Finance security reports

C

CembraPay AG

byjuno.ch

61

CembraPay AG is a leading Swiss financial services company specializing in flexible payment solutions such as invoice purchase, installment payments, monthly billing, and digital wallets. It operates primarily in the Swiss market, targeting both consumers and merchants, and is a subsidiary of the publicly listed Cembra Money Bank AG. The website presents a professional and user-friendly interface with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site employs modern web standards and integrates Google reCAPTCHA v3 to secure its contact forms, indicating a good level of security awareness. However, there is room for improvement in implementing comprehensive security headers and publishing explicit security policies. Overall, the site is secure, compliant with GDPR, and trustworthy, supported by consistent WHOIS data and transparent contact information.

C

Compensa Life

compensalife.lv

71

Compensa Life is a medium-sized insurance company operating primarily in Latvia, offering a range of insurance products including life insurance, health insurance, pension plans, and specialized oncology insurance. The website targets private individuals and provides detailed product information and consent management compliant with GDPR. The company appears to be well-positioned in the regional insurance market with a focus on customer-centric insurance solutions. Technically, the website is built on the DotNetNuke CMS platform using ASP.NET WebForms and incorporates modern JavaScript libraries such as jQuery and jQuery UI. It integrates third-party services including Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for analytics, marketing, and cookie consent management. The site demonstrates moderate performance and basic mobile optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain registration verification, but the website content and external references suggest legitimacy. Overall, the website presents a professional and trustworthy front for Compensa Life, with good privacy compliance and marketing transparency. Strategic improvements in security headers, mobile optimization, and explicit contact information would enhance trust and security posture.

M

M&T Bank

mtb.com

81

M&T Bank is a large regional financial institution focused on providing personal, business, and commercial banking services with a community bank approach. The website reflects a mature digital presence with comprehensive banking, mortgage, loan, and investment services targeted at individuals and businesses primarily in the United States. The company maintains a consistent brand image and active social media channels, reinforcing its market position as a trusted banking partner. Technically, the website leverages modern technologies including Adobe Experience Manager CMS, Google Tag Manager, reCAPTCHA, and various marketing and analytics tools such as Quantum Metric and Tealium. The site is well-optimized for mobile devices and accessibility, with good SEO practices and fast loading times. Security best practices are observed with HTTPS enforcement, security headers, and form protections, although explicit security policies and incident response information are not publicly detailed. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data for the domain is missing or unavailable, which is unusual for a major bank and warrants monitoring. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing detailed security and incident response policies, adding a vulnerability disclosure program, enhancing transparency on data protection officer contacts, and continuous auditing of third-party scripts to maintain security integrity.

F

Finitera JSC

finitera.com

55

Finitera JSC is an international fintech company specializing in financial services targeted primarily at private individuals. The company operates in three markets, serving over 250,000 customers with a workforce exceeding 450 employees. Founded in 2017, Finitera positions itself as a leading finance partner with a focus on data-driven financial solutions. The website reflects a professional and consistent brand image with clear business information and a focus on customer engagement through job opportunities and company history. Technically, the website is built on WordPress and integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized with good navigation and content quality. However, there is room for improvement in accessibility and SEO best practices. Performance is moderate, and the site uses HTTPS with a good SSL configuration, but lacks advanced security headers. From a security perspective, the site demonstrates basic best practices such as HTTPS and no visible sensitive data exposure. However, the absence of security headers, privacy and cookie policies, and incident response information indicates gaps in compliance and security maturity. The missing WHOIS registration data raises concerns about domain legitimacy and trustworthiness, which should be addressed to improve business credibility. Overall, Finitera presents a solid fintech business with a professional online presence but requires enhancements in privacy compliance, security policies, and domain registration transparency to strengthen its security posture and trust with customers.

I

inBudget

inbudget.net

57

inBudget is a personal finance management application focused on helping users organize and plan their finances through customizable budgets, transaction tracking, and social sharing features. The business targets individual users interested in personal finance, including cryptocurrency users and travelers. The app is distributed primarily via the iOS App Store and offers both private and public budgeting capabilities. The website content is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the website uses a moderate technology stack including jQuery 1.11.1, Font Awesome, Google Maps API, and Localytics for analytics. Hosting and DNS are managed through reputable providers, including Cloudflare for DNS. The site is served over HTTPS with a valid SSL configuration, but lacks some modern security headers and uses an outdated jQuery version, which could pose security risks. No CMS was detected, indicating a custom or static site. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks visible security headers, cookie consent mechanisms, and explicit privacy compliance statements, which are important for GDPR and other privacy regulations. No contact information or incident response policies are published, limiting transparency and user trust in security matters. Overall, the website is functional and professional but could improve its privacy compliance and security posture. The presence of unrelated gambling and casino links in the footer may affect trustworthiness. Strategic improvements in security headers, cookie consent, and contact transparency are recommended to enhance user confidence and regulatory compliance.

E

ECNG Digital, UAB

estchange.io

60

ECNG Digital is a Lithuanian-registered virtual currency exchange service provider targeting high net worth individuals and business customers. The company offers an efficient platform for on- and off-ramping of virtual currencies, positioning itself as a niche player in the Lithuanian financial technology sector. Founded in 2021, the company maintains a clear and professional online presence with comprehensive legal disclosures and policy documents. Technically, the website leverages modern frameworks such as Vue.js and Nuxt.js, with Google Tag Manager integrated for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and domain transfer protection but lacks advanced security headers and published security policies, which are recommended for improvement. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website demonstrates a solid business credibility and privacy compliance posture, though it could enhance its security transparency and incident response readiness.

W

WunderTrading

wunderbit.co

65

WunderTrading operates the website wunderbit.co, providing a platform for instant purchase of Bitcoin and over 100 other cryptocurrencies using credit and debit cards. The company targets both novice and experienced crypto investors seeking a fast, secure, and user-friendly buying experience. The platform emphasizes safety by partnering with accredited providers and enforcing AML and KYC policies. The website is well-branded, professionally designed, and offers multi-language support, enhancing its global reach. Technically, the site uses modern web technologies with Cloudflare DNS hosting, JavaScript, and CSS for a responsive and accessible user experience. SEO and social media integrations are well implemented, though some accessibility features could be improved. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and no direct storage of user assets, but lacks some advanced security headers and DNSSEC. Privacy compliance is mostly addressed with clear privacy and terms policies, but the absence of a cookie consent mechanism and incident response contacts are notable gaps. The domain is privacy protected but consistent with the business profile, and the domain age supports legitimacy. Tracking and marketing tools like Google Analytics, Facebook Pixel, and Trustpilot are used, indicating moderate user tracking. Overall, the website is credible, professional, and secure with minor areas for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

P

PSI-Pay Ltd

psi-pay.co.uk

54

PSI-Pay Ltd is a UK-based financial services company specializing in international payment solutions, particularly focusing on Mastercard® and Discover payment networks. Established in 2007, the company operates under FCA authorization for electronic money issuance, positioning itself as a transparent and efficient payment processor serving global business clients. Their key offerings include payment processing, regulatory compliance support, and partner sponsorship programs. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at businesses requiring payment and compliance services. Technically, the website is built on WordPress with a custom theme and uses legacy technologies such as jQuery 1.12.3 and Font Awesome 4.5.0. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and modern security headers. No analytics or tracking scripts were detected, indicating minimal user tracking. The site is fully accessible without WAF or blocking mechanisms. From a security perspective, the site enforces HTTPS but lacks visible security headers and uses an outdated jQuery version, which could pose vulnerabilities. There is no published security policy or incident response contact information, and cookie consent mechanisms are absent, representing compliance gaps. The domain WHOIS data is consistent with the business claims, showing a long-standing registration and no privacy protection, supporting legitimacy. Overall, PSI-Pay's website demonstrates good business credibility and content quality but requires improvements in privacy compliance, security best practices, and technical modernization to enhance trust and reduce risk.

P

Professional Partner OÜ

propartner.lv

49

Infoproff, operated by Professional Partner OÜ, is a licensed and insured financial services agency based in Estonia, specializing in credit reporting, debt collection, marketing databases, and credit risk management. The company targets businesses seeking reliable credit information and risk evaluation tools, offering a broad portfolio of services including KYC/KYB/AML checks and API integrations. Their market position is strengthened by memberships in reputable business federations and a multilingual, multi-currency reporting capability. Technically, the website employs modern frameworks such as Yii and Bootstrap, integrates error monitoring via Sentry, and uses Cloudflare for CDN and security, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, though explicit security policies and incident response details are absent. The missing WHOIS data for the domain is a notable anomaly that slightly detracts from overall trust but does not overshadow the professional presentation and operational transparency of the business. Strategic recommendations include publishing detailed security and incident response policies and enhancing accessibility compliance.

L

Latvijas Privātā un Iespējkapitāla asociācija

lvca.lv

38

Latvijas Privātā un Iespējkapitāla asociācija (LVCA) is a Latvian private equity and venture capital association representing 40 organizations in the finance sector. Founded in 2003, it serves as a key industry body promoting private equity financing, facilitating member collaboration, and advocating with government institutions. The website presents a professional image with clear business information, leadership team details, and event news. Technically, the site uses modern web standards, including HTTPS, external trusted scripts, and responsive design, though it lacks advanced CMS or frameworks. Security posture is generally good with HTTPS enforced, but absence of security headers and cookie consent mechanisms indicate room for improvement. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site is credible and functional, serving its target audience effectively.

G

Gerlionti SP. Z o. o.

gerlionti.group

65

Gerlionti Group is a medium-sized financial services company established in 2014, providing tailored investment, payment, and advisory services primarily in Poland and other European countries. The company emphasizes compliance, confidentiality, and professional expertise, supported by a network of reputable partners. Their website reflects a professional and consistent brand image with clear service offerings and contact mechanisms. Technically, the site uses modern web technologies including Google Analytics, reCAPTCHA, and Cloudflare DNS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and spam protection, though improvements are recommended in DNSSEC and security headers. The domain registration uses privacy protection, which is common but reduces transparency. Overall, the website is trustworthy and well-positioned in the financial sector.

F

FIDEA SIA

fidea.lv

51

FIDEA SIA is a Latvian consulting company specializing in financial and management consulting with over 20 years of experience, focusing on innovation in European markets. The website is professionally designed using the Wix platform, indicating a moderate level of digital maturity. The technical infrastructure relies on Wix's Thunderbolt framework and standard web technologies, providing a stable but moderately performing platform. Security posture is adequate with HTTPS usage but lacks visible advanced security headers and explicit privacy or cookie policies, which are critical for compliance and trust. Overall, the site presents a legitimate small business with room for improvement in security and privacy compliance.

E

EcoPayz Georgia LLC

ecopayz.com

68

EcoPayz Georgia LLC operates a secure online payment platform offering personal and merchant accounts with multi-currency support and instant money transfers. The company targets individuals and merchants seeking reliable digital payment solutions, leveraging over 20 years of experience. The website is built on WordPress with modern SEO and multilingual capabilities, providing a good user experience and mobile optimization. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy financial service provider.

Gen Re operates as a global reinsurer specializing in Life & Health and Property & Casualty insurance sectors. The website presents a professional and comprehensive overview of their services, including risk transfer solutions, consulting, underwriting, claims management, and educational resources. The company targets insurance professionals and companies seeking reinsurance expertise. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and includes cookie consent mechanisms compliant with GDPR. Security posture is generally good with HTTPS and consented third-party scripts, though explicit security headers and incident response contacts are absent. The lack of WHOIS registration data for the domain is a notable concern, suggesting a need for further verification of domain legitimacy. Overall, the website is well-structured, content-rich, and trustworthy from a user perspective but requires improvements in transparency and security disclosures.

L

LANDE Platform Ltd.

lendsecured.eu

67

LANDE Platform Ltd. operates lande.finance, a European crowdfunding platform specializing in agricultural investments. The platform enables investors to diversify portfolios by funding secured agricultural loans, primarily targeting farmers. Licensed by the Latvian Financial and Capital Market Supervisory Authority and partnered with Lemon Way for payment processing, LANDE positions itself as a trustworthy fintech player in the EU market. The website offers detailed project listings, investment features like auto-invest, and transparency through legal and risk documentation. Technically, the site uses modern web technologies including Bootstrap, Google Tag Manager, and Facebook Pixel, hosted behind Cloudflare DNS. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and published security policies could enhance trust. Privacy and cookie policies are comprehensive with consent mechanisms, supporting GDPR compliance. Overall, the platform demonstrates good professionalism, user experience, and trustworthiness, though direct contact information is not publicly disclosed.

B

Bloom Finance Ltd / PionPay OU

pion.finance

49

Pion Finance operates as a payment processing platform specializing in card and alternative payment methods, offering merchants a secure and efficient way to accept payments and make payouts globally. The company emphasizes PCI DSS Level 1 compliance and regulatory adherence in the UK and EU markets through Bloom Finance Ltd and PionPay OU. Their services include recurring payments, mass payouts, and a merchant dashboard, targeting online businesses seeking seamless payment solutions. Technically, the website is built on WordPress with the Divi theme, integrating modern technologies such as Google reCAPTCHA for security. The site is well-structured, mobile-optimized, and provides clear navigation, though it lacks some advanced security headers and cookie consent mechanisms. Security posture is strong with HTTPS and PCI compliance, but incident response and vulnerability disclosure information are absent. Overall, the domain registration is privacy protected but consistent with the business profile, and the website presents a professional and trustworthy image with room for improvement in privacy compliance and security best practices.

M

MCM Global Markets Ltd.

mcmbroker.com

48

MCMBroker is an online binary options trading platform operated by MCM Global Markets Ltd., licensed under the Financial Services Authority of Saint Vincent and the Grenadines. The platform targets global traders in permitted regions, offering demo, standard, and elite accounts with fast execution and up to 95% payouts. The website is built on WordPress with Elementor and uses modern web technologies, hosted behind Cloudflare DNS. Security posture is generally good with HTTPS and anti-fraud claims, but lacks DNSSEC and explicit vulnerability disclosure mechanisms. The WHOIS data shows a suspicious future domain creation date, which requires further verification. Overall, the platform presents a professional trading service with moderate trustworthiness and room for security and privacy improvements.

E

EcoFinance

dyninnofintech.com

63

EcoFinance is a fintech company founded in 2015 and part of the Dyninno Group, specializing in providing inclusive lending products such as short-term loans, installment loans, and credit lines across Europe and the Philippines. The company positions itself as a data-driven and customer-focused lender with a strong emphasis on technology and personalized service. Their market presence includes operations in multiple countries with over 500,000 satisfied clients and a loan portfolio exceeding €179 million since inception. Technically, the website is built on the Webflow platform, leveraging modern web technologies including Google Tag Manager, Google Analytics, and Cloudflare Turnstile CAPTCHA for bot protection. The site is well-optimized for mobile devices, fast loading, and accessible, with professional design and clear navigation. However, some security best practices such as explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms, reducing risk of automated abuse. No exposed sensitive data or vulnerable libraries were detected. The absence of public security policies and incident response information is a gap that could be addressed to enhance trust and compliance. The domain WHOIS data is privacy protected as per EURid policy, which is typical for .eu domains, and no suspicious patterns were found. Overall, EcoFinance presents a credible and professional fintech business with a solid digital presence and good security posture. Strategic improvements in privacy compliance and security transparency would further strengthen their risk profile and customer trust.

F

FinTeX

fintex.ch

46

FinTeX is a Geneva-based IT consulting company specializing in finance industry solutions, particularly trading room deployments. The website presents a professional and consistent brand image with a focus on financial technology consulting. The technical infrastructure is built on WordPress with modern plugins such as Yoast SEO and Smart Slider 3, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks comprehensive privacy and cookie policies, which impacts compliance posture. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is legitimate and functional but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

T

true-vision.net

true-vision.net

58

True-vision.net is a French accounting service provider focused on the Lyon region, offering a range of services including accounting, fiscal advice, optimization, and payroll management. The website is professionally designed using WordPress and common plugins, providing good content quality and clear service descriptions. However, the absence of privacy and cookie policies, lack of contact information, and missing WHOIS registration data reduce the overall trust and compliance posture. Technically, the site uses HTTPS and modern web technologies but lacks security headers and explicit privacy compliance indicators.

FSE Listings is a specialized consulting firm focused on facilitating listings on the Frankfurt Stock Exchange, with a strong emphasis on dual listings for companies from Australia, Canada, and fintech sectors. The company offers multi-jurisdictional registration, capital raising, and investor roadshow services, positioning itself as a leading provider with over 1000 listings since 2000. Technically, the website is built on WordPress with standard plugins and scripts, providing moderate performance and basic mobile optimization. Security posture is adequate with HTTPS but lacks advanced security headers and explicit privacy compliance mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and contact information suggest a legitimate business. Overall, the site is functional and informative but would benefit from enhanced security and privacy compliance measures.

B

Balance

balance.lv

46

Balance.lv is a Latvian small business specializing in accounting and financial services including bookkeeping, tax planning, and financial statement preparation. The company positions itself as a reliable partner for businesses seeking simplified accounting solutions, supported by client testimonials and a professional web presence. The website is built using Mobirise with modern frontend technologies and provides clear contact information and service descriptions. However, the absence of privacy and cookie policies indicates compliance gaps. Security posture is moderate with HTTPS assumed but lacking security headers and explicit incident response contacts. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is functional and credible but could improve in privacy and security transparency.

F

FxPro UK Limited

fxpro.co.uk

66

FxPro UK Limited operates a comprehensive online trading platform specializing in forex and CFDs, serving a global client base with over 3 million accounts. The company is well-regulated across multiple jurisdictions including the UK (FCA), Cyprus (CySEC), South Africa (FSCA), and the Bahamas (SCB), which reinforces its market credibility. The website offers a wide range of trading instruments and platforms, including MetaTrader 4, MetaTrader 5, and cTrader, supported by mobile applications and extensive educational resources. Technically, the site employs modern web technologies such as React and integrates multiple analytics and marketing tools, ensuring a robust digital presence with fast performance and excellent mobile optimization. Security measures are strong, with HTTPS enforcement and comprehensive security headers, though no public vulnerability disclosure or incident response contact is evident. The WHOIS data for the domain www.fxpro.co.uk is unavailable due to registration issues, which is a notable anomaly; however, the broader FxPro group domains and regulatory disclosures support the legitimacy of the business. Overall, FxPro presents a professional, secure, and user-friendly trading environment with strong compliance and trust indicators.

G

Grant Thornton Latvia

grantthornton.lv

68

Grant Thornton Latvia is a professional services firm specializing in audit, accounting, tax, legal, and financial consulting services. It operates as part of the globally recognized Grant Thornton International network, targeting businesses and professionals in Latvia. The website is localized in Latvian and English, reflecting a focus on the Latvian market. The business model centers on providing expert advisory and compliance services to corporate clients. The site demonstrates consistent branding and professional content, supporting its market position as a reputable service provider.

Express Credit is a Latvian online loan comparison platform operated by SIA "AB Software". The website aggregates multiple loan providers offering various credit products such as quick loans, consumer loans, credit lines, auto leasing, and mortgage loans. The platform targets Latvian consumers seeking convenient access to loan options and facilitates applications through affiliate links. The business operates a small-scale, finance-focused service with a WordPress-based website launched in 2021. Technically, the site uses common web technologies including jQuery, Bootstrap, and Google Analytics, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy or terms of service pages. No direct contact information or incident response policies are published, which limits transparency. WHOIS data could not be retrieved due to query limits, restricting domain legitimacy assessment. Overall, the site presents a functional and professional loan comparison service with room for improvement in privacy, security, and business transparency.

Superia is a leading financial advisory firm operating in the Baltic region with offices in Estonia, Latvia, and Lithuania. The company specializes in mergers and acquisitions, capital markets advisory, and investment advisory services. Their website reflects a professional and active business with recent transaction references and news updates. The firm targets corporate clients seeking financial advisory services in the Baltic states. Technically, the website is built on Drupal 10, uses modern JavaScript libraries, and is mobile optimized with good accessibility and SEO practices. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and formal privacy or cookie policies. Overall, the domain registration data is consistent and supports the legitimacy of the business.

F

Fintech Labs

fintechstartup.com

61

Fintech Labs is a specialized digital platform established in 2009 that serves small business owners by providing curated information and affiliate marketing content related to fintech products and services. The website offers comprehensive resources including digital banking reviews, credit card offers, loan listings, payment solutions, and fintech conference information, positioning itself as a niche leader in fintech content for SMBs. The platform leverages WordPress CMS with a suite of plugins for analytics, advertising, and marketing automation, reflecting a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but could be improved by enabling DNSSEC and implementing additional security headers. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though the absence of a cookie consent mechanism is a minor gap. Overall, the website demonstrates good business credibility and professionalism, supported by a well-established domain and consistent branding.

V

VediCard

vedicard.eu

44

VediCard is a specialized consultancy firm operating in the payment and banking sector, providing expert advisory services including project management, feasibility studies, certification support, and strategic business guidance. The company targets financial institutions, payment service providers, and related stakeholders, positioning itself as a trusted partner with over 20 years of industry experience. The website reflects a professional and consistent brand image with clear service offerings and reputable client associations. Technically, the website is built on WordPress with modern plugins such as Visual Composer and MetaSlider, ensuring a responsive and user-friendly experience. The hosting and domain registration are consistent and legitimate, with no signs of privacy protection or suspicious registrations. Performance is moderate with good mobile optimization, though SEO and accessibility could be improved. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and formal policies such as privacy, cookie, and incident response disclosures. No vulnerability disclosures or security.txt files are present, indicating room for improvement in security transparency and compliance. Overall, the website is credible and professional but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

Marsh is a globally recognized leader in insurance broking and risk management, offering tailored solutions across various industries and regions. The website reflects a mature enterprise with a professional digital presence, leveraging Adobe Experience Manager and modern analytics and consent management tools. Security posture is strong with HTTPS enforcement, secure login forms, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data limits domain registration trust analysis but is consistent with large enterprises using privacy protections. Overall, Marsh's website demonstrates a solid balance of business credibility, technical sophistication, and privacy compliance.

S

SIA “Investimus”

investimus.lv

41

SIA Investimus is a Latvian insurance brokerage company established in 2002, specializing in providing a wide range of insurance services to private individuals, companies, and farmers. The company emphasizes collaboration with stable and reliable European partners and offers products such as life insurance with savings, accident insurance, vehicle insurance, property insurance, travel insurance, and liability insurance. Their website presents a professional image with clear contact information and a team of brokers, positioning them as a trusted player in the Latvian insurance market. Technically, the website is built on WordPress 5.0.22, utilizing common libraries and frameworks such as jQuery, Bootstrap, FontAwesome, and Google Maps API. The site is mobile-optimized with good navigation and moderate performance. However, there is room for improvement in SEO and accessibility features. The website uses HTTPS, but lacks advanced security headers and visible privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site shows basic good practices such as HTTPS and form validation but misses critical elements like security headers and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to query limits limits the ability to fully verify domain legitimacy, but the website content and contact details support a moderate trust level. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and better transparency regarding data protection and incident response. These improvements would strengthen user trust and regulatory compliance, reducing risk and enhancing the company’s digital maturity.

B

B2F Srl

b2f.it

49

B2F Srl is a specialized fintech digital solution provider based in Italy, with nearly two decades of experience integrating financial services into sales processes through pay-per-use digital platforms. Their offerings target both territorial networks (companies, agents, points of sale) and virtual networks (e-commerce sites, marketplaces), providing customizable and versatile fintech integration solutions. The company positions itself as a game changer in the fintech arena, emphasizing simplicity, customization, and versatility in its platform architecture. Technically, the website employs modern frontend technologies including Tailwind CSS and Alpine.js, with Google Tag Manager and Iubenda for analytics and cookie consent management. The site is mobile optimized and SEO friendly, with good performance and accessibility basics. Security practices include HTTPS enforcement and CSRF protection on forms, though formal security policies and incident response details are not published. The security posture is solid with no detected vulnerabilities or exposed sensitive data, but could be improved by adding security headers and formal security documentation. Privacy compliance is strong with comprehensive privacy and cookie policies and active consent mechanisms. Business credibility is supported by clear company information, professional content, and trust indicators. Overall, B2F presents a professional, secure, and compliant online presence aligned with its fintech business focus, with recommendations to enhance security transparency and accessibility for further trust and compliance improvements.

TBC Pay is a well-established Georgian online payment platform, founded in 2008 and operated under the TBC Bank Group umbrella. It offers a comprehensive suite of payment services including mobile balance top-ups, banking payments, utility bills, transportation fines, and state services. The platform targets Georgian residents and businesses seeking convenient, fast, and secure online payment solutions. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization. Technically, it leverages modern technologies such as React, Google Analytics, Facebook Pixel, and AWS hosting, ensuring good performance and scalability. Security posture is strong with HTTPS, security headers, and secure form handling, though cookie consent mechanisms and explicit security policies could be improved. Overall, the platform demonstrates high business credibility and trustworthiness, supported by consistent WHOIS data and a long domain history.

S

SIA Hedge Capital Company

nordcard.eu

55

NordCard, operated by SIA Hedge Capital Company, is a Latvian non-bank financial service provider specializing in offering flexible credit lines up to 10,000 EUR. The website targets Latvian consumers seeking quick and convenient short-term credit solutions, providing online application processes, online banking access, and payment cards linked to credit lines. The company positions itself as a reliable and customer-focused lender within the Latvian market, supported by customer reviews and comprehensive FAQs. Technically, the website employs modern JavaScript libraries and Google Tag Manager for analytics and marketing, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with accessible privacy and cookie policies and a consent mechanism. Overall, the website demonstrates a professional and trustworthy online presence with moderate to good technical maturity.

D

Data Invision

datainvision.com

63

Data Invision is a technology startup founded in 2019, specializing in AI-powered predictive analytics solutions primarily for the finance sector. Their platform focuses on enhancing business decision-making through machine learning models that address credit risk, fraud detection, and campaign optimization. The company positions itself as a niche provider offering precision, efficiency, and profitability improvements to financial institutions and related businesses. Technically, the website is built with modern JavaScript frameworks such as React and integrates Google Analytics and Tag Manager for user tracking. The site is hosted with Cloudflare DNS services and uses HTTPS with a good SSL configuration. Security posture is moderate; while HTTPS is enforced and domain registration is protected against unauthorized changes, the site lacks security headers and explicit security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to a company email and a hidden contact form, with no phone numbers or physical addresses found. Overall, the website is professional and trustworthy but could improve in security and privacy compliance aspects.

Dains is a well-established UK-based accounting and business advisory firm offering a wide range of professional services including audit, taxation, corporate finance, payroll, and forensic accounting. The company targets private individuals, private companies, large corporates, and not-for-profit organizations, positioning itself as a trusted partner with nearly a century of history and a broad service portfolio. The website reflects a professional and modern digital presence with clear navigation, comprehensive service descriptions, and strong branding consistency. Technically, the website employs modern web technologies such as Tailwind CSS, JavaScript frameworks, and integrates multiple analytics and marketing tools including Microsoft Clarity, Google Tag Manager, Lead Forensics, and social media pixels. The site is mobile-optimized, fast-loading, and accessible, indicating a mature digital infrastructure likely hosted behind Cloudflare services. From a security perspective, the site enforces HTTPS and uses Cloudflare Turnstile CAPTCHA for bot protection, but lacks explicit security headers and does not provide a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration legitimacy or recent registration status. This discrepancy between the professional website and missing WHOIS data suggests a need for further verification. Overall, the site demonstrates strong business credibility and technical maturity but would benefit from enhanced transparency in security policies and domain registration details.

C

Chip

getchip.uk

68

Chip is a UK-based fintech company offering a comprehensive savings and investment app that integrates AI-driven auto-saving features and multiple account types including Cash ISAs and Stocks & Shares ISAs. The company targets individuals seeking to build long-term wealth with ease and convenience, boasting over 500,000 users and strong market presence supported by competitive rates and promotional offers. The website reflects a mature digital infrastructure leveraging modern web technologies, analytics, and marketing tools, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and consent management, though explicit incident response and vulnerability disclosure policies are not publicly available. Overall, Chip demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR and UK financial regulations.

C

Compass Plus (Great Britain) Limited

compassplus.com

70

Compass Plus Technologies is a UK-based company specializing in payments technology solutions, including issuing, acquiring, digital solutions, and processing services. The company positions itself as an innovator and market leader, targeting financial institutions, start-ups, and disruptors in the payments industry. Their business model focuses on providing flexible, scalable, and visionary payment platforms to empower customers in controlling their payment ecosystems. The website content is rich, professionally designed, and clearly structured, reflecting a medium-sized enterprise founded in 2022. Technically, the website employs modern JavaScript libraries such as jQuery and Bootstrap, integrates Google Tag Manager and Analytics for tracking, and is hosted on AWS infrastructure. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and enforces domain transfer restrictions. However, it lacks DNSSEC and explicit security headers, and no security policy or incident response contacts are published. Cookie consent mechanisms and privacy policies are comprehensive and GDPR compliant, indicating a strong privacy posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence with solid business credibility. Strategic improvements in security headers, DNSSEC, and incident response transparency would enhance the security posture and trust further.

D

Deutsche Börse Group

eurexgroup.com

70

Eurex, operated by Deutsche Börse Group, is a leading global derivatives exchange specializing in EUR-denominated equity index and fixed income derivatives. The website presents comprehensive market and product information targeting financial market participants such as traders, clearing members, and institutional investors. The business model focuses on providing derivatives trading, clearing services, market data, and repo market solutions, positioning Eurex as a key player in the global financial markets. Technically, the website is built on CoreMedia CMS with JavaScript and integrates Matomo analytics for user tracking. The site demonstrates good mobile optimization, clear navigation, and professional design, supporting a positive user experience. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are not clearly published. WHOIS data is unavailable, likely due to privacy protections common in financial sector domains, but the domain and content legitimacy are supported by consistent branding and association with Deutsche Börse Group. Overall, the website is professional, secure, and credible, serving its target audience effectively.

N

Numeri

numeri.lv

61

Numeri is a Latvian-based financial services company specializing in accounting, payroll, tax, and consulting services for businesses at various stages of development, including support for non-resident companies. The company positions itself as a reliable partner in financial management, offering expert guidance to optimize financial processes and support strategic decision-making. The website is professionally designed, localized in Latvian, and includes client testimonials and partner affiliations that enhance its credibility. Technically, the website is built on Drupal 11, employs Google Tag Manager for analytics, and uses Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and accessible, with good SEO practices and modern web standards. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. The absence of WHOIS data for the domain numeribaltics.com is a notable concern, as it limits the ability to verify domain registration legitimacy. Despite this, the website content and professional presentation suggest a legitimate business operation. No explicit security or incident response policies are published, which could be improved to enhance trust. Overall, Numeri demonstrates a mature digital presence with good privacy compliance and security practices, but domain registration transparency and explicit security policies should be addressed to strengthen trust and compliance.

M

Man Group

man.com

77

Man Group is a well-established, enterprise-level investment management firm with a heritage dating back to 1783. The company specializes in technology-empowered active investment management, offering diversified strategies including quantitative and discretionary approaches, as well as private market investments. Their target audience primarily consists of institutional investors seeking tailored portfolio solutions. The website reflects a strong market position with consistent branding and comprehensive content focused on their investment capabilities and corporate responsibility. Technically, the website is built on Drupal CMS and employs modern web technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. However, some security headers are missing, and no explicit incident response or vulnerability disclosure information is provided, indicating areas for security posture improvement. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, reflecting good privacy compliance aligned with GDPR. The absence of WHOIS data limits domain registration trust analysis, but the website content and external references strongly support legitimacy. Overall, the site demonstrates a mature digital presence with room for enhanced security transparency. Strategically, Man Group should focus on publishing vulnerability disclosure policies, enhancing security headers, and providing clear incident response contacts to strengthen trust and compliance. These steps will improve their security posture and align with best practices for enterprise financial services websites.

H

Hérens Quality Asset Management

hqam.ch

64

Hérens Quality Asset Management (HQAM) is a specialized asset management boutique focused on serving institutional and private investors primarily in Switzerland. The company offers key services including asset management, investment advisory, and portfolio analysis. The website is professionally designed using WordPress with modern plugins such as Elementor and Rank Math SEO, indicating a mature digital presence. The site is well-structured, mobile-optimized, and includes a customer portal for client access. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, HQAM presents a credible and professional business front with room for improvement in privacy and security transparency.

A

Altum

altum.lv

66

Altum is a Latvian state financial institution providing government-backed financial support and services to residents, businesses, farmers, and investors. The website clearly communicates its role in supplementing the private financial market with state support products, including loans, investment funds, and bonds. The institution targets a broad audience within Latvia, including individuals and commercial entities. The digital presence is built on a modern WordPress CMS with Elementor, featuring responsive design and integrated calculators to assist users. Security measures include HTTPS enforcement and Google reCAPTCHA integration, alongside a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not publicly available, and WHOIS data could not be retrieved due to query limits, slightly reducing confidence in domain registration transparency. Overall, the website demonstrates a solid security posture and professional business presentation appropriate for a government financial institution.

A

Access Digital

accesssoftek.com

51

Access Digital is a mature digital banking platform provider offering a comprehensive ecosystem that includes consumer and business banking, cryptocurrency trading, robo-advisory investing, biometric security, fraud detection, and conversational banking in multiple languages. The company targets financial institutions and businesses seeking advanced digital banking solutions, positioning itself as a robust and elegant financial ecosystem with over 160 integrations and award-winning security features. The website reflects a medium-sized enterprise with a professional online presence and a business history dating back to 1999. Technically, the website is built on WordPress using Elementor and JetEngine plugins, integrated with HubSpot marketing and analytics tools, and served via Cloudflare DNS. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and domain locks in place, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent banner but no visible privacy policy or terms of service pages. Overall, the security posture is adequate but could be improved by enabling DNSSEC, publishing security and privacy policies, and adding vulnerability disclosure information. The website is accessible without WAF blocking, indicating no content restrictions. The domain WHOIS data is consistent with the business claims, showing a long-established domain registered via GoDaddy with Cloudflare DNS. Strategic recommendations include enhancing privacy and security transparency, implementing security headers, and providing clear incident response contacts to strengthen trust and compliance.

B

Bilderlings Pay

bilderlings.com

74

Bilderlings Pay is a fintech company established in 2012, offering business accounts with advanced payment card solutions including cashback and integration with Apple Pay and Google Pay. The company targets businesses seeking efficient global payment and banking services. The website is built on WordPress with Elementor, featuring a professional design and moderate performance. Security posture is adequate with HTTPS enabled and domain registration locks in place, but lacks DNSSEC and explicit security policies. Privacy compliance is partial, with a cookie policy and consent mechanism present but no visible privacy policy or terms of service. Overall, the site presents a credible fintech business with room for improvement in transparency and security best practices.

J

JE Consulting

jeanedwards.com

54

Jean Edwards Consulting is a specialized consulting firm established in 2005, focusing on change management and data services primarily for the finance industry and public sector. The company positions itself as a provider of high-quality, flexible, and maintainable solutions, leveraging expertise in management consultancy, data management, technology innovation, and AI & automation. Their market presence is supported by longstanding client relationships and a professional digital footprint. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Slider Revolution, hosted behind Cloudflare DNS and leveraging WP Engine infrastructure. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though additional security headers and policies could enhance the posture. From a security perspective, the site shows a solid baseline with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms indicates room for maturity improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website and business demonstrate a trustworthy and professional presence with moderate technical sophistication and good compliance. Strategic enhancements in security transparency and technical hardening would further strengthen their risk profile.

N

Nordea

nordea.lv

75

Nordea is a leading Nordic universal bank providing a wide range of financial services including personal and business banking, asset management, and investment solutions. The bank targets individuals and corporate clients primarily in the Nordic region, maintaining a strong market position supported by comprehensive corporate governance and investor relations transparency. The website is built on Drupal 10, indicating a modern and maintainable technical infrastructure with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, security headers, and secure login portals, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, the site demonstrates a high level of professionalism and trustworthiness, though the absence of WHOIS data for the domain is unusual and should be further verified to ensure domain legitimacy.

T

Trust Krediet Beheer

tkb.nl

61

Trust Krediet Beheer (TKB) is a well-established Dutch credit management specialist offering a suite of services including credit management software (TRUST IT), debt collection (incasso), outsourcing, and staffing solutions. The company targets businesses seeking to optimize their receivables and improve cash flow. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including client case studies and testimonials, positioning them as a trusted partner in the finance sector. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and performance optimizations such as LiteSpeed Cache. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing, demonstrating a moderate level of digital maturity. Mobile optimization and SEO practices are well implemented, though accessibility could be further enhanced. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes key security headers. Forms use secure POST methods, and no sensitive data exposure or vulnerable libraries were detected. However, the absence of a dedicated security policy or incident response information suggests room for improvement in transparency and preparedness. Overall, the website scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, reflecting a reliable and professional online presence. Strategic enhancements in security policy disclosure and accessibility would further strengthen their position.

BIC Securities is an independent corporate finance advisory firm primarily serving Russia, Ukraine, and the Baltic states. The company focuses on mergers and acquisitions advisory and related corporate finance services, targeting corporate clients engaged in domestic and cross-border equity transactions. The website content reflects a small-sized firm with a clear business focus but limited digital maturity. Technically, the site uses legacy technologies such as jQuery and Google Analytics, with no modern CMS or advanced frameworks detected. The site lacks mobile optimization and accessibility features, and no privacy or cookie policies are present, indicating low privacy compliance. Security posture is weak due to absence of visible security headers and unknown HTTPS status. Overall, the website is functional but basic, with moderate trustworthiness given the lack of contact details and compliance documentation.

D

DTB group

dtb.lv

45

DTB group is a Latvian financial and legal services company specializing in providing financing solutions for individuals and legal entities. Their offerings include mortgage loans, transport financing, overdrafts, credit lines, factoring, refinancing, investment attraction, real estate acquisition, purchase of receivables, and comprehensive legal services. The company positions itself as a conservative and experienced player in the Latvian financial market, collaborating with multiple banks and financial institutions to deliver tailored financial products and legal support. The website content is primarily in Russian, targeting clients in Latvia and surrounding regions. The presence of partner logos from reputable banks enhances their market credibility. Technically, the website is built using Adobe Muse with jQuery 1.8.3 and RequireJS, indicating a static site with limited modern CMS features. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture shows room for improvement, with no explicit security headers detected and use of an outdated jQuery version that may expose vulnerabilities. The site uses HTTPS and AJAX for form submissions but lacks privacy and cookie policies, which impacts compliance. Overall, the security posture is moderate with no detected blocking or WAF interference. The lack of WHOIS data limits domain trust verification, but the website's professional content and partner affiliations suggest legitimacy. Strategic improvements in security headers, library updates, and privacy compliance would enhance trust and reduce risk.

TaxLink Latvia is a professional services firm specializing in tax, audit, accounting, and financial consulting services primarily for businesses with active operations in Latvia. As a member of the international IR Global network, it offers expert solutions with global reach, targeting both companies and private individuals. The company positions itself as a leading international level audit and consulting firm with over 14 years of experience and a broad client base. The website reflects a professional and consistent brand image, showcasing key services such as transfer pricing, tax risk management, and financial consulting. The technical infrastructure of the website is built on modern and widely used technologies including jQuery, Bootstrap, Swiper.js, and Google services such as Maps, Tag Manager, and Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and responsive design. However, some SEO and accessibility features could be improved for better performance and compliance. From a security perspective, the website uses HTTPS and employs standard best practices such as asynchronous loading of analytics scripts. There is no evidence of exposed sensitive data or vulnerable libraries in the provided content. However, security headers are not explicitly detected, and no formal security or incident response policies are published on the site. Privacy and cookie policies are present, indicating some level of compliance with data protection regulations, though GDPR compliance is not explicitly confirmed. Overall, the website presents a trustworthy and professional image suitable for its business domain. The lack of WHOIS data limits the ability to fully verify domain legitimacy, but the content and presentation suggest a legitimate and established business. Strategic recommendations include enhancing security headers, publishing incident response contacts, improving SEO and accessibility, and adding a security.txt file for vulnerability disclosure.