Medium-risk security reports
90,188 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
52,551–52,600 of 90,188
LILUU.lvliluu.lv
Retail · Latvia
63Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
LILUU.lv operates as a specialized e-commerce retailer focused on children's products including shoes, clothing, accessories, toys, and gift ideas. The website targets Latvian-speaking parents and families, with additional language options for English and Russian speakers. The business positions itself as one of the better children's goods stores in Latvia, offering a curated selection of quality products. The site is professionally designed with clear navigation and a consistent brand presence, supported by social media channels on Facebook and Instagram. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by Visual Composer for layout management. It employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and includes SEO best practices via Yoast SEO plugin. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and includes Google reCAPTCHA to protect forms. However, no explicit security headers were detected, and there is no published security policy or incident response contact information. The cookie consent mechanism and privacy policy indicate GDPR compliance. WHOIS data was unavailable due to query limits, limiting domain registration verification. Overall, the website presents a trustworthy and professional online retail presence with good content quality and business credibility. Security posture is adequate but could be enhanced with additional headers and transparency. The absence of WHOIS data reduces confidence in domain legitimacy verification but does not detract from the site's operational professionalism.
- Latvia Tours SIA
bplus.lv
Transportation · Latvia
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Latvia Tours SIA operates as a specialized business travel management company based in Latvia, offering a comprehensive suite of services including corporate travel organization, event planning, travel policy development, and travel data analysis. The company positions itself as a regional leader with strong partnerships such as Lufthansa City Center and holds recognized certifications like Travellife Partner. Their target audience primarily consists of corporate clients, business travelers, and travel organizers seeking efficient and cost-effective travel solutions. Technically, the website employs legacy JavaScript libraries such as jQuery 1.8.3 and integrates Google Analytics and CookieConsent for tracking and compliance. While the site is functional and professionally designed, there are areas for improvement in mobile optimization and accessibility. Security posture is moderate; HTTPS is enforced and cookie consent is implemented, but the use of outdated libraries and lack of visible security headers present potential risks. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the website is credible and professional but would benefit from technical and security enhancements.
Hospitality · Latvia
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
MAIJA is a Latvian beauty salon business operating in Riga and Jurmala, offering hairdressing, hair coloring, manicure, pedicure, facial, and body procedures. The website is built on the Tilda platform, featuring embedded video content and modern web technologies. The site is mobile optimized and presents a professional design consistent with its industry focus. However, the absence of privacy and cookie policies, contact information, and WHOIS data limits the ability to fully assess compliance and legitimacy. Security posture is basic with no advanced headers or protections detected. Overall, the website serves its business purpose but requires improvements in security and compliance documentation to enhance trust and regulatory adherence.
Aģentūra VB Plusagencyvb.lv
Media · Latvia
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Aģentūra VB Plus is a full-service advertising agency based in Latvia, established in 1996 with roots dating back to 1991. The company offers a broad range of marketing and advertising services including design, printing, outdoor advertising, corporate gifts, video production, web design, campaigns, and press advertising. Their clientele primarily consists of Latvian and Baltic companies, supported by a membership in the Deutsch-Baltische Handelskammer. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, Google Maps API, and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and provides clear navigation and contact options. Security-wise, the site uses HTTPS but lacks explicit security headers and privacy/cookie policies, which are areas for improvement. The absence of WHOIS data due to query limits limits full domain legitimacy verification, but the website content and contact details suggest a legitimate business presence. Overall, the site scores moderately well in content quality, technical implementation, and business credibility, but privacy compliance and security posture could be enhanced.
VSIA Rīgas Cirkscirks.lv
Other · Latvia
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
VSIA Rīgas Cirks operates as a multifunctional arts center in Riga, Latvia, specializing in circus arts performances, education, and cultural events. It holds a prominent position in the Latvian and Baltic circus arts scene, offering a variety of services including shows, circus school classes, residencies, and community collaborations. The organization targets a broad audience interested in circus and performing arts, with multilingual website support enhancing accessibility. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several plugins for SEO, multilingual content, and GDPR compliance. The site is mobile-optimized and features good SEO practices. Performance is moderate with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the absence of security headers and explicit security policies suggests areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR. Overall, the website presents a professional and trustworthy digital presence for a public arts organization. The lack of WHOIS data limits domain legitimacy verification, but the content and business information align with a legitimate entity. Strategic recommendations include improving security headers, publishing incident response policies, and enhancing accessibility compliance.
El Pasoelpaso.lv
Other
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.elpaso.lv is a Wix-hosted site representing a business or brand named 'El Paso'. The site content is minimal and primarily technical, with no detailed business description or contact information visible. The technical infrastructure is based on Wix's Thunderbolt platform with standard Wix scripts and polyfills, indicating a modern but basic web presence. Security posture is moderate with HTTPS usage implied but lacking visible security headers or policies. Privacy and cookie policies are not found, and no contact or incident response information is provided, which limits compliance and trust. WHOIS data could not be retrieved due to query limits, restricting domain legitimacy assessment. Overall, the site appears functional but lacks comprehensive business and security transparency.
Studija FAstudijafa.lv
Media · Latvia
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Studija FA is a Latvian small business specializing in audio production services including event sound engineering, sound recording studio access, phonogram creation, and design studio offerings focused on design and interior items. The website presents a professional and consistent brand image targeting musicians, event organizers, and design clients. Technically, the site uses a Moze (Mozello) CMS platform with modern JavaScript libraries and is hosted on Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks explicit privacy policies, terms of service, and security headers. No WHOIS data was available due to query limits, but no suspicious indicators were found on the site. Overall, the site is safe, professional, and functional but could improve in privacy and security transparency.
Arta Citko | Graphic Designerartacitko.com
Other
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.artacitko.com appears to be a minimal Wix-hosted site with very limited content and no identifiable business information. The domain WHOIS data is missing, indicating the domain may be unregistered or expired, which raises significant concerns about legitimacy. The site lacks privacy, cookie, and terms of service policies, as well as any contact or security incident response information. Technically, the site uses standard Wix scripts and polyfills but does not implement advanced security headers or analytics tools. Overall, the security posture is weak, and the business credibility is low due to the absence of verifiable information.
Pole dance | Feel Good | Rīgapoledance.lv
Other
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.poledance.lv is a Wix-hosted site likely representing a pole dance studio or related business in Latvia. The site content is minimal and primarily consists of Wix platform boilerplate code with no clear business description, contact information, or policies. The technical infrastructure relies on Wix's hosting and JavaScript libraries, including Facebook Pixel for tracking. Security posture is basic with no advanced headers or policies detected, and WHOIS data is unavailable due to query limits, limiting trust assessment. Overall, the site lacks comprehensive privacy, cookie, and terms of service policies, and does not provide contact or incident response information, which impacts its credibility and compliance.
- Pole Dance School Riga
poledanceschool.lv
Education · Latvia
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Pole Dance School Riga is a specialized pole dance and sports school based in Riga, Latvia, offering a variety of classes including pole dance, stretching, body ballet, pilates, and pole sport. The school caters to both adults and children, with unique offerings such as training children from age 7 and organizing events like hen parties and wedding dance choreography. The website is built on the Tilda CMS platform, featuring modern design elements and animations, and is hosted on Tilda's CDN infrastructure. While the site is visually appealing and provides clear information about services, it lacks critical privacy and cookie policies, and no WHOIS data was available to verify domain registration details due to query limits. Security headers are not detected, and no analytics or tracking scripts are evident, indicating a minimal tracking approach. Overall, the site presents a professional small business with moderate technical maturity but has room for improvement in privacy compliance and security posture.
SIA Krogzemekrogzeme.lv
Other · Latvia
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
SIA Krogzeme is a Latvian agricultural company specializing in commercial blackcurrant cultivation, seedling production, orchard establishment, and related agricultural machinery dealership. The company also offers frozen berry storage and processing services. Their market position is that of a local leader in the Baltic region for blackcurrant commercial cultivation and agricultural equipment sales. The website is built on the Mozello CMS platform, leveraging modern technologies such as jQuery, Google Analytics, and Amazon CloudFront CDN, indicating moderate digital maturity. The site is mobile-optimized and provides clear navigation and relevant content for its target audience of commercial growers and agricultural businesses. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and privacy compliance elements. WHOIS data could not be retrieved, limiting domain trust verification. Overall, the website is professional and trustworthy with room for improvement in privacy and security transparency.
Baltik Body Artbaltikbodyart.com
E-commerce · Lithuania
62Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Baltik Body Art is a small Lithuanian-based e-commerce and physical retail business specializing in tattoo, permanent makeup (PMU), and piercing supplies. The website offers a variety of products including tattoo machines, inks, pigments, and accessories, targeting professional artists and enthusiasts in the body art industry. The business positions itself as a niche supplier with a physical store in Vilnius and an online shopping platform. Technically, the website is built on PrestaShop, uses common third-party scripts such as YouTube Player API and Smartsupp chat, and demonstrates good content quality and mobile optimization. However, the absence of visible privacy, cookie, and terms of service policies, as well as missing WHOIS registration data, limits the overall trust and compliance posture. Security headers and advanced security configurations are not evident, indicating room for improvement in security best practices. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures.
- Foral Patent Law Offices
foral.lv
Other · Latvia
65Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Foral Patent Law Offices is a small, established intellectual property law firm based in Latvia, founded in 1991. The company specializes in trademarks, patents, industrial designs, and related legal services including enforcement and litigation. The website presents a professional image with clear service descriptions and a consistent brand presence. Technically, the site uses common JavaScript libraries such as jQuery and integrates Google Maps API for location services. Cookie consent mechanisms are implemented, indicating attention to privacy compliance. However, no WHOIS data was available due to query limits, limiting domain legitimacy verification. Security headers and advanced security policies are not evident, suggesting room for improvement in security posture. Overall, the website is functional, professional, and trustworthy for its business domain.
Infradoc Europe Ltd.infradoc.com
Retail · Latvia
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Infradoc Europe Ltd. is a small European manufacturer and retailer specializing in high-quality infrared saunas made from Western Red Cedar. Established in 2004, the company offers a range of sauna models including the innovative Nano 360° series, targeting consumers and dealers across Europe. Their business model combines manufacturing with direct retail and dealer partnerships, emphasizing product quality, customization, and customer support. The website reflects a professional presence with clear navigation, multilingual options, and active social media engagement. Technically, the website employs legacy JavaScript libraries such as jQuery 1.6 and Modernizr 1.6, with Google Analytics for tracking. Hosting and DNS are managed via Cloudflare, though DNSSEC is not enabled. The site shows moderate performance and basic mobile optimization. SEO practices are adequate with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide explicit security or incident response policies. The use of outdated JavaScript libraries poses potential vulnerabilities. Privacy compliance is partial; a privacy policy and terms of service exist, but no cookie consent mechanism is implemented, which may affect GDPR adherence. Overall, the website is functional and trustworthy with moderate security posture. Strategic improvements in security headers, updated libraries, and privacy compliance would enhance the site’s resilience and user trust.
Other
57Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The domain balticexpert.lv currently presents no accessible website content, with an empty HTML body and no metadata or structured data available. The WHOIS lookup failed due to query limits, preventing extraction of registrar, creation, expiry, or registrant information. This lack of data and content suggests the website is either inactive, under maintenance, or blocked by security mechanisms. The absence of HTTPS and security headers further weakens the security posture. No privacy, cookie, or terms of service policies are present, and no contact or business information is available, limiting trust and credibility. Overall, the site is not currently suitable for business or user engagement.
- LLatitude Yachts
latitudeyachts.eu
Transportation · Latvia
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Latitude Yachts is a specialized shipyard established in 2002 in Latvia, focusing on the construction of high-quality yachts including superyachts such as ocean-class trimarans. The company has a strong market position within the luxury yacht niche, supported by industry awards and certifications like ISO 9001:2008. Their website reflects a professional and consistent brand image with clear presentation of services and contact information. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and HTMX, with moderate performance and good mobile optimization. Security posture is moderate with use of CAPTCHA and CSRF tokens on forms but lacks visible HTTP security headers and cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.
SIA AKTIVPARKSokej.lv
Retail · Latvia
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Okej.lv is an established Latvian retailer specializing in sports and leisure products, offering a wide range of items including clothing, footwear, bicycles, winter equipment, and accessories. The company operates both physical stores in Sigulda and Jēkabpils and an online e-commerce platform, targeting general consumers interested in sports and outdoor activities. The website is well-structured with comprehensive product categories and clear navigation, supporting a positive user experience. Technically, the site uses common web technologies such as jQuery and Google Analytics, with HTTPS enforced, indicating a basic but solid digital infrastructure. However, the absence of privacy and terms of service pages, as well as missing security headers, suggests room for improvement in compliance and security posture. The lack of WHOIS data limits domain trust verification, but the visible business information and contact details support legitimacy. Overall, the site presents a professional retail presence with moderate technical and security maturity.
Manufacturing · Latvia
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ESP European Steel Production is a small Latvian metalworking company specializing in the production of non-standard steel, stainless steel, and aluminum structures. The company offers a full production cycle from design to painting, targeting industrial and manufacturing clients. The website is built on WordPress with basic content and navigation, reflecting a modest digital presence. Technical infrastructure includes outdated JavaScript libraries, which may pose security risks, and lacks modern security headers and privacy policies. The security posture is limited, with no evident incident response or data protection frameworks. Overall, the website is functional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and resilience.
adrokaadroka.lv
Other
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website 'adroka.lv' presents minimal original content and primarily embeds an external Wix site. The lack of WHOIS data due to query limits prevents verification of domain registration details, which limits trust and legitimacy assessment. The site lacks essential business information, contact details, and privacy or cookie policies, indicating low digital maturity and poor compliance posture. Technically, the site uses outdated web building software (Incomedia WebSite X5 Evo 2019) and includes basic scripts like jQuery but lacks modern security headers or HTTPS enforcement evidence. Security posture is weak, with no visible best practices implemented and potential risks from embedding external content without sandboxing. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility, resulting in a high-risk profile with recommendations to improve HTTPS usage, add privacy and cookie policies, provide clear contact information, and update technical infrastructure.
SIA Tukuma Metāls LTDtukumametals.lv
Manufacturing · Latvia
62Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
SIA Tukuma Metāls LTD is a small Latvian company established in 2004, specializing in the purchase and processing of ferrous and non-ferrous scrap metals. The company also provides services such as construction waste removal, container rental, industrial gas sales, and vehicle recycling. Their market position is competitive within the Tukums region, targeting both businesses and individual customers. The website is built on modern technologies including React and Next.js, offering good mobile responsiveness and user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy policy is present and GDPR compliant at a basic level. Overall, the company presents a trustworthy and professional online presence with clear contact information and social media engagement.
SIA “ALŪKSNES NAMI”aluksnesnami.lv
Government · Latvia
53Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
SIA “ALŪKSNES NAMI” is a 100% municipally owned company by Alūksnes novada pašvaldība, focused on managing residential properties and communal services within the Alūksne region of Latvia. The website provides detailed information about their services, news updates, and integrates with the Bill.me platform for electronic billing and meter reading, indicating a modern approach to customer service. The company targets local residents and property owners, positioning itself as a trusted municipal service provider. Technically, the website uses common web technologies such as jQuery, Slick Carousel, and FontAwesome, with good mobile optimization and accessibility features. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and incident response information. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website is professional, trustworthy, and serves its intended audience effectively.
Manufacturing · Latvia
69Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Liepājas speciālās ekonomiskās zonas SIA LPSP is a Latvian small manufacturing company specializing in laser cutting and metal processing services including CNC turning, milling, welding, bending, drilling, and surface finishing. Founded in 2018, the company has grown to a team of about 20 professionals and collaborates with partners such as Swedan Partners. The website targets industrial clients seeking quality metal processing solutions with competitive pricing and timely delivery. Technically, the website is built on the Multiscreensite platform using modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent implemented, though additional security headers and explicit incident response policies are absent. WHOIS data is unavailable due to query limits, but the domain appears consistent with the business profile. Overall, the website presents a professional and trustworthy image suitable for its market niche.
SIA "AD Promotion"labaapkure.lv
Energy · Latvia
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Laba apkure is a Latvian small business specializing in the supply, design, installation, and servicing of liquefied propane gas heating systems. The company positions itself as a certified provider of modern, safe, and economical gas heating solutions for residential and commercial customers across Latvia. Their services include project development, installation, warranty, and post-warranty maintenance, emphasizing convenience and environmental friendliness. The website content is well-structured and professionally presented, targeting customers seeking efficient heating alternatives where natural gas infrastructure is unavailable or uneconomical. Technically, the website employs a modern JavaScript stack including jQuery, Swiper.js, and Google Analytics for user tracking. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. No CMS or hosting provider details are evident. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and privacy policies. The absence of privacy and cookie policies indicates a gap in compliance with GDPR and related regulations. From a security perspective, the site shows no signs of blocking or WAF interference, and no vulnerabilities or exposed sensitive data were detected in the HTML content. However, the lack of security headers and incident response information suggests room for improvement. WHOIS data could not be retrieved due to query limits, but no suspicious patterns were found on the site. Overall, the domain appears legitimate and consistent with the business claims. The overall risk is moderate with recommendations to enhance privacy compliance, implement security headers, and provide incident response contacts to improve trust and security posture.
Other
61Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website at www.linde-gas.lv/shop/lv/lv-ig/home is currently inaccessible with only a minimal placeholder HTML content stating 'Contact Linde Web Admin!'. The WHOIS lookup failed due to query limits, preventing extraction of domain registration details. This lack of accessible content and metadata indicates the site is either under maintenance, protected by access restrictions, or blocked by a security mechanism. Consequently, no business, contact, or compliance information is available for analysis. The absence of HTTPS, security headers, and any forms or scripts further limits the technical and security assessment. Overall, the site presents a very low digital maturity and security posture, with critical gaps in accessibility and transparency.
Latgales logu ražotnelatgaleslogs.lv
Manufacturing · Latvia
54Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Latgaleslogs.lv represents a Latvian manufacturing company specializing in the production of PVC and aluminium windows, doors, and garage doors, primarily serving the Rēzekne region. The company emphasizes high-quality German profiles and fittings, offering additional products such as window sills, blinds, and mosquito nets. The website is professionally designed with a clear business focus and targets a general audience interested in construction and home improvement products. Technically, the site uses modern JavaScript libraries and tracking tools including Google Tag Manager and Facebook Pixel, and is built on the Creatium CMS platform. The site includes a cookie consent mechanism indicating some level of GDPR compliance, although no explicit privacy policy or terms of service pages were found. Security posture is moderate with HTTPS enabled but lacking security headers and explicit incident response information. WHOIS data could not be retrieved due to query limits, limiting domain trust assessment. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.
- TTere SIA
balticid.lv
Other · Latvia
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Baltic Id, operated by Tere SIA, is a Latvian business specializing in strategic investment attraction, management consulting, and corporate communication services. The website targets businesses seeking to enhance investment projects, corporate governance, and communication strategies, positioning itself as a niche regional player. The site content is primarily in Latvian with options for English and Russian, reflecting a regional focus. Key services include investment project development, management consulting, and corporate communication strategy development. Technically, the website uses older technologies such as jQuery 1.8.2 and integrates Google Analytics and Google Tag Manager for tracking. The site shows moderate performance and basic mobile optimization but lacks modern security headers and updated libraries, which poses potential security risks. No CMS or hosting provider information is discernible from the content. From a security perspective, the site lacks visible security headers and uses an outdated JavaScript library version, increasing vulnerability exposure. There is no evidence of privacy or cookie policies, GDPR compliance indicators, or incident response contacts, which are critical for regulatory compliance and user trust. The WHOIS data could not be retrieved due to query limits, but the website's copyright date suggests the domain age aligns with the business history. Social media presence on LinkedIn, Facebook, and Twitter adds trust signals. Overall, the website is functional and professional but requires improvements in security posture, privacy compliance, and technical modernization to enhance trustworthiness and regulatory adherence.
Erker Real Estateerker.lv
Real Estate · Latvia
63Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Erker Real Estate is a Latvian real estate agency specializing in residential and commercial property sales, rentals, and investment opportunities. The company targets local buyers, sellers, and investors, offering a comprehensive catalog of properties and free consultations. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Latvian, Russian, and English languages. Social media integration across major platforms supports their market presence. Technically, the website uses modern web technologies including JavaScript, CSS, and Flickity for interactive carousels. Cookie consent and privacy policies indicate GDPR compliance efforts. The site is served over HTTPS with no visible security issues, though security headers are not explicitly detected. The absence of WHOIS data limits domain trust verification, but the website's professional appearance and business information suggest legitimacy. Security posture is moderate with HTTPS and cookie consent implemented, but lacks published security policies or incident response contacts. No vulnerability disclosure or security.txt files were found. Overall, the site is secure for general users but could improve transparency and security best practices. The overall risk is low with recommendations to enhance security headers, publish incident response info, and implement vulnerability disclosure mechanisms to strengthen trust and compliance.
DMC VIA Balticdmcviabaltic.eu
Hospitality · Latvia
53Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
DMC VIA Baltic is a specialized B2B travel agency focused on providing tailored travel programs and services in the Baltic region, including Lithuania, Latvia, and Estonia. Established in 2010, the company offers a range of services such as individual and group tours, incentive travel, health tours, and comprehensive travel planning including accommodation, transfers, and qualified guides. Their market position is that of a regional expert catering to business clients in the tourism sector. The website reflects a professional digital presence built on WordPress with Elementor and integrates modern SEO and security tools like Rank Math and Google reCAPTCHA. Security posture is solid with HTTPS and form protections, though explicit privacy and cookie policies are missing, representing a compliance gap. Overall, the site is well-structured, user-friendly, and trustworthy, with clear contact information and business credentials.
OC VISIONlornete.lv
Retail · Latvia
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Lornete is a specialized optical salon based in Riga, Latvia, offering exclusive luxury eyewear brands and professional optometry services since 1996. The website presents a well-structured retail business focused on high-end customers seeking both fashion and vision quality. Technically, the site is built on WordPress 6.2 with standard modern tools like Google Tag Manager and cookie consent scripts, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response information. Privacy compliance is addressed with visible privacy and cookie policies, though GDPR compliance could be further enhanced. Overall, the website is professional and trustworthy, but the absence of WHOIS data limits full domain legitimacy verification.
Mākslas galerija DAUGAVAgalerijadaugava.lv
Other · Latvia
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Mākslas galerija DAUGAVA is a small art gallery based in Riga, Latvia, specializing in exhibitions and sales of contemporary and 20th century art. The website provides clear contact information, including physical address, phone numbers, and emails, as well as social media links to Facebook and Instagram, indicating an active local presence. The business model focuses on retail art sales and exhibitions targeting art enthusiasts and collectors in the region. Technically, the website uses common JavaScript libraries such as jQuery and Fancybox, with a moderate performance and good mobile optimization. However, there is no evidence of a CMS or advanced frameworks, suggesting a simple custom-built site. Security posture is weak due to lack of visible HTTPS enforcement, security headers, and privacy policies. No WHOIS data could be retrieved due to query limits, limiting domain trust verification. Overall, the site is functional and professional but lacks important security and privacy compliance features.
OptikasCentrsoptikascentrs.lv
Retail · Latvia
66Medium
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
OptikasCentrs.lv is a Latvian retail and service business specializing in eyewear products including eyeglass frames, contact lenses, sunglasses, and related accessories, as well as eye care services such as vision testing and ophthalmologist consultations. The company operates multiple physical stores across Latvia and positions itself as a leading local provider with competitive pricing and a broad product range. The website reflects a medium-sized business with a clear focus on the Latvian market and consumer audience seeking optical solutions. Technically, the website is built on WordPress and employs modern web technologies such as jQuery, Slick Carousel for sliders, and Google Analytics for visitor tracking. The site is mobile-optimized with good SEO practices and structured data markup enhancing search engine visibility. Performance is moderate, with image optimization via EWWW Image Optimizer. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and does not provide visible privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the security posture is adequate but could be improved with additional headers and compliance documentation. The overall risk is moderate with no signs of malicious content or suspicious behavior. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, implementing security headers, adding a security.txt file for vulnerability reporting, and improving incident response transparency to enhance trust and compliance.
- SPS
sps.ink
Manufacturing · Latvia
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
SPS is a specialized e-commerce business focused on supplying printing industry consumables such as inks, coatings, and auxiliary chemicals. Operating primarily in Latvia, the company leverages the PrestaShop platform to provide a structured online catalog and shopping experience targeting B2B customers in the manufacturing and printing sectors. The website demonstrates a moderate level of digital maturity with a professional design, mobile optimization, and integration of social media marketing tools like Facebook SDK. However, it lacks critical privacy and cookie policies, which are essential for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding DNSSEC and security headers. The domain registration uses privacy protection, which is common and justified for small businesses, and the domain age aligns with the company's operational timeline.
AP-Helpap-help.lv
Other · Latvia
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
AP-Help is a Latvian company specializing in fire safety, environmental, and occupational safety products and services. Their offerings include fire extinguishers, maintenance, audits, system design, and training, targeting businesses and organizations in Latvia. The website is professionally designed, mobile-optimized, and uses modern analytics and marketing tools such as Google Analytics and Facebook Pixel. However, it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is generally good with HTTPS enabled, but no security headers were detected, and WHOIS data could not be retrieved to verify domain legitimacy. Overall, the site presents a trustworthy business presence with room for improvement in privacy compliance and security hardening.
Other
63Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website www.siapdh.lv is hosted on the Wix platform and primarily consists of standard Wix-generated content and scripts. The site lacks visible business information, contact details, privacy policies, or terms of service, which limits its transparency and trustworthiness. The absence of WHOIS data due to query limits further restricts domain legitimacy assessment. Technically, the site uses modern polyfills and Wix's infrastructure but lacks advanced SEO, accessibility, and security headers. No forms or data collection mechanisms are detected, indicating minimal user interaction. Overall, the site appears to be a basic Wix-hosted site with limited content and business presence. From a security perspective, the site uses HTTPS (implied by Wix hosting) but lacks explicit security headers and policies. No incident response or vulnerability disclosure information is present. Privacy compliance is minimal with no cookie or privacy policies detected. The site does not appear to be blocked by any WAF or security challenge, allowing full content access. The overall risk assessment is moderate to low due to limited content and interaction, but the lack of transparency and policies suggests room for improvement. Strategic recommendations include adding privacy and cookie policies, contact information, security headers, and improving SEO and accessibility to enhance trust and compliance.
Satalit SIAsatalit.lv
Telecommunications · Latvia
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Satalit SIA is a Latvian small business specializing in video surveillance, low-voltage networks, access control, optical networks, fire safety, and security systems. The company targets businesses and organizations requiring security and network infrastructure solutions. The website is built on the Wix platform, leveraging modern web technologies and includes structured data for local business identification. While the technical infrastructure is adequate with HTTPS and some security hardening scripts, explicit security headers and privacy policies are missing, which could be improved to enhance compliance and trust. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information support a legitimate business presence. Overall, the site is professional and safe for general audiences.
Garant Safety SIAgarantsafety.lv
Transportation · Latvia
75Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Garant Safety SIA is a small Latvian company specializing in safety equipment and inspection services for maritime applications, including lifeboats, davits, liferafts, firefighting systems, and personal protective equipment compliant with SOLAS and IMO standards. The company targets maritime industry professionals, ship owners, and operators, positioning itself as a niche provider in the transportation sector. The website is professionally designed using WordPress and WooCommerce, with good SEO practices and mobile optimization. However, explicit privacy and terms of service policies are not found, and WHOIS data is unavailable due to query limits, which limits full trust verification. Security posture is moderate with HTTPS enabled but lacking security headers and vulnerability disclosure mechanisms.
MYBOAT (SIA Klimatika)myboat.lv
Transportation · Latvia
57Medium
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
MYBOAT (SIA Klimatika) operates as the official representative of Finnish boat manufacturers in Latvia, specializing in the sale of high-quality boats, motorboats, and cutters. The company targets general consumers interested in boating and water activities, emphasizing family and recreational use. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript libraries, indicating a moderate level of technical maturity. While the site is mobile-optimized and presents professional content, it lacks explicit privacy and cookie policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enforced but missing key security headers and vulnerability disclosures. The absence of WHOIS data limits domain trust verification, though the business information and structured data suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and transparency measures.
Keymasterkeymaster.lv
Transportation · Latvia
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Keymaster.lv is a Latvian-based small business specializing in automotive and motorcycle key and lock services, including repair, programming, replacement, and door opening. The company positions itself as a leading service provider in Latvia with over 10 years of experience and a strong focus on quality and customer satisfaction. Their website reflects a professional and modern digital presence built on WordPress with Elementor, enhanced by SEO and cookie consent tools. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and incident response transparency. The absence of WHOIS data limits full trust assessment, but the website's content and structure indicate a legitimate and credible business. Overall, the website scores well in content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture.
Retail · Latvia
66Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Auction house VITBER art & antiques, operated by SIA “Provenance”, is an established online auction platform specializing in art, antiques, and collectibles. The website offers a comprehensive archive of past auctions and current auction lots, targeting collectors and enthusiasts primarily in Latvia and internationally. The business model centers on facilitating online auctions with a focus on niche collectible markets. Technically, the website employs common analytics and tracking tools such as Google Analytics and Facebook Pixel, uses jQuery Fancybox and Slick Carousel for UI components, and is moderately optimized for mobile and SEO. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Privacy and cookie policies are present and appear GDPR compliant. The absence of WHOIS data reduces domain trustworthiness, but the website's professional presentation and clear contact information mitigate some concerns. Overall, the site is functional, professional, and trustworthy for its business purpose.
- BLRT Grupp
elmemetall.eu
Manufacturing · Estonia
67Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Elme Metall, a part of BLRT Grupp, is a medium-sized manufacturing company specializing in rolled steel products and processing services. The company operates multiple service centres and warehouses across five countries, targeting industrial and commercial clients in sectors such as energy, manufacturing, and transportation. Their business model focuses on providing comprehensive steel product solutions tailored to customer needs, supported by advanced equipment and logistics capabilities. The website reflects a professional and consistent brand presence with multilingual support and clear contact information. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. Security posture is adequate with HTTPS and cookie consent implemented, though security headers and explicit policies are lacking. Overall, the site is trustworthy and well-positioned in its market segment.
- ALL Recycling SIA
recycling.lv
Other · Latvia
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ALL Recycling SIA operates a website focused on recycling and waste management services in Latvia. The company targets both businesses and individuals interested in sustainable waste disposal and recycling solutions. The website is built on WordPress and employs common plugins such as Yoast SEO, WPML for multilingual support, and Cookie Law Info for GDPR compliance. Google Tag Manager is used for analytics and tracking purposes. The site demonstrates good content quality, clear navigation, and mobile responsiveness, providing a professional user experience. However, explicit contact details like emails and phone numbers are not directly visible, relying primarily on contact forms.
- BAZA DANCE COMPANY
bazadance.lv
Other · Latvia
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
BAZA DANCE COMPANY operates as a dance studio based in Riga, Latvia, offering a wide range of dance styles and classes for children and adults. The website is professionally designed with multimedia content showcasing their services and instructors. The company targets dance enthusiasts seeking training in styles such as hip-hop, breaking, vogue, and stretching. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and formal privacy policies. Overall, the site presents a trustworthy and professional image but would benefit from enhanced compliance documentation and security hardening.
SIA Baltijas Durvisbaltijasdurvis.eu
Retail · Latvia
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
BaltijasDurvis.lv is a Latvian-based small retail and manufacturing business specializing in interior and exterior doors, fire-resistant doors, greenhouses, and related finishing materials. The company operates an e-commerce platform built on the CS-Cart system, offering a comprehensive product catalog and installation services. Their market position is regional, targeting homeowners and construction professionals within Latvia. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technical infrastructure includes modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and secure form handling, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the business appears legitimate and trustworthy, though WHOIS data is unavailable for verification due to query limits.
SIA Scandmetallscandmetall.lv
Manufacturing · Latvia
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
SIA Scandmetall is a Latvian metal processing company established in 2011, specializing in a broad range of metalworking services including CNC turning, manual turning, CNC milling, manual milling, bending, threading, welding, sawing, sharpening, and drilling. The company targets industrial and business clients requiring quality metal fabrication and machining services. The website presents a professional and consistent brand image with clear contact information and service descriptions, positioning Scandmetall as a reliable local manufacturing service provider. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile-optimized with good navigation and content relevance. However, no CMS or hosting provider information is evident, and performance is moderate. Security headers are not detected, and privacy and cookie policies are absent, indicating room for improvement in compliance and security posture. From a security perspective, the site uses HTTPS URLs, but the lack of visible security headers and absence of privacy and cookie policies suggest moderate security maturity. No vulnerabilities or exposed sensitive data were found in the HTML content. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site appears trustworthy but would benefit from enhanced security and privacy measures. The overall risk is moderate with no critical issues detected. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, adding incident response contacts, and auditing third-party scripts. These steps will improve compliance, user trust, and security resilience.
- Verkter
verkter.fi
Retail · Finland
65Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Verkter.fi is a Finnish e-commerce retailer specializing in power tools and accessories from well-known brands such as Bosch, Makita, and DeWalt. The website offers a broad catalog of over 70,000 products targeting professional tradespeople and individual consumers in Finland. The business operates primarily online with a medium-sized market presence in the retail sector. Technically, the site is built on the Magento platform and integrates modern analytics and marketing tools including Google Analytics, Microsoft Clarity, and Trustpilot for customer reviews. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS, uses standard security headers, and implements AJAX form validation, reflecting a good security posture. However, it lacks a dedicated security policy and incident response contact information, which are recommended for enhanced transparency and compliance. Privacy compliance is addressed with visible cookie consent mechanisms and a basic privacy policy in Finnish. Overall, the domain registration data aligns well with the website's business claims, supporting its legitimacy and trustworthiness.
- Tūrisma aģentūra KOLUMBS
letasaviobiletes.lv
Transportation · Latvia
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Letasaviobiletes.lv is an established Latvian online travel agency operated by Tūrisma aģentūra KOLUMBS, offering flight bookings, hotel reservations, car rentals, and group travel services. The website aggregates flight options from multiple airlines, targeting travelers seeking affordable flights primarily in Europe, Asia, and the USA. The company has over 20 years of experience in the tourism sector, positioning itself as a reliable and trusted travel service provider in Latvia. Technically, the website uses a Joomla CMS platform with a modern tech stack including jQuery, MooTools, Pikaday datepicker, and Foundation CSS framework. It integrates popular analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar for user behavior tracking and marketing optimization. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses secure forms with input validation. However, no explicit HTTP security headers were detected, which is a recommended improvement. Privacy and cookie policies are present and appear GDPR compliant, with a visible cookie consent banner. No vulnerabilities or exposed sensitive data were found in the HTML content. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website presents a professional and trustworthy online travel service with a solid technical foundation and compliance posture. Strategic improvements in security headers and incident response disclosures would enhance its security maturity and trustworthiness.
Veselības māja Olīvavm-oliva.lv
Healthcare · Latvia
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Veselības māja Olīva is a healthcare service provider based in Latvia, offering a range of medical services primarily focused on families and children. The website presents a professional image with clear listings of specialists including ophthalmologists, neurologists, allergologists, pediatricians, and other medical professionals. The business targets local patients seeking quality healthcare services in a comfortable environment. Technically, the website is built on the Wix platform, leveraging standard Wix scripts and Google Analytics for visitor tracking. The site is mobile optimized and uses HTTPS, ensuring basic security standards. However, the absence of privacy and cookie policies, as well as lack of WHOIS data transparency, limits the overall trust and compliance posture. Security headers and incident response contacts are not present, indicating room for improvement in security maturity. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security practices.
Olīve Virtuves Mēbelesolivemebeles.lv
Real Estate · Latvia
71Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Olīve Virtuves Mēbeles is a Latvian small business specializing in custom kitchen furniture manufacturing and installation, targeting residential customers seeking personalized kitchen solutions. The website demonstrates a strong market position locally with emphasis on quality craftsmanship and customer satisfaction, supported by numerous positive testimonials. Technically, the site is built on modern frameworks such as Next.js and React, with good mobile optimization and fast performance. The presence of cookie consent mechanisms and privacy policy indicates attention to privacy compliance. Security posture is generally good with HTTPS enforced, though security headers are not visibly configured, and no incident response or security policy pages are present. Overall, the site is professional, trustworthy, and well-maintained, though WHOIS data is unavailable due to query limits, limiting domain registration verification.
IK "CITAROTA"citarota.lv
Retail · Latvia
65Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
CitaRota is a small Latvian retail business specializing in traditional Latvian clothing and accessories, including linen dresses, scarves with Lielvārde belt patterns, wool coats, men's clothing, and jewelry. The company operates an e-commerce platform built on WordPress and WooCommerce, targeting customers interested in authentic Latvian cultural products with worldwide shipping options. The website is professionally designed with consistent branding and good content quality, supporting both Latvian and English languages. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site presents a trustworthy and professional online presence for a niche retail business.
Meimelinmeimelin.lv
E-commerce · Latvia
70Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Meimelin is a small Latvian e-commerce retailer specializing in jewelry crafted with Swarovski crystals and natural semi-precious stones. The website is built on the Shopify platform using the Canopy theme, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Klaviyo, and Hotjar. The site demonstrates good design quality, clear navigation, and mobile optimization, providing a professional user experience. Security posture is solid with HTTPS enforcement and use of reCAPTCHA Enterprise, though explicit security headers and policies are not fully visible. Privacy and cookie policies are not clearly presented, which may impact compliance. Overall, the site appears legitimate and trustworthy but would benefit from enhanced transparency and security documentation.