP security headers. While network and email security postures are relatively strong, critical gaps in privacy compliance and incident response expose the business to regulatory penalties and reputational risk. Immediate remediation is required to align with EU legal standards and improve overall cyber resilience.

The website bite.lt exhibits significant security and compliance gaps, particularly in privacy and regulatory adherence, posing substantial business and legal risks. While network and email security are relatively strong, critical deficiencies in GDPR compliance, NIS2 frameworks, and security headers undermine overall trust and expose the business to potential data breaches and regulatory penalties.

The website nordencosmetics.lt exhibits significant security weaknesses, particularly in privacy compliance and network security, placing the business at elevated legal and operational risk. Critical exposures such as lack of GDPR adherence and publicly accessible sensitive services jeopardize customer trust and business continuity. Immediate remediation is essential to protect data integrity, comply with EU regulations, and safeguard against cyber threats.

The website https://swedbank.lt currently exhibits significant security and compliance deficiencies, particularly regarding GDPR and NIS2 regulatory requirements, which pose substantial legal and reputational risks. While network security and certain technical controls are adequate, critical gaps in privacy policies, incident response, and certificate management undermine overall trustworthiness and expose the business to potential breaches and regulatory penalties.