Transportation security reports

Z

Zoomcar

zoomcar.com

58

Zoomcar is a leading self-drive car rental service operating primarily in India, offering a wide range of vehicles with features such as unlimited kilometers, instant booking, and keyless access via their mobile app. The company targets individuals seeking flexible and budget-friendly transportation solutions across multiple Indian cities. The website demonstrates a mature digital presence with modern technologies including Google Analytics, Microsoft Clarity, and RudderStack for analytics and user tracking, alongside performance monitoring tools like Boomerang and Bugsnag. The site is well-optimized for mobile and SEO, with excellent content quality and user experience. Security posture is strong with HTTPS enforced and a Content Security Policy in place, though additional security headers could enhance protection. However, the absence of explicit privacy, cookie, and terms of service policies, as well as missing WHOIS domain registration data, represent gaps in compliance and transparency. Overall, Zoomcar's website reflects a professional and trustworthy business with room for improvement in privacy and security disclosures.

The website lyft.com is currently inaccessible due to a CloudFront 403 error blocking requests, preventing content retrieval and analysis. Lyft is a well-known transportation network company founded in 2007, operating primarily in the United States as a major ride-sharing service provider. The domain is legitimate, registered since 2001 with MarkMonitor Inc., and shows strong domain management practices. However, the lack of accessible website content severely limits the ability to assess technical infrastructure, security posture, privacy compliance, and user experience. The CloudFront blocking indicates possible traffic or configuration issues that should be resolved to enable proper analysis and user access. Security headers and policies cannot be evaluated, and no contact or policy information is visible.

W

WEDOS Internet, a.s.

praguevisitorpass.eu

64

The Prague Visitor Pass website serves as the official platform for purchasing and managing city visitor passes that provide unlimited public transport and discounted access to numerous experiences in Prague. The business targets tourists and visitors seeking convenience and cost savings during their stay. The website is professionally designed with clear navigation, mobile optimization, and integration with a mobile app, reflecting a mature digital presence. Technically, the site is built on ASP.NET WebForms with Kentico CMS, using jQuery and Bootstrap for frontend functionality. While the site performs moderately well, there is room for improvement in accessibility and SEO. Security-wise, the site uses HTTPS and implements CSRF tokens and cookie consent mechanisms, but lacks visible HTTP security headers and explicit vulnerability disclosure policies. WHOIS data indicates the domain is registered with a reputable Czech hosting provider, consistent with the business location and nature. Overall, the site is trustworthy and functional but could benefit from enhanced security hardening and clearer contact information.

D

Dráha národního parku

drahanp.cz

44

Dráha národního parku operates as a specialized regional tourism and transportation information platform focused on the Czech and Saxon Switzerland national parks and surrounding protected areas. The website provides comprehensive travel information including railway routes, bus connections, trip recommendations, ticketing, and timetables, targeting tourists and visitors interested in exploring these natural regions. The business model centers on promoting sustainable travel experiences by train and bus, supported by partnerships with regional transport and tourism organizations. Technically, the website is built on WordPress with common plugins such as LayerSlider, Contact Form 7, and Yoast SEO, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit privacy and incident response policies are absent. Overall, the website is professional and trustworthy, though it would benefit from enhanced privacy documentation and security best practices to improve compliance and user trust.

W

WebActive s.r.o.

tourdefeminin.com

65

Tour de Feminin is an established international women's stage cycling race organized and promoted primarily in the Czech Republic. The event is supported by WebActive s.r.o., which provides the digital platform and content management. The website offers comprehensive race information, historical data, results, and media galleries targeting cycling enthusiasts and participants. The technical infrastructure is built on modern web technologies including jQuery, Bootstrap, and a proprietary CMS (WebJET), delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Strategic improvements in transparency and security documentation are recommended to enhance credibility and compliance.

P

Bezpečné parkování v centru Prahy - Parking Opletalova

parkingopletalova.cz

49

Parking Opletalova is a service provider offering secure parking solutions in the center of Prague. The website targets drivers seeking safe and convenient parking options in a busy urban area. The business model revolves around parking space booking and management, leveraging an e-commerce platform to facilitate reservations. The website is built on WordPress using WooCommerce and the Divi theme, indicating a moderate level of digital maturity with integration of performance optimization tools like WPRocket and multilingual support via Weglot. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS registrant data reduces domain trustworthiness, though the website content and technical setup appear legitimate. Overall, the site presents a functional and user-friendly experience but would benefit from enhanced transparency and security practices.

M

MR.PARKIT

mrparkit.com

71

MR.PARKIT operates an online parking reservation platform focused on the Czech cities of Prague and Brno, offering users the ability to select parking garages on a map and book parking spaces for days or weeks. The business targets drivers seeking convenient, stress-free parking solutions and positions itself as a local service provider with a user-friendly digital presence. The website is professionally designed with good content relevance and clear navigation, supporting a positive user experience. Technically, the site leverages modern technologies including Google Maps API for location services, Cookiebot for consent management, and integrates multiple analytics and advertising platforms such as Google Analytics, Bing Ads, and Facebook Pixel. Hosting is provided by a Czech hosting provider, and the domain is well aged and consistent with the business profile. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in DNSSEC adoption and security headers. Privacy compliance is strong, with a comprehensive cookie policy and GDPR-aligned consent mechanisms. However, the site lacks visible contact information, terms of service, and explicit security policies, which could be enhanced to improve trust and compliance. Overall, MR.PARKIT presents a credible and functional online service with moderate technical maturity and good privacy practices.

R

RODING Mobility GmbH

roding-mobility.de

50

RODING Mobility GmbH is a German-based company specializing in innovative mobility solutions, including powertrain and battery systems, advanced composites, mobility prototypes, and small-series electric vehicle platforms. The company targets automotive, aerospace, and maritime sectors, providing specialized engineering and manufacturing services. Their market position is that of a niche player with expertise in high-voltage systems and composite materials. The website is professionally designed, multilingual, and includes comprehensive privacy and cookie policies with user consent mechanisms. Technically, the site runs on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, Google reCAPTCHA on contact forms, and cookie consent management, although some security headers and incident response information are missing. Overall, the website is trustworthy and well-maintained, supporting the company's business credibility.

T

Triorail Bahnfunk GmbH

triorail.com

30

Triorail Bahnfunk GmbH is a specialized technology company focused on developing and supplying GSM-Rail communication modules, modems, and test equipment primarily for the railway and transportation sectors. The company positions itself as a technological leader with a strong emphasis on robust radio reception and compliance with industry standards such as EIRENE and MORANE. Their product portfolio includes various GSM-R modules, terminals, and test systems, with ongoing development in future FRMCS radio modules and active participation in relevant standardization committees. The website infrastructure is built on WordPress with modern plugins and frameworks such as Yoast SEO, Bootstrap, and Contact Form 7, indicating a mature digital presence. The site is well-optimized for SEO and mobile devices, providing a good user experience with clear navigation and professional design. However, the absence of direct contact emails and phone numbers on the homepage, as well as the lack of a cookie consent mechanism, suggests areas for improvement in user engagement and privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and secure forms but lacks advanced security headers and published security policies or incident response information. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear professional and credible. Overall, the website presents a solid business and technical foundation but would benefit from enhanced transparency in domain registration, improved privacy compliance with cookie consent, and clearer contact information to strengthen trust and security posture.

A

Autosalon Klokočka

klokocka.cz

53

Autosalon Klokočka is a medium-sized authorized automotive dealership and service provider based in the Czech Republic, specializing in brands such as Volkswagen, Audi, ŠKODA, Kia, and SEAT. The company offers a comprehensive range of services including new and used vehicle sales, authorized servicing, financing, leasing, and vehicle buyback. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at automotive customers in the region. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Hotjar, and Ecomail, alongside live chat and reCAPTCHA for user interaction and security. The site is mobile-optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and CAPTCHA on forms, though it lacks some advanced security headers and published incident response information. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness, but the overall business credibility remains high due to the professional presentation and authorized brand partnerships. Strategic improvements in security headers, incident response transparency, and domain registration verification are recommended to enhance trust and compliance.

E

Estonian Maritime Cluster

maritimecluster.ee

40

Estonian Maritime Cluster is a newly established (2024) non-profit organization focused on fostering collaboration, innovation, and growth within Estonia's maritime sector. It serves as a network for maritime professionals, companies, and organizations, aiming to position Estonia as a leading maritime hub in the Baltic Sea region. The website presents a professional and well-structured digital presence built on WordPress, featuring comprehensive contact information and a broad membership base. Technically, the site uses modern web technologies and includes security measures such as HTTPS and Cloudflare Turnstile captcha on forms. However, it lacks critical compliance documents like privacy and cookie policies, and security headers are not implemented, which are areas for improvement. Overall, the domain registration is consistent with the business claims, indicating legitimacy.

B

Baltic Rail AS

balticrail.com

49

Baltic Rail AS is a medium-sized transportation company specializing in container-train operations and intermodal rail services primarily in the Baltic Adriatic Rail Corridor. Established in 2008 and owned by the Rail World Group, it operates container terminals and warehousing facilities in Estonia and Poland, serving key locations such as Wroclaw, Katowice, Ostrava, and Koper. The company targets businesses requiring efficient rail freight and logistics solutions in Central and Eastern Europe. The website reflects a professional and consistent brand image with clear service offerings and active news updates, indicating ongoing operations and market presence. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and employs Google reCAPTCHA v3 for form security. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, some security best practices such as security headers are missing, and no privacy or cookie policies are published, which impacts compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is a notable concern, as it conflicts with the business history claimed and may indicate domain registration issues. Overall, the site is trustworthy but would benefit from improved transparency and security documentation. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, adding a vulnerability disclosure policy, and resolving WHOIS registration inconsistencies to enhance trust and compliance.

A

AMIT Baltic

amit.lv

44

AMIT Baltic operates as a software provider specializing in dealer management systems (DMS) for the automotive industry, primarily targeting auto dealers and related businesses in the Baltic region. Their flagship product, AutoMaster, is positioned as a trusted solution recommended by auto manufacturers and importers, serving a medium-sized market with a focus on resource management and process optimization. The website reflects a professional presence with clear branding and client endorsements from major automotive brands, indicating a solid market position. Technically, the website employs legacy technologies such as jQuery 1.8.2 and bxSlider, alongside Google Analytics for user tracking. While the site is accessible and moderately optimized for performance and SEO, mobile optimization and accessibility are basic. The absence of modern frameworks or CMS suggests a relatively simple technical infrastructure. Hosting and domain registration appear consistent and legitimate, with no blocking or WAF interference detected. From a security perspective, the site lacks visible security headers and uses an outdated JavaScript library, which could expose it to vulnerabilities. There is no evidence of HTTPS enforcement or advanced security policies. Privacy compliance is weak, with no privacy or cookie policies found, and no consent mechanisms for tracking, which poses regulatory risks under GDPR. Contact information is comprehensive and clearly presented, enhancing business credibility. Overall, the website scores moderately well but requires improvements in privacy compliance, security hardening, and modernization of its technical stack to reduce risks and enhance trustworthiness. Strategic recommendations include implementing privacy and cookie policies, upgrading JavaScript libraries, adding security headers, and enforcing HTTPS to strengthen the security posture and regulatory compliance.

A

addCar

addcar.com

55

addCar Rental operates an international online car rental service offering vehicle bookings across Europe, the USA, the Middle East, and other countries. The company targets travelers seeking affordable and reliable car rentals with services including airport pickup, insurance protection, flexible cancellations, and 24/7 support. The website reflects a medium-sized business with a consistent brand presence and recognition such as the 2024 booking.com Traveller Review Award. Technically, the site uses modern frameworks like Angular and Bootstrap, integrates Google Analytics and Tag Manager for tracking, and provides a responsive, well-structured user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response information. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website and business presence. Overall, the site scores well on content quality and business credibility but should address WHOIS transparency and security header implementation to improve trust and compliance.

V

Vroon Group

vroon.nl

67

Vroon Group is a well-established international shipping company based in the Netherlands, specializing in vessel management and various shipping segments including offshore support, product tankers, and livestock carriers. The company maintains a professional and modern web presence with clear navigation and multimedia content to engage its target audience of shipping industry professionals and clients. The website demonstrates a good level of digital maturity with the use of modern JavaScript frameworks, video integration, and a comprehensive cookie consent mechanism compliant with GDPR standards. Security posture is strong, with HTTPS enforced and appropriate security headers in place, although explicit security and incident response policies are not publicly visible. Overall, the site reflects a trustworthy and credible business with room for improvement in transparency around terms of service and incident response. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Stratum Traffic Engineering GmbH is a specialized consulting company in the Intelligent Transport Systems (ITS) and traffic engineering sector, offering services such as traffic analysis, road safety, project management, and business development for ITS SMEs. The company targets organizations seeking expertise in traffic audits, modeling, and tolling systems, positioning itself as a niche ITS SME with international market development capabilities. The website reflects a professional and consistent brand image with clear service offerings and contact information, supported by social media presence on Facebook and LinkedIn. Technically, the site is built on WordPress using popular plugins and themes, delivering moderate performance and good mobile optimization. However, the site lacks advanced security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The domain registration is consistent and transparent, with no privacy protection, supporting the legitimacy of the business. Overall, the website is functional and credible but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

I

International Transport Workers' Federation (ITF)

itfafrica.org

59

The International Transport Workers' Federation (ITF) operates a comprehensive website focused on its Africa regional activities, advocating for transport workers' rights and union coordination across the continent. The site demonstrates a mature digital presence with multilingual support, modern CMS technology (Drupal 10), and integration of analytics and translation services. Contact information is clearly provided with physical offices in Nairobi and Abidjan, supporting its global federation status. However, the absence of a visible privacy policy and terms of service pages, along with incomplete WHOIS data, slightly detracts from its overall trustworthiness. Security posture is adequate with HTTPS and anonymized analytics but lacks explicit security headers and vulnerability disclosure mechanisms. Overall, the website is professional, content-rich, and well-structured, serving its target audience effectively while leaving room for improvements in privacy and security transparency.

S

SEAT Finland

seat.fi

68

SEAT Finland operates as the official Finnish website for the SEAT automotive brand, focusing on hybrid and SUV vehicles. The site offers comprehensive information on vehicle models, leasing, financing, aftersales services, and dealer contacts, targeting Finnish consumers interested in modern automotive solutions. The website is well-branded, consistent, and localized for the Finnish market, reflecting a mature business presence backed by the Volkswagen Group. Technically, the site is built on Adobe Experience Manager with modern frameworks like Bootstrap and integrates advanced analytics and accessibility tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, although explicit security policies and incident response information are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations, making it a reliable digital asset for SEAT's Finnish operations.

S

Startax Finland Oy

startax.net

55

Startax Finland Oy is a well-established Finnish company specializing in the wholesale import and distribution of electrical spare parts for passenger and commercial vehicles. Founded in 2000, it holds a leading market position in Finland and serves automotive wholesalers and repair garages. The website reflects a professional and consistent brand image, offering multilingual support and electronic catalog access for customers. The business model focuses on B2B wholesale distribution with additional services such as garage account registrations. Technically, the website employs a modern yet stable technology stack including Bootstrap 3, jQuery, and Magnific Popup, with Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and responsive design. Hosting appears to be Finnish-based, aligning with the company's geographic focus. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, but lacks DNSSEC and explicit security headers. The login form includes CSRF protection and basic input validation. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and DNSSEC are recommended to enhance protection. Overall, the website and domain registration data indicate a legitimate and credible business with a solid digital presence. The security posture is adequate but could benefit from enhancements. Privacy compliance is basic but present, with a privacy policy and cookie consent implemented. Strategic recommendations include strengthening security headers, enabling DNSSEC, and expanding transparency around security policies and incident response.

Bolt Technology OÜ operates a leading European mobility superservice platform offering ride-hailing, food and grocery delivery, car and scooter rentals, and business travel solutions. The company is well-positioned in the transportation and technology sectors with a large global footprint across 600+ cities and 50+ countries. Their digital presence is robust, leveraging modern web technologies such as Next.js and React, with strong SEO, mobile optimization, and accessibility features. The website demonstrates a high level of professionalism and branding consistency, supported by comprehensive privacy and cookie policies aligned with GDPR requirements. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, Bolt's website and digital infrastructure reflect a mature and trustworthy business with a strong market presence and good compliance practices.

S

Scania

scania.ee

73

Scania is a globally recognized enterprise specializing in the manufacturing and sales of trucks, buses, and related services, with a strong presence in Estonia. The website reflects a mature digital infrastructure built on Adobe Experience Manager, featuring professional design, clear navigation, and mobile optimization. Privacy compliance is well addressed through OneTrust cookie consent mechanisms and comprehensive privacy policies. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. The absence of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy given the brand consistency and professional presentation. Overall, the site demonstrates a robust business and technical foundation with room for enhanced transparency in security disclosures.

M

Modera

modera.com

50

Modera is a medium-sized B2B software company specializing in automotive retail solutions, including CRM, e-commerce, and digital showroom tools. Established in 2003, it serves manufacturers, importers, and dealers across multiple countries with a strong market presence and reputable client base. The website is professionally designed using WordPress and Elementor, with modern web technologies and SEO optimizations. Security posture is good with HTTPS and transfer protection on the domain, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic with a cookie consent mechanism but lacks explicit privacy and terms policies. Overall, the site is trustworthy and business credible but should enhance privacy and security transparency.

E

ESL Shipping

eslshipping.com

51

ESL Shipping is a leading shipping company specializing in dry bulk cargo transportation in the Baltic region, with a strong emphasis on sustainable and year-round operations even under challenging weather conditions. The company operates a fleet of ice-class vessels and is a subsidiary of Aspo Plc, indicating a solid corporate backing. Their services include geared fleet shipping, transshipments at sea, Arctic shipments, and innovative solutions like Virtual Arrival to reduce emissions. The website reflects a mature digital presence built on the HubSpot CMS platform, incorporating modern web technologies and good mobile optimization. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and the jQuery version updated. The absence of WHOIS registrant data slightly reduces trust but is mitigated by the professional content and clear business affiliations. Overall, ESL Shipping presents a credible, professional, and trustworthy online presence aligned with its business objectives.

S

Semel Oy

semel.fi

66

Semel Oy is a Finnish company established in 1971, specializing in providing taxi meters and order management systems for taxi companies, primarily targeting the Nordic market. The company positions itself as one of the leading providers in the personnel transport sector in the region. The website reflects a professional and consistent brand image, with content tailored to its B2B audience of taxi operators. Technically, the site is built on WordPress using the Elementor framework, hosted behind Cloudflare DNS services, and incorporates Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses Cloudflare nameservers but lacks DNSSEC and some recommended security headers, which could be enhanced to improve resilience against attacks. Privacy compliance is basic, with no explicit privacy or cookie policies detected, which is an area for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

S

Silberauto AS

silberauto.ee

53

Silberauto AS is an established Estonian parent company operating in the automotive and transportation sectors, with a focus on autonomous vehicle technology, vehicle construction, and automotive sales software. The company has a history dating back to 1993 and manages several subsidiaries specializing in various automotive-related fields. The website reflects a medium-sized enterprise with a clear business model centered on innovation in automotive technology and related services. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Weglot for multilingual support. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks some security headers and formal security policies. Privacy compliance is limited, with no privacy policy or cookie consent mechanism explicitly implemented. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

R

Respo Haagised AS

respo.ee

46

Respo Haagised AS is a well-established Estonian company founded in 1990, specializing in the manufacturing and sale of trailers, accessories, and spare parts. It holds a market leader position in Estonia and is a significant player in the Baltic and Scandinavian regions. The company operates a modern e-commerce platform with multi-language support and offers innovative services such as 24/7 self-service trailer sales points. The website reflects a mature digital infrastructure built on Magento, integrating advanced tracking and marketing tools like Google Analytics, Facebook Pixel, and Hotjar. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, user-friendly, and trustworthy, supporting the company's business credibility and market presence.

M

Mipro Oy

mipro.fi

66

Mipro Oy is a Finnish specialist company focused on railway and industrial systems, with a history dating back to 1980. The company provides advanced safety and operational solutions for railway traffic, metro systems, water and energy supply, and industrial sectors. With headquarters in Mikkeli and offices in Espoo, Oulu, and Tallinn, Mipro serves a broad international client base including government agencies and utility companies. The website reflects a mature business with clear market positioning and a strong emphasis on safety and technology expertise. Technically, the site is built on WordPress with modern plugins and includes security measures such as HTTPS and hCaptcha for form protection. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Security posture is good but could be enhanced by adding security headers and publishing explicit security policies. Overall, the website and domain registration data indicate a legitimate, professional, and trustworthy business presence.

C

Cryo Transport

cryo-transport.com

55

Cryo Transport is a specialized courier service focused on the transport of cryopreserved human biological materials such as sperm, eggs, embryos, and stem cells from clinics or cryobanks to IVF clinics. The company operates in a niche segment of medical logistics, serving fertility and reproductive medicine providers. The website is built on WordPress and employs modern digital tools including Cookiebot for cookie consent, Google Tag Manager for analytics, and Tawk.to for live chat support. The technical infrastructure is standard for small to medium-sized service providers, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is supported by cookie consent mechanisms and links to third-party privacy policies, but the site lacks an explicit privacy policy and terms of service pages. Overall, the website presents a professional and trustworthy image consistent with its business focus.

F

Fort Aero

fort.aero

51

Fort Aero is a specialized aviation service provider focused on corporate jet management, sales, acquisition, maintenance, and charter services. Established since 1997, the company positions itself as a trusted and experienced player in the business aviation sector, primarily serving corporate jet owners and operators. The website reflects a professional and consistent brand image with comprehensive service descriptions and multiple contact channels. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and secure forms, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable due to privacy protection, which is common for this business type but slightly reduces trust. Overall, Fort Aero presents a credible and professional online presence with room for improvement in privacy and security transparency.

H

Hansabuss AS

hansabuss.ee

41

Hansabuss AS is an established Estonian transportation company specializing in bus services including charter, line routes, employee transport, school transport, and city tours. With over 30 years of experience, the company positions itself as a reliable and caring bus partner in Estonia and neighboring regions. The website reflects a mature digital presence with multilingual support and active social media engagement. Technically, the site is built on WordPress with modern plugins and SEO tools, offering a good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and spam protection on forms, though explicit security policies and incident response contacts are not published. Privacy compliance is basic with cookie consent mechanisms and privacy policy presence, but lacks detailed GDPR documentation or data protection officer contact. Overall, the website and domain registration data indicate a legitimate and professional business with moderate to high trustworthiness.

A

AS Eesti Raudtee

evr.ee

69

AS Eesti Raudtee is a state-owned enterprise responsible for the management, maintenance, and administration of Estonia's railway infrastructure. The company plays a critical role in ensuring smooth, efficient, and safe railway operations across the country. Their website reflects a professional and consistent brand image, targeting a broad audience including business clients, passengers, and potential employees. The site offers key services such as infrastructure information, project updates, job vacancies, and customer portals. Technically, the website is built on Joomla CMS with modern frontend technologies and integrates Google Analytics and Adform for analytics and advertising, all managed with a robust cookie consent mechanism. Security-wise, the site enforces HTTPS, uses bot protection cookies, and shows no signs of exposed sensitive data or vulnerabilities. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the website is well-structured, performant, and trustworthy, supporting the company's position as a key national transportation infrastructure operator.

V

Via 3L

via3l.com

40

Via 3L is a Baltic-based third-party logistics company specializing in warehouse logistics, central warehousing, and international transportation services. Positioned as a leading logistics provider in the Baltic region, the company targets businesses requiring efficient supply chain and transport solutions. The website reflects a professional digital presence with clear branding and relevant service descriptions. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO readiness. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, with cookie consent implemented but lacking explicit privacy and terms of service pages. Overall, the website demonstrates moderate risk with room for enhanced compliance and security maturity.

O

Operail OÜ

evrcargo.ee

54

Operail OÜ is an Estonian-based international railway company specializing in freight transport, rolling stock rental, maintenance, repair, and locomotive construction. With a history tied to over 150 years of railway operations in Estonia, the company serves import, export, domestic, and transit freight markets, positioning itself as a reliable and operationally efficient partner. The website reflects a medium-sized enterprise with a clear focus on transportation services within Estonia and neighboring regions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credible market presence.

G

GoSwift

goswift.eu

63

GoSwift is a technology company specializing in digital transportation management solutions aimed at optimizing logistics and freight operations. The company offers services such as scheduling arrivals, queue management, automated access, and yard management, targeting logistics operators and industrial clients. The website demonstrates a professional digital presence with multilingual support and trusted client logos, indicating a credible market position in the transportation sector. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and Google Tag Manager for analytics. Security posture is good with HTTPS enforced, though security headers and explicit privacy policies are lacking. Overall, the site is well-structured and user-friendly but could improve transparency and compliance documentation. Strategic recommendations include adding privacy and terms policies, enhancing security headers, and providing clear contact and incident response information.

R

Reaalprojekt OÜ

reaalprojekt.ee

43

Reaalprojekt OÜ is a well-established infrastructure design and engineering company based in Estonia with over 20 years of experience. The company offers a broad range of services including project management, geodesy, and geotechnical investigations, serving clients primarily in Estonia and the Baltic region with subsidiaries in Latvia, Lithuania, and Sweden. Their website reflects a professional and consistent brand image, showcasing a strong portfolio and certifications such as ISO, which enhance their credibility. Technically, the site is built on WordPress with modern plugins and supports multilingual content, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the website demonstrates a mature digital presence aligned with the company's business stature and regional market position.

N

Nordic Aviation

nordicavi.com

60

Nordic Aviation is a small aviation service provider specializing in aircraft wetlease (ACMI), damplease, charter, and consultancy services primarily targeting airlines and lessors. The company operates from Latvia and offers aircraft acquisition and consultancy to optimize airline performance. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and editor elements, indicating a moderate level of digital maturity. The site is moderately optimized for mobile devices and SEO but lacks advanced accessibility features and comprehensive privacy compliance. Security posture is basic with HTTPS usage implied but no visible security headers or incident response information. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website provides basic business information but lacks critical compliance and security disclosures, suggesting a need for enhanced transparency and security controls.

K

Kim Johansen International Transport A/S

kim-johansen.com

59

Kim Johansen International Transport A/S is a well-established European transportation company specializing in the delivery of time-sensitive goods. With over 45 years of experience, the company emphasizes efficient, secure, and environmentally responsible logistics solutions. Their market position is strong within the European transport sector, targeting businesses requiring reliable and precise delivery services. The website reflects a professional image with clear service offerings and contact information, supporting their credibility. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and Revolution Slider, hosted on Microsoft Azure DNS infrastructure. The site is mobile-optimized and demonstrates good SEO practices. Cookie consent is managed via Cookiebot, indicating attention to privacy compliance. However, no explicit CMS or advanced frameworks are detected, and performance is moderate. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no public security policy or incident response information, which could be improved. The domain WHOIS data is consistent and supports legitimacy, with a long registration period and matching business claims. Overall, the website scores well in content quality, business credibility, and privacy compliance, with moderate technical and security posture scores. Strategic improvements in DNS security, security headers, and public security policies would enhance trust and resilience.

N

Nordic Aviation Group

nordica.ee

44

Nordic Aviation Group is a medium-sized airline group based in Estonia, operating subsidiaries Nordica and Xfly. The company provides air transportation services and aircraft leasing. Recently, the group filed for bankruptcy, ceasing daily operations and initiating bankruptcy proceedings. The website serves as a corporate communication channel, providing press releases and company information. The technical infrastructure is based on WordPress with modern web technologies such as Bootstrap and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are missing. Privacy compliance is basic, with no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

D

Destia

destia.fi

64

Destia is a Finnish infrastructure company specializing in the planning, construction, and maintenance of critical infrastructure throughout its lifecycle. As a part of the Colas Group, Destia holds a strong market position in the transportation and energy sectors within Finland. The website reflects a mature digital presence with professional design, clear branding, and comprehensive cookie consent mechanisms, indicating a commitment to privacy compliance. Technically, the site is built on WordPress with modern technologies such as Google Tag Manager and Cookiebot, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. Overall, Destia's website demonstrates a high level of professionalism and trustworthiness, supporting its business credibility in the infrastructure sector.

P

Powerfleet (formerly Fleet Complete)

fleetcomplete.com

66

Powerfleet (formerly Fleet Complete) is a leading provider of connected fleet management and asset tracking solutions, targeting businesses ranging from small-medium enterprises to large Fortune 500 companies. The company offers a comprehensive suite of products including fleet management software, AI dash cameras, asset trackers, and telematics integrations, positioning itself as a key player in the transportation and logistics sector. The website reflects a mature digital presence with consistent branding and a focus on data intelligence to optimize fleet operations. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Google Tag Manager, LinkedIn Insight, and 6sense. The site is mobile-optimized, SEO-friendly, and includes privacy and cookie consent mechanisms, indicating a good level of digital maturity and compliance with privacy regulations like GDPR. From a security perspective, the site enforces HTTPS and includes basic security headers, but lacks some advanced headers and a public security or incident response policy. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data transparency slightly reduces trust but does not outweigh the professional and active nature of the website. Overall, the risk profile is moderate to low with recommendations to enhance security headers, publish explicit security policies, and consider vulnerability disclosure mechanisms to further strengthen trust and compliance.

S

Spliethoff

spliethoff.com

76

Spliethoff is a well-established Dutch shipping company specializing in worldwide dry cargo ocean transport. With a fleet of over 50 modern vessels and a history dating back to 1921, the company positions itself as a reliable and high-quality partner in the maritime transport sector. Their website reflects a professional and comprehensive digital presence, targeting businesses requiring specialized cargo shipping services across various market segments including bulk cargo, containers, metals, and project cargo. Technically, the website employs modern frontend technologies such as Tailwind CSS, Alpine.js, and Swiper JS, alongside Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile responsive, well-structured, and optimized for SEO, providing a good user experience. Privacy compliance is evident through a cookie consent banner and a detailed privacy policy, indicating adherence to GDPR standards. From a security perspective, the site uses HTTPS and implements secure forms with anti-forgery tokens. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which could enhance protection. The absence of WHOIS data transparency reduces domain trust slightly, though the website content and business information strongly support legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and WHOIS transparency would further enhance trust and security posture.

B

Boomerang

boomerang.ee

47

Boomerang is a well-established third-party logistics provider specializing in eCommerce fulfillment and returns management, primarily serving the Nordic region and global markets. The company positions itself as the largest return handling operator in the Nordics, offering tailored and flexible logistics solutions to online webshops. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress with Elementor, leveraging modern technologies such as Usercentrics for cookie consent and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security-wise, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies, which are areas for improvement. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

R

Roadplan

roadplan.ee

48

Roadplan is an Estonian company specializing in road project design, outdoor space projects, and consulting services. Founded in 2013, it positions itself as a leading road project designer in Estonia, targeting clients who require sustainable and innovative solutions for their outdoor environments. The website content is primarily in Estonian and focuses on communicating the company's expertise and service offerings. Technically, the website is built on WordPress and uses modern web technologies including Google Fonts, Google Analytics, Google Tag Manager, and reCAPTCHA for form security. The site is hosted by Zone Media OÜ, a known Estonian hosting provider. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the website uses HTTPS with a valid SSL certificate and employs reCAPTCHA to protect forms. However, it lacks important security headers and does not provide explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional and functional but lacks comprehensive privacy and cookie policies, explicit contact information, and detailed security disclosures. These gaps reduce its privacy compliance and slightly impact trustworthiness. Strategic improvements in these areas would enhance the site's security posture and user trust.

J

JAS Worldwide Inc.

jas.com

71

JAS Worldwide Inc. is a well-established global freight forwarding and logistics company offering a comprehensive range of services including airfreight, ocean freight, ground freight, customs brokerage, cargo insurance, contract logistics, and green solutions. The company positions itself as a leader in international shipping and supply chain support with over four decades of industry experience. Their market presence is supported by partnerships such as with Lufthansa Cargo and a network of subsidiaries including JAS Jet Air Service S.p.A., Multilogistics S.p.A., and Setoa S.p.A. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site demonstrates good performance, excellent mobile optimization, and solid SEO practices. Accessibility is good, though there is room for further enhancement. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers. It implements a GDPR-compliant cookie consent mechanism and maintains privacy and cookie policies. However, there is no explicit security policy or incident response contact information visible, and no vulnerability disclosure or security.txt file is present. The absence of WHOIS data for the domain is a notable concern, though the website content and branding strongly indicate legitimacy. Overall, the website presents a professional, trustworthy, and secure digital presence for JAS Worldwide, with recommendations to improve transparency around security policies and domain registration details to further enhance trust and compliance.

R

RESCUE®

rescuefirst.com

64

RESCUE® is a specialized roadside assistance provider operating primarily in Bengaluru, India, offering 24/7 vehicle breakdown services including puncture repair, battery jumpstart, towing, emergency fuel delivery, and key recovery. The company positions itself as a premier and reliable service provider with OEM trained mechanics and a fleet of state-of-the-art tow trucks, servicing over 100,000 vehicles since 2011. Their business model focuses on rapid dispatch of mechanics and tow trucks within 30 minutes to customer locations, targeting vehicle owners in need of emergency roadside help. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and Google reCAPTCHA for analytics and security. The site is mobile optimized with good SEO practices and moderate performance. Accessibility is basic but functional. The hosting and infrastructure appear stable and professionally managed. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Forms are protected with reCAPTCHA, and no sensitive data is exposed in the HTML. However, the site lacks a visible cookie consent mechanism and formal security or incident response policies, which are areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, RESCUE® demonstrates a solid business presence with a trustworthy domain registration and consistent branding. The website quality is good, supporting the business credibility. Strategic recommendations include implementing cookie consent for privacy compliance, publishing security policies, and enhancing accessibility to further strengthen trust and compliance.

B

BCS Auto - Baltic Car Solutions

bcsauto.ee

48

BCS Auto - Baltic Car Solutions is a well-established Estonian company specializing in long-term car rental, vehicle sales, commission sales, and automotive services since 2007. The company targets both private individuals and businesses seeking flexible and cost-effective vehicle solutions. Their market position is strong within Estonia, supported by recognition from the Transport Authority and positive customer testimonials. The website is built on a modern WordPress platform with WooCommerce and Elementor, integrating SEO and marketing tools such as Yoast SEO, Google Analytics, Microsoft Clarity, and MailerLite. Social media presence on Facebook and Instagram further supports their brand visibility. Security posture is adequate with HTTPS and no exposed sensitive data, though improvements in security headers and explicit security policies are recommended. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the website is professional, user-friendly, and trustworthy, reflecting a medium-sized transportation business with a solid digital presence.

N

Nordcrewing Group OÜ

nordcrewing.com

57

Nordcrewing Group OÜ is a specialized maritime recruitment and crew management company operating primarily in Scandinavia and Europe. Founded in 2018, the company offers qualified seagoing personnel and maritime specialists to shipowners, shipyards, and offshore operators. Their business model leverages a proprietary Applicant Tracking and Crew Management System to optimize recruitment and crew management processes, positioning them as a trusted partner in the maritime sector. The company also provides niche services such as Ice Advisory and Deep Sea Pilotage, enhancing their market differentiation. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, multilingual support, and user interaction. The site demonstrates good mobile optimization, clear navigation, and professional design. Analytics and marketing tools such as Google Analytics and Google Tag Manager are implemented with a cookie consent mechanism, reflecting a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status to protect domain ownership. However, DNSSEC is not enabled, and there is no Content Security Policy or security.txt file, indicating areas for improvement. Privacy compliance is addressed with a privacy policy and cookie consent, but incident response and security policy details are absent. Overall, Nordcrewing presents a credible and professional online presence with solid business and technical foundations. Strategic enhancements in DNS security, security headers, and incident response transparency would further strengthen their security posture and trustworthiness.

A

Audi Eesti

audi.ee

62

Audi Eesti operates as the official online presence for Audi's premium vehicle offerings in Estonia, providing detailed information on new and used cars, accessories, and dealer locations. The website reflects a strong market position as a national distributor for Audi, targeting Estonian consumers interested in premium automobiles. The technical infrastructure leverages modern web technologies including Adobe Experience Manager Headless CMS, Google Tag Manager, and Facebook Pixel, ensuring a robust digital experience with good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit privacy policies and incident response contacts are absent, representing areas for improvement. Overall, the site is professional and trustworthy, but enhancing privacy compliance and transparency would further strengthen user confidence.

A

Ahola Transport

aholatransport.com

56

Ahola Transport is a well-established Finnish logistics and transport company with over 70 years of experience, operating primarily in the Nordic and Central/Eastern European markets. The company offers a range of services including road transports, green kilometers initiatives, and custom logistics solutions, emphasizing eco-efficiency and digital innovation. The website reflects a professional and modern digital presence with multilingual support and comprehensive service information. Technically, the site is built on WordPress with modern plugins and integrations such as Gravity Forms, Google reCAPTCHA, and Google Tag Manager, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and anti-bot measures on forms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and certifications like AEO-status. Strategic recommendations include enhancing security headers, publishing a formal security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

I

Intership Navigation Co. Ltd

intership-cyprus.com

49

Intership Navigation Co. Ltd operates as a specialized provider in the maritime transportation sector, focusing on ship and crew management services. Their offerings include technical management, crewing and training, commercial management, accounting, insurance, travel, catering, and sustainable management. The company positions itself as a leader with a commitment to safety, quality, and ESG principles, targeting shipowners and maritime stakeholders. The website reflects a medium-sized enterprise with consistent branding and trust signals such as certifications and active social media presence. Technically, the website is built on TYPO3 CMS, leveraging modern web standards including HTML5, CSS3, and JavaScript. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no blocking or WAF detected, indicating reliable hosting and infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not publish explicit security or incident response policies. No cookie consent mechanism is present, which impacts privacy compliance. The WHOIS data is missing, which raises concerns about domain registration transparency and legitimacy, although the website content and certifications suggest a legitimate business. Overall, the website is professional and functional with room for improvement in privacy compliance, security best practices, and domain registration transparency. Strategic enhancements in these areas would strengthen trust and security posture.