Security Directory

L

Lauma

laumafabrics.com

49

Lauma is a well-established European manufacturer specializing in textile and medical materials, with a strong market position as a leader in these sectors. The company emphasizes innovation and environmental responsibility, holding certifications such as Oeko-Tex, REACH, and ISO. Their business model focuses on manufacturing and distributing high-quality fabrics and medical textile products, serving a broad European audience. The website reflects this with detailed product information and a consistent brand presence. Technically, the website is built on a modern WordPress platform with WooCommerce and Elementor, ensuring a good user experience and mobile optimization. The site uses common plugins for forms and e-commerce, with moderate performance and good SEO practices. However, some technical improvements could enhance security and privacy compliance. From a security perspective, the site enforces HTTPS and uses domain status protections but lacks DNSSEC and important security headers. There is no published security policy or incident response contact, and no vulnerability disclosure mechanism is present. Privacy compliance is partial, with a privacy policy but no cookie consent mechanism. Overall, the website is professional and trustworthy but would benefit from enhanced security measures and privacy compliance to reduce risk and improve user trust.

RTU is a well-established company specializing in the manufacture and supply of ready mixed concrete, decorative concrete, mortars, plaster, screed, and related construction materials primarily serving Northern Ireland and the UK market. The company positions itself as a market leader with a skilled workforce and a comprehensive product range tailored for both commercial and domestic customers. Their website reflects a professional and consistent brand image with clear navigation and detailed product information. Technically, the website employs a modern but stable technology stack including jQuery, Bootstrap, and Slick Carousel, ensuring good mobile responsiveness and user experience. The site is served over HTTPS with no visible security vulnerabilities or exposed sensitive data. However, security headers are not detected, and there is no explicit incident response or vulnerability disclosure information, which could be improved. From a security and compliance perspective, the site demonstrates good practices such as HTTPS enforcement and CSRF token usage but lacks cookie consent mechanisms and detailed security policies. Certifications like ISO 9001 and ISO 14001 are prominently displayed, enhancing trust. The WHOIS lookup failed due to an incorrect query format, but the domain appears legitimate based on website content and external signals. Overall, RTU's website is professional, secure, and credible with room for improvement in security headers, privacy consent, and incident response transparency.

K

Kultūras centrs Rīva

riva.lv

45

Kultūras centrs Rīva is a small non-profit cultural center based in Riga, Latvia, dedicated to the personal and spiritual development of girls, women, and students. The organization offers a variety of cultural events, workshops, spiritual retreats, and community activities aimed at fostering growth and engagement within its target audience. The website reflects a focused mission with clear navigation and regularly updated content, including news and event announcements. Social media integration on Facebook, Instagram, and YouTube supports community outreach and engagement. Technically, the website is built on WordPress using the Enfold theme and Avia framework, leveraging modern web technologies such as jQuery and MediaElement.js. The site is mobile optimized and demonstrates good performance and SEO practices. Security measures include HTTPS enforcement and the use of a security plugin to obscure WordPress metadata, though some security headers are missing. Analytics are implemented via WP Statistics, indicating moderate user tracking. From a security perspective, the site shows a reasonable posture with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit privacy and cookie policies, security.txt, and incident response information indicates areas for compliance and transparency improvement. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the site appears legitimate and professionally maintained but would benefit from enhanced privacy and security disclosures. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, adding a security.txt file for vulnerability disclosure, and improving accessibility features. These steps will enhance user trust, regulatory compliance, and overall security posture.

G

GrECo Latvia, SIA

iizi.lv

50

GrECo Latvia, SIA operates as an insurance brokerage and risk management service provider based in Latvia. The company offers a broad portfolio of insurance products tailored for both private individuals and business clients, including accident insurance, cyber risk insurance, professional liability, and sector-specific insurance solutions. The website branding and content position the company as a trusted local player with a family-friendly workplace reputation. Technically, the website is built on WordPress 6.4.3, utilizing common libraries such as jQuery and Google Tag Manager for analytics and marketing. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response information. WHOIS data could not be retrieved due to query limits, but the website content and contact details support legitimacy. Overall, the site demonstrates a moderate to good level of digital maturity and business credibility.

S

SIA WSP

wsp.lv

39

SIA WSP is a Latvian company specializing in warehouse, office, archive, and workspace equipment. Their offerings include metal shelving systems, plastic containers, pallet racks, transport equipment, and custom storage solutions. The company emphasizes quality, experience, and customer service, backed by certifications such as GS, RAL-RG 614, DIN EN ISO 9001:2008, and DIN 18800. Their target market is primarily businesses requiring storage and workspace optimization solutions in Latvia and nearby regions. The website is built on WordPress and uses common web technologies including jQuery and Google Analytics, with a basic cookie consent mechanism in place.

M

maison-trevier

maison-trevier.com

58

Maison-trevier.com is a French-language business media website providing content across various professional categories including business news, training, legal information, management, marketing, and services. The site targets French-speaking business professionals and entrepreneurs seeking informational resources and insights. The business model centers on content publishing with a focus on professional development and industry updates. The website is relatively new, founded in 2023, and positions itself as a niche media provider in the French market. Technically, the website is built on WordPress 6.8 using popular plugins such as Yoast SEO and WP Rocket for SEO and performance optimization. It employs Oxygen Builder for layout and Cloudflare DNS for domain resolution. The site demonstrates moderate performance and good mobile optimization, with structured data implemented for SEO benefits. Accessibility features are basic but present. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain status clientTransferProhibited to prevent unauthorized transfers. However, it lacks DNSSEC and does not implement common security headers such as Content-Security-Policy or X-Frame-Options. There is no visible cookie consent mechanism or explicit security policy, and no incident response contacts are provided. These gaps suggest room for improvement in security posture and privacy compliance. Overall, maison-trevier.com is a professionally designed and content-rich website with a clear business focus but would benefit from enhanced security measures, privacy compliance improvements, and more transparent contact information to increase trust and compliance with regulations.

AGroup is a technology company specializing in Human Capital Management solutions, offering a comprehensive suite of HR digitalization services and software modules including payroll, core HR, time and attendance, performance evaluations, recruitment, and more. The company targets businesses primarily in Latvia, Estonia, Lithuania, and Poland, positioning itself as a regional leader in HR management technology. The website is built on WordPress CMS with modern technologies and provides a professional, content-rich user experience. Security posture is solid with HTTPS and reCAPTCHA implemented, though some security headers and explicit privacy policies are missing. Tracking is done via Google Analytics and Facebook Pixel (commented out), with cookie consent managed by CookieYes. WHOIS data is unavailable due to query limits, limiting full domain trust assessment. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

H

HELSINKI COMMISSION

helcom.fi

76

HELCOM is a well-established intergovernmental organization focused on the protection and sustainable management of the Baltic Sea environment. It serves as a bridge between policy and science, providing environmental assessments, policy coordination, and stakeholder engagement for the Baltic Sea region countries. The organization enjoys a strong market position as a regional authority with a history dating back to 1991. The website reflects this maturity with comprehensive content, clear navigation, and a professional design tailored to policy makers, scientists, and environmental stakeholders. Technically, the website is built on WordPress with modern plugins and libraries, including GDPR compliance tools and social sharing features. The infrastructure supports good mobile optimization, accessibility, and SEO practices, although hosting details are not explicitly identified. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs standard security best practices, including cookie consent mechanisms and no visible vulnerabilities or exposed sensitive data. However, there is an opportunity to enhance security posture by implementing a security.txt file and publishing incident response policies. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website and domain exhibit high legitimacy and trustworthiness, supported by consistent WHOIS data and transparent organizational information. The risk profile is low, with no critical security issues detected. Strategic recommendations include enhancing security headers, formalizing vulnerability disclosure, and continuous monitoring of CMS and plugin updates to maintain security and compliance.

P

Pronto Rental

prontorental.com

46

Pronto Rental is a Colombian-based company specializing in the rental of heavy machinery and equipment, serving multiple sectors such as construction, industrial assembly, logistics, urban services, and events. Established in 2015, it positions itself as the largest machinery rental company in Colombia, offering a wide range of equipment and services tailored to client needs. The website reflects a professional and consistent brand image with clear contact information and trust certifications like Great Place To Work and Socotec. Technically, the website is built on WordPress using Elementor and integrates modern tools such as Google Tag Manager and Google Analytics. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, HTTPS is enforced, but the absence of DNSSEC and security headers indicates potential areas for enhancement. Privacy compliance is basic, with privacy and terms policies present but lacking cookie consent mechanisms. Overall, the security posture is adequate but could benefit from implementing additional security headers and formal incident response policies. The domain registration is consistent with the business claims, enhancing trustworthiness. Strategic improvements in privacy compliance and security practices would further strengthen the company's digital maturity and customer trust.

R

Ramirent Baltic AS Vilniaus Filialas

ramirent.lt

63

Ramirent Baltic AS Vilniaus Filialas operates the Lithuanian branch of Ramirent, the largest construction equipment and formwork rental company in the Baltic states. The company provides a broad portfolio of rental equipment including heavy machinery, hand tools, garden maintenance tools, scaffolding, portable toilets, and office cabins. Their services are supported by professional consultation, online reservation capabilities, and delivery options, targeting construction companies and individual customers in Lithuania. The website reflects a mature digital presence with a WordPress and WooCommerce infrastructure, integrated analytics, and GDPR-compliant cookie management. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data limits domain trust verification, but the company's certifications and memberships bolster credibility. Overall, Ramirent Lithuania presents a professional and trustworthy online presence aligned with its market leadership in equipment rental.

R

Ramirent Baltic AS Rīgas filiāle

ramirent.lv

65

Ramirent Baltic AS Rīgas filiāle operates the Latvian branch of Ramirent, a leading equipment rental company in the Baltic region. The company offers a broad portfolio of construction and garden equipment rental services, supported by technical assistance and risk insurance solutions. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to both corporate and private customers. Technically, the site is built on WordPress with WooCommerce, integrating modern analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and business credibility, though WHOIS data is unavailable due to query limits, limiting domain trust verification.

T

The National Outdoor Expo

nationaloutdoorexpo.com

69

The National Outdoor Expo is a well-established event organizer focused on outdoor community meet-ups, featuring inspirational speakers, exhibitors, and interactive features. The website reflects a professional and consistent brand presence, targeting outdoor enthusiasts primarily in the UK. The technical infrastructure is based on WordPress, hosted via Cloudflare, and incorporates modern SEO and analytics tools, including Google Analytics and PixelYourSite. The site implements a comprehensive cookie consent mechanism, aligning with GDPR requirements. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence suitable for its business model and audience.

E

European Bridge League

eurobridge.org

42

The European Bridge League (EBL) is a non-profit organization dedicated to administering the mind sport Bridge across Europe. The website serves as a central hub for governance, competitions, education, and community engagement for bridge players and national federations. The site is well-structured with clear navigation and consistent branding, targeting bridge enthusiasts, youth, and women players. Technically, the website is built on WordPress with a modern plugin stack including WPBakery, Slider Revolution, and EventON, and integrates Google Analytics and reCAPTCHA for analytics and security. While the site is accessible and mobile-optimized, it lacks explicit privacy and terms of service pages, and no direct contact information is found in the provided content. Security posture is moderate with some best practices like reCAPTCHA and cookie consent implemented, but missing security headers and unknown SSL status present risks. The WHOIS data is unavailable or malformed, limiting domain trust analysis. Overall, the website is functional and professional but would benefit from enhanced security measures and clearer privacy compliance documentation.

D

dualcareer.eu

dualcareer.eu

35

dualcareer.eu is a small European non-profit organization dedicated to supporting athletes in combining high performance sport with education and vocational training. The website serves as a hub for information, membership, conferences, and research projects related to the dual career approach. The organization targets institutions, coaches, teachers, and students involved in sport and education across Europe. The site is built on WordPress with a moderate technical infrastructure including Bootstrap and Google reCAPTCHA for form security. While HTTPS is enforced and Google Analytics is used for tracking, the site lacks critical privacy and cookie policies, and security headers are missing, which presents compliance and security gaps. The domain registration is consistent and legitimate, supporting the organization's credibility.

H

HC-Engineering Oy

itufloor.fi

43

HC-Engineering Oy operates the ItuFloor brand, providing floor heating and cooling solutions across Finland. The company offers both material delivery and turnkey installation services, targeting residential and commercial building sectors. The website is professionally designed, localized in Finnish, and demonstrates a clear market position with over a million square meters of installed floor heating. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers could be improved. Overall, the domain registration details align well with the business identity, supporting legitimacy and trustworthiness.

D

Danir AB

danir.se

50

Danir AB is a well-established, family-owned investment and holding company based in Sweden, focusing on long-term entrepreneurship and social engagement. Founded in 1986, Danir owns and develops a diversified portfolio of subsidiaries primarily in technology, energy, real estate, and other sectors. The company emphasizes organic growth and local leadership within its subsidiaries, maintaining a stable and decentralized management approach. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about its holdings and social initiatives. Technically, the website is built on WordPress with modern plugins and integrates Google Tag Manager for analytics. It uses HTTPS and has a cookie consent mechanism compliant with GDPR. While the site performs moderately well and is mobile-optimized, there are opportunities to enhance security by enabling DNSSEC and adding more security headers. Accessibility features are basic but could be improved. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. The privacy and cookie policies are comprehensive and transparent, supporting GDPR compliance. However, no explicit security policy or incident response information is found, and no vulnerability disclosure or security.txt file is present. Overall, Danir's website demonstrates a strong business credibility and trustworthy online presence, with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements in security headers and accessibility would further strengthen its posture.

M

Monaco Tribune

monaco-tribune.com

51

Monaco Tribune is a professional online news media outlet focused on delivering local news, cultural events, sports, and societal updates related to Monaco. The website targets residents and visitors interested in Monaco's current affairs and lifestyle, offering multilingual content and a city guide. The business model relies primarily on advertising revenue and content distribution through social media channels. Technically, the site is built on WordPress with modern SEO and performance optimization plugins, ensuring good loading speeds and mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trust. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process to enhance compliance and trust.

R

Riigimetsa Majandamise Keskus

loodusegakoos.ee

51

Riigimetsa Majandamise Keskus (RMK) is a government agency responsible for managing Estonia's state-owned forests and natural ecosystems. The organization focuses on sustainable forest growth, nature conservation, providing outdoor recreational opportunities, and nature education. RMK holds a strong market position as the largest forest management entity in Estonia, serving both the general public and specialists. Their business model revolves around state stewardship and generating revenue through forest management and wood sales. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to diverse audiences. Technically, the site is built on WordPress with modern technologies such as Google Tag Manager and Redis caching, ensuring good performance and mobile optimization. Privacy compliance is robust, featuring detailed cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Security posture is solid with HTTPS enforced and secure cookie practices, though the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, RMK's website demonstrates high professionalism, trustworthiness, and effective communication of its mission and services.

A

Airlan

airlan.es

45

Airlan is a Spanish manufacturer specializing in climate control equipment, emphasizing technological innovation, energy efficiency, and comprehensive product offerings for centralized water installations. The company targets installers and businesses primarily in Spain and Latin America, offering products adapted to different electrical frequencies (50 Hz and 60 Hz). The website reflects a medium-sized enterprise with a professional online presence, including clear contact information and social media engagement. Technically, the site is built on WordPress with WooCommerce and uses modern plugins such as Slider Revolution and Google reCAPTCHA for security. While HTTPS is enforced and cookie consent mechanisms are in place, the absence of explicit security headers suggests room for improvement in security hardening. The WHOIS data is not publicly accessible due to Red.es restrictions, but the website content and business details appear consistent and trustworthy. Overall, the site scores well in content quality, business credibility, and privacy compliance, with moderate technical and security posture scores.

I

Itula Oy

itula.fi

59

Itula Oy is a Finnish company specializing in energy-efficient heating and cooling systems, including innovative ceiling radiant panels and floor heating solutions. Established in 1999, Itula holds a strong market position as a pioneer in its sector within Finland, offering both products and expert consulting services from project planning to implementation. The company emphasizes energy efficiency and indoor climate quality, targeting business clients in construction, industrial, and residential markets. Technically, the website is built on WordPress with modern SEO and analytics tools, demonstrating a mature digital presence. Security measures include HTTPS, reCAPTCHA, and a comprehensive cookie consent mechanism, though additional security headers and policies could enhance protection. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a credible and established business.

J

Jazz Pesulad OÜ

jazzpesulad.ee

51

Jazz Pesulad OÜ operates a well-established car wash chain in Estonia, providing a variety of vehicle cleaning services including self-service, hand wash, and drive-through options. The company has a strong market presence with 23 locations across multiple cities and serves thousands of customers daily. Their business model includes loyalty and prepaid card programs to enhance customer retention and convenience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA Enterprise, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and standard security headers, although no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a positive digital maturity profile.

E

ENGSO Youth

engsoyouth.eu

70

ENGSO Youth is a European non-profit organization dedicated to empowering youth in grassroots sports. Founded in 2002, it serves as the independent youth body of the European Sports NGOs, advocating for youth rights and inclusion in sports. The organization operates through multiple working groups and projects focusing on education, employability, sport diplomacy, health, social inclusion, and sustainable development. It maintains partnerships with prominent European and international institutions, enhancing its credibility and influence. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery and Font Awesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks some recommended security headers and a cookie consent mechanism, which are important for compliance and protection. No critical vulnerabilities or suspicious activities were detected. Overall, ENGSO Youth presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in privacy compliance and security hardening would further enhance its posture.

Z

Zone Media OÜ

xn--puhvetitepiv-pcb.ee

43

The website 'PUHVETITE PÄIV RÕNGUST RANNUNI' serves as the official online presence for a regional Estonian food and cultural event organized by Zone Media OÜ. It provides visitors with event details, galleries, maps, and multimedia content to promote local buffets and experiences in the Rõngu and Rannu areas. The site targets local visitors and tourists interested in Estonian culinary culture. Technically, the site is built on WordPress with a modern theme and several plugins supporting multilingual content, social media integration, and cookie consent management. The infrastructure is hosted likely by Zone Media OÜ, with proper HTTPS and moderate performance. Security posture is adequate with SSL and cookie consent but lacks advanced security headers and explicit incident response or vulnerability disclosure mechanisms. Privacy compliance is partial, with a cookie policy and consent mechanism but no visible privacy policy or terms of service. Overall, the site is professional and trustworthy for its niche but could improve in privacy and security transparency.

V

Visit Tartu

visittartu.com

42

Visit Tartu operates as the official tourism portal for Tartu and Southern Estonia, providing comprehensive travel information, event promotion, and business-to-business services such as MICE and conference venues. The website targets tourists, event organizers, and business visitors, positioning itself as a key regional tourism authority. The business is well-established with a domain age dating back to 2005, reflecting a mature presence in the hospitality sector. Technically, the site leverages WordPress with Elementor and WP Rocket for performance optimization, and integrates social media and multimedia content effectively. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the site is professional, user-friendly, and trustworthy, though improvements in security headers and privacy documentation are recommended.

V

Vidzemes plānošanas reģions

vidzeme.lv

46

Vidzemes plānošanas reģions is a Latvian regional government institution focused on development and planning within the Vidzeme region. The organization actively collaborates with European partners on international projects to foster business growth and innovation. The website serves as an informational portal for stakeholders and the public, providing access to regional data and project information. Technically, the site is built on WordPress with modern plugins for SEO, multilingual support, and cookie compliance, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing formal security and privacy policies. Overall, the site is professional and trustworthy, aligned with its government function.

T

The European Olympic Committees

eurolympic.org

50

The European Olympic Committees (EOC) is a well-established non-profit organization dedicated to promoting the fundamental principles of Olympism across Europe. The website serves as the official digital presence for the EOC, providing comprehensive information about its activities, events, awards, and news. It targets Olympic committees, athletes, sports organizations, and the general public interested in European Olympic sports. The organization holds a strong market position as the continental association for European Olympic Committees and organizes major sports events such as the European Games and the European Youth Olympic Festival. Technically, the website is built on a modern WordPress platform with popular plugins like WPBakery Page Builder and integrates Bootstrap for responsive design. It employs Google Analytics for traffic analysis and Mailchimp for newsletter subscriptions. The site is well-optimized for mobile devices and offers good SEO and accessibility features, though some improvements in accessibility could be made. From a security perspective, the site uses HTTPS with strong security headers and secure forms that include consent checkboxes. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit cookie consent mechanisms and does not publish a security incident response or vulnerability disclosure policy, which are areas for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The lack of WHOIS data limits domain registration insights, but the website's branding, content quality, and external partnerships strongly support its legitimacy. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing accessibility to further strengthen the site's security posture and user trust.

S

Spordikoolituse ja -Teabe Sihtasutus

spordiraamat.ee

39

Spordiraamat.ee is an Estonian e-commerce platform specializing in the sale of sports-related books, including annual sports yearbooks and training manuals. The business is operated by Spordikoolituse ja -Teabe Sihtasutus, targeting sports professionals, coaches, and enthusiasts primarily within Estonia. The website offers a focused catalog of sports literature with some partner integrations for purchasing select titles. Technically, the site uses a traditional frontend stack including jQuery, Bootstrap 3.3.7, and Selectize.js, with basic mobile responsiveness and moderate performance. Security measures include HTTPS, CSRF tokens, and a cookie consent mechanism, but lack advanced security headers and vulnerability disclosure policies. The WHOIS data aligns well with the business claims, indicating a legitimate and consistent registration. Overall, the site presents a professional and trustworthy e-commerce experience within its niche, though improvements in privacy policy presence and security hardening are recommended.

Lääneranna vald is a local government entity in Estonia formed in 2017 by merging several municipalities. The website currently serves as a maintenance page with basic information about the municipality's geography, administrative structure, and protected natural areas. The site is built on WordPress and uses common web technologies such as jQuery. The technical infrastructure is moderate with HTTPS enabled and hosted likely by Zone Media OÜ, an Estonian registrar and hosting provider. However, the site lacks advanced security headers and policies, and no privacy or cookie policies are published, which limits compliance with GDPR and other regulations. The login form is present but lacks visible security enhancements such as CAPTCHA or multi-factor authentication. Overall, the website is functional but minimal, reflecting a work-in-progress status.

Z

Zone Media OÜ

visitkorvemaa.ee

42

VisitKorvemaa is a regional tourism platform focused on promoting the Kõrvemaa nature area in Estonia. It aggregates local tourism services and offers authentic nature and community experiences including guided tours, outdoor activities, accommodation, and workshops. The website is built on WordPress with WooCommerce for e-commerce capabilities and uses modern plugins for SEO and marketing. The business is small, founded in 2021, and targets tourists interested in nature and active tourism. The platform integrates social media and third-party review widgets to build trust and engagement. Technically, the site is well-structured and mobile-optimized but lacks some advanced security headers and explicit privacy and cookie policies. The domain registration is consistent and transparent, supporting the legitimacy of the business.

E

Eesti Planeerijate Ühing

planeerijad.ee

48

Eesti Planeerijate Ühing is a professional non-profit association focused on spatial planning practices in Estonia. The organization provides certification for spatial planners, organizes events such as seminars and webinars, and engages in knowledge dissemination and international cooperation. The website is well-structured, professionally designed, and regularly updated with relevant news and events, reflecting an active and credible organization within its sector. Technically, the website is built on WordPress with modern plugins including Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. The site uses HTTPS with an excellent SSL configuration, but lacks some advanced security headers and explicit privacy and cookie policies, which are areas for improvement. No blocking or WAF mechanisms interfere with content accessibility. Security posture is solid with HTTPS and no exposed sensitive data, but the absence of published incident response or vulnerability disclosure policies and security.txt reduces transparency. Privacy compliance is weak due to missing privacy and cookie policies and consent mechanisms. Business credibility is high given the consistent domain registration, professional content, and clear organizational purpose. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security transparency to align with best practices and regulatory requirements.

M

MTÜ Eesti Raamatukoguvõrgu Konsortsium

elnet.ee

46

MTÜ Eesti Raamatukoguvõrgu Konsortsium operates as a non-profit consortium dedicated to serving the public interests of Estonian libraries. The organization provides key shared services such as the E-kataloog ESTER, Eesti artiklite andmebaas, Eesti märksõnastik, and the E-varamu portaal, targeting libraries, researchers, and the general public interested in library resources. The website reflects a medium-sized, well-established entity with a consistent brand and a clear focus on education and information services within Estonia. Technically, the website is built on a modern WordPress platform using the Enfold theme and several plugins including Yoast SEO and Ajax Search Pro. It employs HTTPS with good SSL configuration and integrates Google Analytics with user consent mechanisms. The site demonstrates good mobile optimization and accessibility features, including options for visually impaired users. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response information, and vulnerability disclosure channels. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, reinforcing the legitimacy of the domain. Overall, the website presents a trustworthy and professional digital presence for the consortium, with room for improvement in security transparency and incident response readiness.

T

Teeviit

teeviit.ee

56

Teeviit is an Estonian youth information portal affiliated with the Haridus- ja Noorteamet (Education and Youth Board). It provides comprehensive content on education, career, health, relationships, and social topics targeted primarily at young people. The website serves as a central hub for youth-related resources, including news, podcasts, event calendars, and partner portals such as Teeviit Juunior and Infohunt. The platform is well-positioned in the Estonian education and government sector as a trusted information source for youth.

S

Sillamäe Muuseum - SASIMU

sasimu.ee

43

Sillamäe Muuseum SASIMU is a recently established cultural institution in Estonia, focusing on the rich and complex history of Sillamäe through permanent exhibitions, educational programs, and innovative virtual reality experiences. The museum targets tourists, local visitors, and educational groups, offering a blend of historical insight and interactive technology to enhance visitor engagement. The website is built on WordPress and integrates common marketing and analytics tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy and cookie policies, indicating room for compliance improvement. Overall, the site presents a professional and trustworthy image aligned with its business goals.

I

Ida-Viru Ettevõtluskeskus

ivek.ee

46

Ida-Viru Ettevõtluskeskus is a regional development center focused on providing free consulting services to individuals, non-profit organizations, and entrepreneurs in Ida-Viru County, Estonia. Established in 2010, it acts as a regional development engine offering training, funding opportunities, and support services. The website is multilingual, targeting Estonian, English, and Russian speakers, reflecting the regional demographic. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Maps and various plugins for SEO, multilingual support, and user interaction. Security posture is solid with HTTPS and cookie consent mechanisms, though additional HTTP security headers and published policies would enhance compliance and trust. Overall, the site presents a professional and trustworthy digital presence aligned with its business mission.

E

Eesti Vee-ettevõtete Liit

evel.ee

42

Eesti Vee-ettevõtete Liit (EVEL) is a well-established voluntary association representing water companies and related entities in Estonia. Founded in 1995, it serves over 90% of the country's public water and sewerage service consumers through its 42 member water companies and 31 related companies. The organization provides coordination, information dissemination, training, and project participation services to its members, positioning itself as a key player in Estonia's water sector. The website reflects this focus with relevant content, partner links, and organizational information primarily in Estonian, targeting industry stakeholders and members.

L

Lääne-Viru Omavalitsuste Liit

virol.ee

46

Lääne-Viru Omavalitsuste Liit is a regional government association serving the municipalities of Lääne-Viru County, Estonia. The organization focuses on regional development, public health, safety, education, tourism, entrepreneurship, and cooperation among local governments. The website reflects a well-established entity with a domain registered since 2010, consistent with its government association status. The site targets local government officials, residents, and regional partners, providing information on programs, events, and strategic initiatives. Technically, the website is built on WordPress with modern plugins and technologies, including GDPR-compliant cookie consent and Google Analytics integration. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

C

Caotica

caotica.eu

54

Caotica is a small technology service provider specializing in web development and online marketing, targeting medium-sized companies primarily in Estonia and internationally. The company offers a broad range of digital services including SEO, Google Ads, social media campaigns, email marketing, and content management. The website is professionally designed using WordPress with modern SEO and analytics tools integrated, reflecting a mature digital presence. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers are missing and no explicit incident response or security policy pages are available. The lack of publicly available WHOIS data due to EURid privacy policies limits transparency but is common for .eu domains. Overall, the website is trustworthy and functional with room for improvement in contact transparency and security best practices.

P

Pärnu Sadam AS

parnusadam.eu

47

Pärnu Sadam AS operates as a regional port authority and service provider located in southwestern Estonia, specifically at the mouth of the Pärnu River. The company offers essential harbor services including vessel scheduling, access permit management, and related maritime services. The website positions Pärnu Sadam as a key regional player in transportation and port services, targeting shipping companies, local businesses, and visitors. The business model revolves around providing port infrastructure and administrative services to facilitate maritime traffic and regional commerce. Technically, the website is built on WordPress 6.7.2 with a modern tech stack including Yoast SEO for search optimization, WPML for multilingual support, and integration of Google Analytics and Google Maps APIs. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR, enhancing user trust and legal compliance. From a security perspective, the site uses HTTPS with anonymized IP tracking in Google Analytics and provides a cookie consent banner with opt-in/out options. However, explicit security headers are not detected in the HTML content, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analyzed content, indicating a generally sound security posture. Overall, Pärnu Sadam's website reflects a credible and professional digital presence consistent with its business operations. The site is accessible without WAF or blocking mechanisms, includes comprehensive privacy and cookie policies, and provides clear contact information. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining regular audits of third-party scripts to further strengthen security and compliance.

Z

Zone Media OÜ

omastehooldusest.ee

45

Omastehooldusest.ee is a specialized informational portal launched in 2024 by Zone Media OÜ, focused on providing knowledge, support, and hope for individuals requiring care and their caregivers in Estonia. The website offers comprehensive resources including guidance for care recipients, adult and child caregivers, community information, specialist resources, and multimedia content such as videos and podcasts. It targets a niche non-profit sector audience, aiming to support caregiving journeys with practical and emotional assistance. Technically, the site is built on WordPress with a modern theme and SEO optimizations, integrating analytics and chat support tools. Security posture is adequate with HTTPS enabled but lacks advanced DNS security and security headers. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

Online Solution, operated by OS Online Solution GmbH, is a small German IT services company specializing in customized server, software, mobile, app, and online solutions. The company also references CDN services through partner domains. The website is built on WordPress using a standard theme and provides content primarily in German and English. The technical infrastructure is moderate, leveraging WordPress and Cloudflare DNS, but lacks advanced performance and accessibility optimizations. Security posture is basic with no advanced security headers or policies implemented, and privacy compliance is minimal due to the absence of privacy and cookie policies. Contact and incident response information are not provided, limiting user trust and compliance. Overall, the site is functional but requires enhancements in security, privacy, and user engagement to improve trust and compliance.

A

AirProxy AS

airproxy.eu

46

AirProxy AS is a specialized General Sales and Service Agent (GSSA) company with 30 years of experience serving passenger and cargo airlines in the Baltic region through offices in Tallinn, Riga, and Vilnius. The company focuses on providing representation and support services to airlines, positioning itself as a trusted partner in the transportation sector. The website is built on WordPress and employs standard web technologies, offering a professional and consistent user experience with good mobile optimization and navigation clarity. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which impacts its overall security posture and privacy compliance. HTTPS is properly implemented, ensuring secure communication. The absence of analytics and tracking scripts suggests minimal user tracking, aligning with privacy best practices. Overall, the website reflects a credible small business with room for improvement in security and compliance documentation.

L

Le Mark Floors

lemarkfloors.co.uk

65

Le Mark Floors is a specialized manufacturer and retailer of vinyl and sprung dance floors, serving professional dance schools, TV and film studios, theatre productions, and event organizers. With over 25 years of industry presence, the company has established a strong reputation for quality and reliability, supplying floors used by prestigious clients such as the Royal Ballet School and major TV productions. Their product range includes various dance floors tailored to specific styles, custom printed floors, and installation accessories. The website reflects a professional and well-maintained digital presence, leveraging WordPress with modern plugins and analytics tools to optimize user experience and marketing efforts. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data due to domain registration anomalies slightly reduces trust but does not detract from the evident legitimacy of the business. Overall, Le Mark Floors presents a credible and professional online presence aligned with its business operations.

W

Webware

webware.ee

46

Webware OÜ is an established Estonian technology company specializing in comprehensive and flexible information and document management solutions through its flagship platform, WebDesktop. With over 23 years of experience, Webware serves a broad client base including major organizations in Estonia and Northern Europe, positioning itself as a market leader in the info management sector. The company offers a range of services including software analysis, development, hosting, training, and workflow and risk management, targeting both private and public sector organizations. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.

I

Intuizi

intuizi.com

51

Intuizi is a technology company specializing in predictive consumer intelligence by leveraging large quantitative models and anonymized consumer data to generate actionable insights. Their platform, the Anonymous Knowledge Graph (AKG), enables businesses to analyze de-identified consumer behavior across digital and physical environments, supporting adtech, marketing, and data monetization efforts. The company positions itself as a privacy-conscious data analytics provider with a focus on compliance and innovation. Technically, the website is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics and HubSpot. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security-wise, the site uses HTTPS and includes some security best practices but lacks explicit security headers and incident response information, which could be improved. The absence of WHOIS data for the domain is a notable anomaly that impacts domain trustworthiness. Overall, Intuizi presents a credible business with strong technical and content quality but should address domain registration transparency and enhance security policies.

Online Solution GmbH is a German-based technology company specializing in mobile, app, and online solutions, complemented by cybersecurity services such as CDN, e-commerce firewall, and DDoS protection. The company operates multiple related domains targeting different languages and specialized services, positioning itself as a niche provider in the technology and cybersecurity sectors. The website is built on WordPress with standard themes and plugins, including GDPR compliance tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is supported by a cookie consent mechanism and a basic privacy policy. Overall, the site is functional but minimalistic, with limited direct contact information and no terms of service page. Strategic improvements in security practices and transparency could enhance trust and compliance.

C

Confido

confido.ee

41

Confido is a prominent Estonian medical center offering over 2500 healthcare services including preventive care, primary and specialist medical services, surgical and rehabilitation treatments, and aesthetic medicine. The company operates multiple physical clinics across Estonia and provides digital health services such as a digital clinic and online booking. The website is multilingual, targeting Estonian, English, and Russian speakers, reflecting a broad target audience within Estonia. The business model focuses on comprehensive healthcare delivery with both in-person and digital service channels, positioning Confido as a leading private healthcare provider in the region. Technically, the website is built on WordPress with modern plugins like Yoast SEO and WPML for multilingual support. It uses popular JavaScript libraries such as jQuery, Fancybox, and Owl Carousel for enhanced user experience. The site integrates Google Tag Manager and Facebook Pixel for analytics and marketing, and employs a cookie consent mechanism via cookie-script.com, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and uses asynchronous loading for tracking scripts to minimize performance impact. However, there is no explicit privacy policy, terms of service, or security policy pages found, nor any incident response or vulnerability disclosure information. Cookie consent is implemented, but GDPR compliance indicators are limited. No critical vulnerabilities or suspicious activities were detected in the content provided. Overall, Confido's website demonstrates a strong business presence with good technical implementation and a solid security posture, though improvements in privacy compliance documentation and security transparency are recommended. The domain registration details align well with the business claims, supporting high legitimacy and trustworthiness.

E

Estonian Film Institute

filmi.ee

45

The Estonian Film Institute operates as a national cultural institution dedicated to supporting and promoting Estonian film production, distribution, and education. The website serves both film viewers and industry professionals, providing news, event information, and institutional details. The organization is well-established with a domain registered since 2014, consistent with its public presence. Technically, the website is built on a modern WordPress CMS platform with contemporary libraries such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. SEO practices are well implemented, and the site is mobile-optimized. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit privacy or cookie policies. There is no evidence of a vulnerability disclosure program or security contact channels, which could be areas for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and explicit contact information to improve user trust and regulatory adherence.

P

Palmako AS

construct.ee

48

Construct, operated by Palmako AS, is a specialized manufacturer of glued laminated timber products serving the construction industry with a focus on sustainability and quality. As part of the Lemeks Group, it benefits from a strong supply chain and international presence, exporting to over 30 countries. The website reflects a mature digital presence built on Drupal 10, with good mobile optimization and clear navigation. Privacy and cookie compliance are well implemented, supporting GDPR requirements. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit security policies and incident response information are absent, which could be improved. Overall, the site projects professionalism and trustworthiness aligned with the company's market position.

L

Lemeks Grupp

lemeks.ee

51

Lemeks Grupp is a well-established Estonian industrial group specializing in sustainable forestry, wood processing, and agriculture since 1993. The company operates with a strong focus on environmental responsibility and local capital ownership, serving both domestic and international markets with exports to 50 countries. The website reflects a mature digital presence built on WordPress, incorporating modern web technologies and compliance mechanisms such as GDPR cookie consent. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though some areas like incident response and security policy documentation could be improved. Overall, the site demonstrates good professionalism, trustworthiness, and business credibility, supporting Lemeks Grupp's market position as a leading forestry and manufacturing group in Estonia.