Security Directory

A

Advokatfirman Glimstedt

glimstedt.se

49

Advokatfirman Glimstedt is a well-established full-service law firm founded in 1935, specializing in business law and serving primarily large and medium-sized Swedish and international companies. The firm operates across 17 offices in Sweden and the Baltics with over 200 employees, positioning itself as one of the largest law firms in the region. Their website reflects a professional and modern digital presence, built on WordPress with integration of Google Tag Manager and Cookiebot for privacy compliance. The site is well-structured, mobile-optimized, and SEO-friendly, providing comprehensive legal content and news updates. Security-wise, the site enforces HTTPS and implements a robust cookie consent mechanism, though additional HTTP security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital infrastructure aligned with the firm's market position and compliance requirements.

D

DragDropr

dragdropr.com

61

DragDropr is a technology company specializing in a visual drag & drop page builder that integrates seamlessly with multiple CMS and e-commerce platforms such as WordPress, Magento, Shopify, and Lightspeed. The company targets website owners, agencies, content managers, and small businesses seeking an easy-to-use content creation tool without requiring coding skills. Their market position is that of a versatile, cross-platform content builder offering both standalone and white-label solutions. The website is professionally designed, with clear navigation and comprehensive content describing their services and benefits. Technically, the site is built on WordPress with the Enfold theme and uses modern plugins and analytics tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not fully documented. The absence of WHOIS registration data is a concern for domain legitimacy, but the overall business credibility is supported by transparent contact information and active social media presence. Strategic recommendations include improving transparency around security policies, publishing vulnerability disclosure information, and enhancing WHOIS data visibility to strengthen trust.

C

Classictic.com

classictic.com

68

Classictic.com is an established online ticketing platform specializing in classical music concerts and opera events worldwide. Operating since 2002, it serves a global audience of classical music enthusiasts by providing secure online ticket purchases and official partnerships with prestigious venues. The website supports multiple languages and currencies, enhancing accessibility for international users. Technically, the site employs modern JavaScript libraries such as jQuery, Lightbox2, and tracking tools including Google Tag Manager and Hotjar, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and SEO, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and consent management implemented, though some security headers and explicit policies are missing. The absence of WHOIS data is a notable anomaly, but the website's trust indicators and certifications partially mitigate concerns. Overall, Classictic.com presents a reliable and professional service with room for improvement in transparency and security documentation.

S

Specialist VC

specialist.vc

48

Specialist VC is a venture capital fund focused on supporting early-stage technology startups primarily in Estonia, Latvia, Lithuania, Finland, Ukraine, and Belarus. The fund invests mainly in pre-seed to Series A rounds, with occasional secondary investments in later rounds. Their portfolio includes over 60 companies, many of which are recognized regional tech leaders. The website presents a professional and consistent brand image, with detailed team bios and clear contact information, positioning Specialist VC as a credible and established player in the regional VC ecosystem. Technically, the website is built on WordPress with modern plugins such as Rank Math for SEO and uses jQuery and Splide.js for interactive elements. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features. HTTPS is enforced, ensuring secure communications. From a security perspective, the site has a solid SSL configuration but lacks some security headers and does not provide a vulnerability disclosure or incident response contact. Privacy compliance is partial, with an ESG policy page but no dedicated privacy or cookie policy pages, nor cookie consent mechanisms. Contact information is comprehensive, including multiple team emails and phone numbers. Overall, Specialist VC's website reflects a mature business with a strong market position and good technical implementation. However, improvements in privacy compliance and security best practices would enhance trust and regulatory adherence.

T

Telia Eesti AS

kaustik.ee

58

Kaustik.ee is an Estonian information system platform primarily serving the education sector, offering document register services and secure user authentication including Estonian electronic ID methods. The platform is operated under the domain registered by Telia Eesti AS, a reputable telecom provider in Estonia, indicating a legitimate and regionally focused service. The website content is basic but functional, with a focus on user login and document access. Technically, the site uses a proprietary WebDesktop system with modern JavaScript libraries such as jQuery and Bootstrap, providing a moderate level of digital maturity. However, SEO and accessibility features are minimal, and no advanced analytics or marketing tools are detected. Security posture is adequate with HTTPS and secure login options but lacks important security headers and privacy policies, which are critical for GDPR compliance and user trust. Overall, the site is moderately trustworthy but would benefit from enhanced security and privacy measures.

G

Gemeinde Stansstad

stansstad.ch

65

Gemeinde Stansstad operates as the official municipal government website for the town of Stansstad in Switzerland. It provides residents and visitors with comprehensive information about local administration, politics, cultural events, and public services. The website targets local citizens and stakeholders, offering online administrative tools such as a citizen account and online service counters. The business model is that of a public sector entity focused on community engagement and service delivery. The site maintains a consistent and professional brand image with clear navigation and relevant content.

S

Sentinel Research

sentinel-research.com

59

Sentinel Research is a student-led academic organization dedicated to pioneering innovative counterintelligence solutions to enhance national security. The organization positions itself as a leader in the academic research space with a focus on interdisciplinary approaches and strategic collaborations. Their offerings include research publications, policy recommendations, and educational resources aimed at students, academics, and national security professionals. The website is built on a modern WordPress platform with SEO and analytics integrations, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security practices.

P

PremierCert+

premiercert.org

46

PremierCert+ operates as a specialized certification management platform requiring user authentication to access services. The website serves primarily as a login portal with minimal public-facing content, indicating a focus on registered users such as professionals or organizations involved in certification processes. The platform is powered by Isopyre technology and leverages ASP.NET Web Forms with DevExpress controls, reflecting a traditional Microsoft web technology stack. Client-side SHA256 hashing is implemented for password security, demonstrating some attention to protecting user credentials. Technically, the site uses a mature but somewhat dated technology stack with jQuery and ASP.NET AJAX. Performance and mobile optimization are basic, with no advanced SEO or accessibility features detected. Security posture shows moderate implementation with session timeout warnings and client-side hashing; however, the absence of security headers and anti-CSRF tokens indicates room for improvement. The lack of HTTPS verification and missing WHOIS data further reduce trustworthiness. Overall, the website is functional for its intended purpose but lacks comprehensive privacy, security, and business transparency features. The missing WHOIS data and absence of contact or policy pages limit the ability to fully verify legitimacy and compliance. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance trust and compliance.

H

Health Founders

healthfounders.ee

38

Health Founders is a specialized health technology accelerator based in Estonia, focused on supporting and accelerating healthtech startups through a dedicated program, expert mentoring, and access to a global investor network. The organization positions itself as the first vertical healthtech accelerator in the Baltics, leveraging Estonia's advanced digital health ecosystem. The website reflects a professional and consistent brand image with clear information about its services, partners, and mentors. Technically, the site is built on WordPress with modern plugins and integrates analytics tools such as Google Analytics and Plausible. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks published security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is credible and well-positioned but should improve compliance and security transparency.

A

AVAR VISUALS OÜ

avar.ee

36

AVAR VISUALS OÜ operates the website avar.ee, providing specialized services in virtual tours, 3D visualizations, and virtual reality solutions primarily targeting businesses in real estate, hospitality, education, and event management sectors. The company has a solid market presence with over 300 projects completed and more than 4 years of experience, positioning itself as a trusted niche service provider in Estonia. The website showcases a professional design with clear navigation, multimedia content including embedded Matterport virtual tours, and client testimonials enhancing credibility. Technically, the website is built on WordPress 6.8.1 with Bootstrap 4.3.1 and jQuery 3.7.1, integrating modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Mouseflow. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Hosting and domain registration are consistent and transparent, with the domain registered since 2012 by Zone Media OÜ. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling but lacks important security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms, which poses a compliance risk under GDPR. Overall, the website is professional and trustworthy with strong business credibility and technical implementation but requires improvements in privacy compliance and security policy transparency to enhance its security posture and regulatory adherence.

C

Contract Pharma

contractpharma.com

61

Contract Pharma operates as a specialized media outlet focused on connecting contract service providers with pharmaceutical and biopharmaceutical sponsors. The website offers a comprehensive range of services including industry news, digital and print magazine editions, directories, event information, and sponsored content. It targets professionals and companies within the pharma and biopharma sectors, positioning itself as a premier information and networking platform in this niche. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various analytics and marketing tools such as Google Analytics, HubSpot, and AdRoll. The site demonstrates good SEO practices with structured data and meta tags, and it is mobile optimized with responsive design elements. Performance is moderate, with standard ad integrations and tracking scripts. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA for form protection. Cookie consent mechanisms are in place, and privacy policies are comprehensive and GDPR compliant. However, explicit security policies and incident response information are not publicly available. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the site presents a professional and trustworthy front for its business model, but the lack of WHOIS transparency and absence of direct contact information on the homepage slightly reduce its trustworthiness. Strategic improvements in security transparency and contact availability would enhance credibility and compliance.

P

Proact SE

proact.se

76

Proact SE is a leading Swedish IT services company specializing in data storage, backup, cybersecurity, network solutions, and modern workplace consulting. Positioned as Europe's leading specialist in data and information management with a focus on cloud services and data center solutions, Proact offers expert consulting and 24/7 support to its business clientele. The website reflects a professional and consistent brand image with comprehensive service descriptions and a strong emphasis on expertise and support. Technically, the website is built on a modern WordPress CMS platform using Elementor and Yoast SEO plugins, indicating a mature digital infrastructure. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be improved. Analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot are integrated, supporting data-driven marketing and compliance. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements a robust cookie consent mechanism via Cookiebot. However, explicit security headers are not detected, and there is no visible security policy or incident response contact information, which are areas for improvement. No vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. The lack of WHOIS data for the exact queried subdomain is typical and does not detract from the legitimacy of the main domain. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact information to further strengthen trust and compliance.

P

Proact UK

proact.co.uk

69

Proact UK is a leading European specialist in IT infrastructure, security, and workspace solutions, delivering expert consulting, services, and 24/7 support focused on data management, backup, cybersecurity, networking, and modern workspace environments. The company positions itself as a trusted partner for businesses seeking cloud transformation, private and public cloud solutions, data centre modernization, and operational resilience. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service offerings. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and cookie consent management via Cookiebot. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. WHOIS data for the exact domain 'www.proact.co.uk' is unavailable due to it being a subdomain, but related domains and website content support legitimacy. Overall, the site demonstrates a solid business and technical foundation with room for enhanced privacy and security disclosures.

M

MTÜ Noorteühing Tugiõpilaste Oma Ring Eestis

tore.ee

42

MTÜ Noorteühing Tugiõpilaste Oma Ring Eestis (TORE) is a well-established Estonian non-profit organization focused on youth peer support, mentoring, and training programs. The organization operates nationally with a history of nearly three decades, offering structured events such as summer and autumn schools, conferences, and supervision sessions. Their target audience includes Estonian students and their mentors, aiming to empower youth through systematic engagement and education. The website reflects this mission with relevant content, event announcements, and training information. Technically, the website is built on WordPress 6.8.1 with popular plugins like Yoast SEO and Modern Events Calendar Lite, indicating a mature digital infrastructure. The site uses HTTPS with a good SSL configuration, Google Fonts, and jQuery libraries. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and structured data. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, demonstrating awareness of privacy compliance. However, it lacks explicit privacy and terms of service pages, security headers, and incident response contacts, which are areas for improvement. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the HTML content. Overall, the website is credible and professional, with strong business legitimacy and consistent branding. The main risks relate to privacy compliance and security best practices, which can be addressed to enhance trust and regulatory adherence.

N

Nanox

nanox.vision

56

Nanox is a healthcare technology company specializing in advanced medical imaging solutions and AI-powered diagnostic tools. Their flagship products include the FDA-cleared Nanox.ARC 3D tomosynthesis imaging system and Nanox.AI suite of diagnostic solutions targeting chronic diseases. The company operates a cloud-based platform (Nanox.MARKETPLACE) to connect imaging providers globally and offers OEM components and radiology services. The website demonstrates a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, it is built on WordPress with modern libraries and integrates Google Tag Manager and reCAPTCHA for security and analytics. Security posture is strong with HTTPS and spam protection, though security headers and explicit incident response policies are absent. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, Nanox presents a credible and trustworthy business with a focus on innovation in healthcare imaging technology.

P

PR-room

pr-room.cz

45

PR-room is a small Czech Republic based business specializing in custom WordPress website development and graphic design services. The company is led by Ing. Kristýna Včeláková, who has extensive experience since 2014 and formal training in web development and graphic design. The website demonstrates a professional service offering with references to client sites and a clear contact section including email, phone, and LinkedIn profile. Technically, the site uses modern WordPress and WooCommerce versions, integrates Google Analytics, and is served over HTTPS, indicating a reasonable digital maturity level. However, the absence of privacy and cookie policies, lack of security headers, and missing WHOIS registration data present compliance and trust concerns. Overall, the security posture is moderate but could be improved with better policy disclosures and security headers.

B

BNI Global, LLC

bnitos.com

63

BNI Global, LLC operates the website bnitos.com as an informational portal providing legal and privacy documentation related to its BNI Connect® and BNI Business Builder platforms. The site targets users and members of these business networking services, offering access to Terms of Service, Privacy Policies, Data Retention, and Cookie Policies primarily in English with translation options. The business is positioned as a large, established global networking organization with a consistent brand presence and clear trust signals such as registered trademarks and official documentation. Technically, the website is built on WordPress 6.8.1 with Bootstrap and jQuery libraries, hosted on AWS infrastructure. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices in place. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though it lacks advanced security headers and DNSSEC. Privacy compliance is strong with comprehensive policies and a named Data Protection Officer contact, but no cookie consent mechanism is implemented. Overall, the security posture is solid but could be improved by adding explicit incident response policies, security headers, and cookie consent mechanisms. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. The site lacks phone and physical contact details, which could enhance credibility. No advertising or tracking services were detected, indicating a privacy-conscious approach. Strategic recommendations include enhancing DNS security with DNSSEC, implementing security headers, publishing incident response and vulnerability disclosure policies, and adding cookie consent mechanisms to improve compliance and user trust.

F

Fabricca

btsaf.com

46

Fabricca is an international, award-winning creative design and branding agency founded in 2013 and based primarily in North Macedonia with presence in Munich and Vienna. The agency offers a broad range of creative services including design, branding, web development, motion graphics, digital marketing, copywriting, video production, and photography. With a team of about 20 professionals and over 1000 clients served globally, Fabricca positions itself as a multi-disciplinary agency focused on delivering high-quality creative solutions. The website reflects a mature digital presence built on WordPress with modern frontend technologies and SEO optimizations. Hosting is provided by DreamHost, and the domain is registered via NameCheap with a consistent registration history. Security posture is good with HTTPS enforced and domain transfer protection, but lacks some security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and well-structured, but could improve compliance and security transparency.

E

European table tennis union

ettu.org

56

The European Table Tennis Union (ETTU) is a recognized governing body for table tennis activities across Europe, managing competitions, rankings, and development initiatives. The website serves as an information hub for players, associations, and fans, offering news, event schedules, and multimedia content. Technically, the site is built on a modern WordPress platform with Elementor, incorporating SEO best practices and responsive design. Security posture is strong with HTTPS, security headers, and a consent management platform for GDPR compliance. However, WHOIS data is unavailable due to privacy protection, which is typical for such organizations. Overall, the site is professional, trustworthy, and well-maintained.

The website yemenfox.net operates as a small-scale Indonesian language blog focused on online slot and togel gambling news, tips, and predictions. It targets Indonesian bettors interested in online gambling, providing content such as betting strategies and links to gambling prediction sites. The site is built on WordPress 6.8.1 with common plugins like Yoast SEO and uses Cloudflare DNS services. The technical infrastructure is moderate with basic mobile optimization and SEO practices. However, the site lacks critical security features such as security headers, DNSSEC, and explicit HTTPS status confirmation. There are no visible privacy, cookie, or terms of service policies, nor any contact information or business identity disclosures. This limits trust and compliance with data protection regulations. Overall, the security posture is weak, and the site shows minimal privacy compliance. The domain registration is consistent and appropriate for the business age, but the lack of transparency and security controls poses risks. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance trust and compliance.

A

admin

101situsjudi.net

50

The website 101situsjudi.net is an Indonesian language online gambling information and affiliate platform primarily focused on togel (lottery) and slot games. It provides articles, tips, and links to trusted gambling sites, targeting Indonesian online betting enthusiasts. The business operates as a small-scale affiliate or informational site founded in 2020, with a moderate market presence in its niche. Technically, the site runs on WordPress CMS with common plugins such as Yoast SEO and jQuery, hosted behind Cloudflare DNS but without active WAF challenges. The site is mobile-optimized and has basic SEO and accessibility features. Security posture is moderate with HTTPS enabled and domain-level protections, but lacks advanced security headers and incident response information. Privacy compliance is poor due to the absence of privacy and cookie policies. Contact information is limited to a phone number and search forms, with no email or physical address provided. Overall, the site has basic content quality and design, suitable for its niche but with room for improvement in security and compliance.

A

admin

ajkerbarta.com

51

Ajkerbarta.com is a small Indonesian media website focused on delivering news and tips related to online gambling, specifically togel and slot games. The site uses WordPress CMS with common plugins such as Yoast SEO and jQuery libraries, hosted behind Cloudflare DNS and registered via GoDaddy. The content is primarily in Indonesian and targets the local gambling community. The website lacks critical compliance documents such as privacy and cookie policies, and no contact information is provided, which impacts its trustworthiness and compliance posture. Technically, the site is moderately optimized with basic mobile responsiveness and SEO but lacks advanced security headers and DNSSEC, which are recommended for improved security. The site links to multiple external domains, some of which appear suspicious or unrelated, raising concerns about advertising and affiliate practices. Overall, the security posture is basic with room for improvement in policy transparency and technical safeguards.

A

admin

ezfadvance.com

51

The website ezfadvance.com is a small-scale Indonesian language blog focused on online gambling topics, specifically togel and slot games. It provides informational content and guides for players interested in online gambling in Indonesia. The site is built on WordPress with common plugins such as Yoast SEO and uses Cloudflare DNS services. The domain is well aged, registered since 2003, indicating a long-standing presence. However, the site lacks critical business and security information such as privacy policies, cookie consent mechanisms, terms of service, and contact details. Technically, the site uses HTTPS and modern web technologies but lacks DNSSEC and security headers, which are important for enhancing security posture. No advertising or tracking scripts were detected, suggesting minimal user tracking. Overall, the site appears functional but basic in content quality and security maturity.

A

admin

gerlweyh.com

51

The website gerlweyh.com operates as a small-scale WordPress blog focused on Indonesian online lottery (togel) and slot gambling content. It provides informational articles, tips, and affiliate-style links targeting Indonesian online gambling enthusiasts. The site is built on WordPress 6.8.1 with Yoast SEO plugin and uses Cloudflare DNS but lacks advanced security features like DNSSEC and security headers. No privacy, cookie, or terms of service policies are published, and no direct contact information is provided, which limits trust and compliance. The domain is registered with NameCheap since 2021, consistent with the site's content age but lacks registrant transparency. Overall, the site has basic content and technical implementation with moderate SEO but poor privacy and security posture.

H

HP Papers - Printing & Copier Paper

hp-papers.eu

66

HP Papers is a European-focused paper product brand specializing in printing and copier paper with a strong emphasis on sustainability and climate action. Their product range includes various paper types certified by ClimatePartner, FSC®, PEFC, and the EU Ecolabel, positioning them as a responsible and quality-conscious player in the manufacturing and retail sectors. The website is built on a modern WordPress infrastructure using Elementor and Astra theme, providing a good user experience with responsive design and clear navigation. However, the absence of explicit privacy and terms of service policies, as well as contact information, limits transparency and user trust. Security posture is adequate with HTTPS and reCAPTCHA usage but lacks visible security headers and formal security policies.

Birell.cz is the official website of Birell, a leading Czech non-alcoholic beer brand owned by Asahi CE & Europe Services s.r.o. The company has a strong market position in the Czech Republic, offering innovative non-alcoholic beers and radlers with a focus on flavor variety and health-conscious options. The website is built on WordPress with modern plugins and integrates Google Analytics via Google Tag Manager. It features a cookie consent mechanism compliant with GDPR and provides clear contact information including an email and physical address. However, the absence of a publicly accessible privacy policy page and missing WHOIS data limit full trust assessment. Security posture is generally good with HTTPS enforced but could be improved by adding security headers and publishing a security policy. Overall, the website is professional, user-friendly, and well-branded, supporting the company's market leadership.

Tempat Berita Judi Online Terbaik Sweethomeguide is a small Indonesian-language WordPress blog focused on online gambling, lottery (togel), and slot game news and guides. The site provides content primarily targeting Indonesian online gambling enthusiasts, offering promotional information and betting tips. Technically, the site runs on WordPress 6.8.1 with Yoast SEO plugin and uses Cloudflare DNS services. The site is accessible over HTTPS with a valid SSL certificate but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, indicating low privacy compliance and business transparency. The site links to numerous external domains, some of which are IP-based and potentially suspicious, which may pose reputational risks. Overall, the site is functional but basic in design and content quality, with moderate technical implementation and security posture.

R

RODING Mobility GmbH

roding-mobility.de

50

RODING Mobility GmbH is a German-based company specializing in innovative mobility solutions, including powertrain and battery systems, advanced composites, mobility prototypes, and small-series electric vehicle platforms. The company targets automotive, aerospace, and maritime sectors, providing specialized engineering and manufacturing services. Their market position is that of a niche player with expertise in high-voltage systems and composite materials. The website is professionally designed, multilingual, and includes comprehensive privacy and cookie policies with user consent mechanisms. Technically, the site runs on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, Google reCAPTCHA on contact forms, and cookie consent management, although some security headers and incident response information are missing. Overall, the website is trustworthy and well-maintained, supporting the company's business credibility.

T

Triorail Bahnfunk GmbH

triorail.com

30

Triorail Bahnfunk GmbH is a specialized technology company focused on developing and supplying GSM-Rail communication modules, modems, and test equipment primarily for the railway and transportation sectors. The company positions itself as a technological leader with a strong emphasis on robust radio reception and compliance with industry standards such as EIRENE and MORANE. Their product portfolio includes various GSM-R modules, terminals, and test systems, with ongoing development in future FRMCS radio modules and active participation in relevant standardization committees. The website infrastructure is built on WordPress with modern plugins and frameworks such as Yoast SEO, Bootstrap, and Contact Form 7, indicating a mature digital presence. The site is well-optimized for SEO and mobile devices, providing a good user experience with clear navigation and professional design. However, the absence of direct contact emails and phone numbers on the homepage, as well as the lack of a cookie consent mechanism, suggests areas for improvement in user engagement and privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and secure forms but lacks advanced security headers and published security policies or incident response information. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear professional and credible. Overall, the website presents a solid business and technical foundation but would benefit from enhanced transparency in domain registration, improved privacy compliance with cookie consent, and clearer contact information to strengthen trust and security posture.

J

JMP s.r.o.

toppery.cz

43

Toppery.cz is a Czech-based retailer and manufacturer specializing in mattress toppers, mattress protectors, travel mattresses, and mattress covers. The company operates both an e-commerce platform and four physical stores across major Czech cities, targeting consumers seeking enhanced sleep comfort and hygiene solutions. The website is professionally designed, localized in Czech, and provides detailed product information and contact details, supporting a medium-sized retail business model with a strong local presence. Technically, the website is built on WordPress 6.4.3 with Bootstrap and jQuery frameworks, integrating SEO best practices via Yoast SEO and leveraging Google Analytics and Tawk.to for analytics and customer engagement. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and does not publish a privacy policy or incident response information. No WAF or blocking mechanisms are detected, and the domain registration data aligns well with the business claims, indicating legitimacy. Overall, the security posture is adequate but could be enhanced with additional headers and compliance documentation. The overall risk is moderate with no critical issues detected. Strategic improvements in privacy compliance and security headers would strengthen trust and regulatory adherence, supporting continued growth and customer confidence.

J

JMP s.r.o.

rajpolstaru.cz

40

Ráj polštářů is a Czech Republic based retail and e-commerce business specializing in high-quality pillows and bedding products. The company operates an online shop complemented by four physical stores across major Czech cities, offering anatomical, classic, and children's pillows. Their business model focuses on providing quality materials, expert consultation, and custom bedding solutions, positioning them as a trusted local retailer with a solid market presence since 2015. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and Yoast SEO, ensuring good SEO and mobile responsiveness. The site uses HTTPS and integrates Google Analytics and Tawk.to for analytics and customer support, respectively. Security posture is good with SSL and no visible vulnerabilities, though security headers and explicit policies are missing. Privacy compliance is basic with a cookie consent banner but no visible privacy or terms of service pages. Overall, the website is professional and trustworthy with room for improvement in privacy and security policy transparency.

P

PLAYzone s.r.o.

playzone.agency

47

PLAYzone Agency is a well-established esports and gaming company based in the Czech Republic with over 15 years of experience. They provide a broad range of services including consulting, gaming zone construction, streaming studios, event content creation, equipment rental, and PR services targeted at the gaming community. The company operates several proprietary projects and maintains partnerships with major brands such as Hyundai, Tipsport, Vodafone, and Logitech, positioning itself as a leading player in the Czech esports market. The website is professionally designed, bilingual (Czech and English), and demonstrates a strong digital presence with active social media and partner links. Technically, the website is built on WordPress with Elementor and uses modern JavaScript libraries like Swiper and Google Tag Manager for analytics and marketing. The site is mobile optimized, accessible, and SEO friendly, with good performance metrics. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and no explicit incident response or vulnerability disclosure information is published. Overall, the website and business exhibit a mature digital infrastructure and a professional security stance suitable for their industry. The lack of WHOIS data transparency slightly reduces trust but is common for privacy reasons. The company maintains GDPR-compliant privacy and cookie policies with user consent mechanisms, reflecting good privacy practices. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to strengthen privacy and security culture to maintain trust and compliance.

C

Cult Pens

cultpens.com

71

Cult Pens is a well-established UK-based e-commerce retailer specializing in pens and pencils, boasting a wide product range of over 24,000 items. The website positions itself as a trusted online pen shop offering secure ordering, expert knowledge, and excellent customer service with free UK delivery and worldwide shipping. Technically, the site is built on the Shopify platform, leveraging modern JavaScript libraries such as jQuery and Owl Carousel, and integrates third-party services including Klevu for search, Trustpilot for reviews, and OneTrust for cookie consent management. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security-wise, the site uses HTTPS with a domain status of clientTransferProhibited, indicating domain transfer protection. However, explicit security headers are not fully implemented, and no public security or incident response policies are found. Privacy compliance is partially addressed through cookie consent mechanisms, but no explicit privacy or terms of service pages were detected in the provided content. Overall, the website is professional and trustworthy but could improve transparency around privacy and security policies.

D

DRL OÜ

drl.ee

42

DRL OÜ is a specialized Estonian company providing professional data recovery services from various storage devices including hard drives, SSDs, RAID arrays, and NAS systems. Established in 2010, the company operates a local dust-free laboratory and offers free diagnostics and consultations, positioning itself as a trusted local expert with over 15 years of experience and a strong customer base. The website is well-structured, targeting individuals and businesses in need of data recovery solutions, with clear contact information and customer testimonials enhancing trust. Technically, the website is built on WordPress using the Enfold theme, leveraging modern web technologies such as jQuery, Google Analytics via MonsterInsights, Facebook SDK, and Google reCAPTCHA for form security. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Hosting and domain registration are consistent with the business location and claims, enhancing legitimacy. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service on the homepage. Overall, DRL OÜ presents a credible and professional online presence with a solid business foundation. Strategic improvements in security policy transparency, privacy documentation, and security header implementation would enhance trust and compliance, supporting long-term business resilience.

C

CYBERTEC PostgreSQL

cybertec.at

68

CYBERTEC PostgreSQL is a specialized technology company providing professional PostgreSQL services, support, training, and software products. The company targets enterprises and organizations seeking scalable and reliable PostgreSQL solutions, including migration, clustering, tuning, and consulting. Their market position is that of an established PostgreSQL expert with a comprehensive portfolio of services and products. The website is well-designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and performance optimizations, ensuring fast loading and good accessibility. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data reduces domain transparency and trustworthiness, but the website content and branding indicate a legitimate business. Overall, the risk is moderate with recommendations to enhance domain registration transparency and security headers.

MTÜ Eesti Kvaliteediühing is a non-profit organization based in Estonia focused on uniting organizations and individuals dedicated to development and quality improvement. The website serves as a platform for sharing news, events, and international quality-related activities, targeting quality professionals and organizations. The business model centers on membership and community engagement within the quality sector. The organization appears established with a domain age consistent with its founding year of 2018 and maintains a moderate market position within Estonia's quality community. Technically, the website is built on WordPress 6.5.5 using the Avada theme and integrates popular plugins such as Yoast SEO and CleanTalk anti-spam. It employs modern web technologies including jQuery and Font Awesome, and uses Google Analytics for visitor tracking. The site is served over HTTPS, indicating a secure transport layer, and shows moderate performance and good mobile optimization. SEO practices are implemented with meta tags and structured data, although accessibility features are basic. From a security perspective, the site benefits from HTTPS and anti-spam measures but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy and cookie policies are absent, which is a compliance gap, especially under GDPR. Incident response and vulnerability disclosure mechanisms are not evident, limiting transparency in security management. Overall, the website demonstrates a solid business credibility and technical foundation but requires improvements in privacy compliance and security policy transparency. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, and publishing incident response contacts to strengthen trust and compliance.

A

ADM Cloudtech

admcloudtech.com

56

ADM Cloudtech is a technology service provider specializing in cloud management solutions. Their website presents a professional image with clear descriptions of their services including cloud planning, architecture, migration, and ongoing management. The technical infrastructure is based on WordPress CMS with modern plugins and libraries, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks comprehensive security headers and explicit privacy policies. The absence of WHOIS data raises concerns about domain legitimacy and business credibility, which should be addressed to improve trust. Overall, the website is functional and well-designed but requires enhancements in privacy compliance and transparency.

P

Prototron

prototron.ee

43

Prototron is an Estonian startup funding program established in 2012 that provides equity-free grants up to 35,000€ along with mentoring and acceleration services to innovators and startups. The program supports the development of functional prototypes and aims to foster new technology-driven businesses. The website is professionally designed using WordPress CMS and integrates common web technologies such as jQuery and Yoast SEO for optimization. It demonstrates good mobile responsiveness and clear navigation, supporting a positive user experience. Security posture is solid with HTTPS enforced and secure cookie settings, though it lacks advanced security headers and explicit privacy and cookie policies, which are areas for improvement. The domain registration is consistent with the business claims, showing legitimacy and stability. Overall, the website reflects a credible and established organization with a clear mission and professional online presence.

K

Kinnisvarakool OÜ

kinnisvarakool.ee

50

Kinnisvarakool OÜ operates as a specialized real estate education provider in Estonia, offering a wide range of training courses, consulting services, and publications aimed at real estate professionals, investors, and related stakeholders. The company maintains a strong market position through cooperation agreements with leading Estonian real estate agencies and provides hybrid learning options to accommodate diverse learner preferences. The website is well-structured, content-rich, and professionally presented, targeting real estate agents, investors, developers, and individuals interested in real estate knowledge. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins and tracking technologies such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though there is room for improvement in security headers and formal security policies. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy in Estonian, but terms of service and incident response details are lacking. Overall, the site demonstrates a mature digital presence with good SEO and user experience, supporting the company's credibility and trustworthiness.

M

Merative

merge.com

75

Merative is an enterprise healthcare technology company specializing in medical imaging solutions, including radiology and cardiology software. The company holds a strong market position with top KLAS rankings and usage by leading US health systems. Their website demonstrates a mature digital presence built on HubSpot CMS, integrating advanced marketing and analytics tools. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response contacts are absent. The missing WHOIS data is a concern but does not detract significantly from the overall trustworthiness given the professional branding and content quality. Strategic recommendations include enhancing transparency around security policies and monitoring domain registration details.

M

Modera

modera.com

50

Modera is a medium-sized B2B software company specializing in automotive retail solutions, including CRM, e-commerce, and digital showroom tools. Established in 2003, it serves manufacturers, importers, and dealers across multiple countries with a strong market presence and reputable client base. The website is professionally designed using WordPress and Elementor, with modern web technologies and SEO optimizations. Security posture is good with HTTPS and transfer protection on the domain, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic with a cookie consent mechanism but lacks explicit privacy and terms policies. Overall, the site is trustworthy and business credible but should enhance privacy and security transparency.

G

Gabriel Scientific OÜ

sleepangel-medical.com

46

Gabriel Scientific OÜ operates the SleepAngel Medical website, offering innovative medical barrier bedding products featuring patented PneumaPure® filter technology. Their products are certified as Class I Medical Devices in the EU, registered with the FDA, and approved by the SFDA, positioning them as a niche innovator in healthcare infection control. The company targets healthcare facilities and distributors, emphasizing sustainability and hygiene. The website is professionally designed using WordPress with Divi and Elementor, featuring multimedia content and clear navigation. Technical infrastructure includes modern web technologies, Google Analytics, and Facebook Pixel for marketing insights. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site reflects a trustworthy and credible business with room for enhanced privacy and security disclosures.

E

Eedo & Partnerid OÜ

united-loggers.ee

41

United Loggers is a small Estonian company specializing in wood chip production, round timber material supply, and wood chipping services. The company operates a professionally designed website built on WordPress with the Astra theme, indicating a moderate level of digital maturity. The website includes a GDPR-compliant cookie consent mechanism and uses privacy-friendly Plausible Analytics for visitor tracking. However, it lacks explicit privacy policy, terms of service, and security policy pages, which are important for compliance and trust. Technically, the website uses modern web technologies and plugins but does not show advanced security headers or incident response information. The domain is well-established since 2010, registered to a local Estonian company consistent with the website's business focus. No signs of blocking or WAF interference were detected, allowing full content access. Security posture is adequate with HTTPS enforced and cookie consent implemented, but improvements are recommended in publishing security policies, adding security headers, and providing incident response contacts. Overall, the website is functional and professional but could enhance compliance and security transparency to improve trust and reduce risk.

S

Semel Oy

semel.fi

66

Semel Oy is a Finnish company established in 1971, specializing in providing taxi meters and order management systems for taxi companies, primarily targeting the Nordic market. The company positions itself as one of the leading providers in the personnel transport sector in the region. The website reflects a professional and consistent brand image, with content tailored to its B2B audience of taxi operators. Technically, the site is built on WordPress using the Elementor framework, hosted behind Cloudflare DNS services, and incorporates Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses Cloudflare nameservers but lacks DNSSEC and some recommended security headers, which could be enhanced to improve resilience against attacks. Privacy compliance is basic, with no explicit privacy or cookie policies detected, which is an area for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

S

Stockholm Independent Art Fair

supermarketartfair.com

52

Stockholm Independent Art Fair operates the Supermarket art fair, a niche cultural event focused on artist-run initiatives in Stockholm. The website provides comprehensive information about the event, including exhibitor details, tickets, talks, and publications. The business targets artists, exhibitors, and art enthusiasts, positioning itself as a key platform for independent art in the region. Technically, the site is built on WordPress with Elementor and uses modern frontend libraries, ensuring good mobile optimization and SEO. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and explicit privacy or cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

N

Nordic Hunting Club

nordichuntingclub.com

55

Nordic Hunting Club is a specialized outfitter offering guided hunting experiences in Estonia, focusing on big game and migratory birds. The company positions itself as a high-quality service provider with over 15 years of experience, targeting hunters interested in trophy hunting in Northern Europe. The website is professionally designed using WordPress and the Avada theme, with SEO optimized via Yoast plugin and enriched with structured data. The technical infrastructure includes modern JavaScript libraries and analytics tools, providing a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is missing, raising concerns about domain legitimacy and registration consistency. Overall, the site is functional and professional but requires improvements in privacy compliance and domain registration transparency.

R

Rederij Groen

rederijgroen.nl

36

Rederij Groen is a well-established Dutch offshore shipping and service company specializing in various types of support vessels including seismic supply, guard vessels, and crew tenders. Founded in 1973, the company has grown to operate a modern fleet serving global offshore energy clients. The website reflects a mature business with clear service offerings, a detailed company history, and recognized ISO certifications that emphasize quality, safety, and environmental responsibility. Technically, the site is built on WordPress with modern plugins and includes Google Analytics for visitor tracking. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic but includes a cookie consent banner and a privacy policy. Overall, the site is professional, trustworthy, and well-aligned with the company’s business profile.

R

RWTH Aachen University

rwth-aachen.de

63

RWTH Aachen University is a leading technical university in Germany, offering comprehensive academic programs, cutting-edge research, and strong corporate partnerships. The website serves a diverse audience including prospective and current students, researchers, and corporate visitors. It provides extensive information on academics, research projects, corporate relations, and university services. The university maintains a strong market position as a center of excellence in education and research. Technically, the website uses a custom CMS with modern JavaScript libraries like jQuery and Chosen, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and well-structured, reflecting the university's reputable standing.

H

Hong Kong Applied Science and Technology Research Institute Company Limited

astri.org

71

Hong Kong Applied Science and Technology Research Institute Company Limited (ASTRI) is a government-founded R&D institute established in 2000 to enhance Hong Kong's competitiveness in technology-based industries through applied research. The organization operates as a large, government-affiliated entity with a strong focus on technology innovation, patenting, and technology transfer to industry. Their website reflects a mature digital presence with comprehensive content, multilingual support, and a professional design. Technically, the site is built on WordPress with modern plugins and Google Analytics integration, offering good performance and mobile optimization. Security posture is solid with HTTPS and hCaptcha usage, though explicit security headers and published security policies are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website and organization demonstrate high business credibility and trustworthiness, though improvements in security transparency and privacy compliance are recommended.

L

Lindex Group Oyj

stockmanngroup.com

61

Lindex Group Oyj is a Finnish multinational retail company operating primarily in the fashion and department store sectors through its two main divisions: Lindex and Stockmann. Lindex is a leading Nordic fashion brand with a strong presence in 17 countries and online sales in 34 countries, focusing on women's and children's apparel, lingerie, and cosmetics. Stockmann operates quality department stores and e-commerce platforms in Finland and the Baltic countries. The company targets consumers seeking quality fashion and lifestyle products, leveraging a multichannel retail business model combining physical stores and digital commerce. The website reflects a professional corporate presence with comprehensive investor relations and sustainability information. Technically, the website is built on WordPress 6.8.1 with modern web technologies including jQuery and Google Tag Manager. It employs a cookie consent mechanism compliant with GDPR and integrates analytics tools such as Google Analytics and ContentSquare. The site is mobile-optimized and accessible, with good SEO practices. However, no explicit security headers were detected in the HTML source, which could be improved to enhance security posture. Security-wise, the site enforces HTTPS and uses cookie consent for privacy compliance. There is no visible security policy or incident response contact information published, which are areas for improvement. The absence of WHOIS registration data for the domain is a notable anomaly that raises questions about domain legitimacy, despite the professional appearance and content of the website. Overall, the website is well-designed and functional, supporting the company's business objectives effectively. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to strengthen trust and compliance.