Security Directory

E

European Bridge League

eurobridge.org

42

The European Bridge League (EBL) is a non-profit organization dedicated to administering the mind sport Bridge across Europe. The website serves as a central hub for governance, competitions, education, and community engagement for bridge players and national federations. The site is well-structured with clear navigation and consistent branding, targeting bridge enthusiasts, youth, and women players. Technically, the website is built on WordPress with a modern plugin stack including WPBakery, Slider Revolution, and EventON, and integrates Google Analytics and reCAPTCHA for analytics and security. While the site is accessible and mobile-optimized, it lacks explicit privacy and terms of service pages, and no direct contact information is found in the provided content. Security posture is moderate with some best practices like reCAPTCHA and cookie consent implemented, but missing security headers and unknown SSL status present risks. The WHOIS data is unavailable or malformed, limiting domain trust analysis. Overall, the website is functional and professional but would benefit from enhanced security measures and clearer privacy compliance documentation.

N

Net Affinity Ltd.

netaffinity.io

62

Net Affinity Ltd. operates an application platform accessible at app.netaffinity.io, likely serving the hospitality or travel technology sector. The website is primarily a login portal with minimal public-facing content, indicating a focus on existing customers or internal users. The technical infrastructure includes modern iconography via Font Awesome and bot mitigation through Google reCAPTCHA, reflecting a baseline digital maturity. However, the absence of visible privacy, cookie, or terms of service policies, along with no contact information, limits transparency and user trust. The WHOIS data is unavailable due to a malformed request or privacy protection, which further constrains trust assessment. Security measures are basic but include HTTPS and reCAPTCHA, though security headers and advanced protections are not evident. Overall, the site presents a moderate risk profile with room for improvement in transparency, compliance, and security hardening.

E

Exposure Labs Inc.

exposure.co

66

Exposure Labs Inc. operates Exposure.co, a specialized visual storytelling platform designed for photographers and visual storytellers to create and share photo and video stories. The company targets a diverse audience including hobbyists, professionals, brands, nonprofits, and sports teams, positioning itself as a niche leader in media publishing with a subscription-based SaaS business model. The platform offers rich features such as unlimited photo uploads, media embedding, custom Exposure sites, and audience-building tools, supported by a clean, modern, and mobile-optimized website design.

T

Twistoo SIA

twistoo.co

64

Twistoo SIA operates a specialized SaaS platform focused on gamification and video marketing solutions tailored for e-commerce businesses. Their platform enables clients to engage users through gamified promotions, educational short videos, and offline QR code games, supported by a user dashboard for campaign management and analytics. The company appears to be a small but professional entity founded in 2021, with a clear market focus on enhancing e-commerce marketing KPIs. Technically, the website is built with modern web technologies including Cloudflare DNS, Google reCAPTCHA for form security, and interactive JavaScript libraries like Swiper.js. The site is mobile-optimized and presents content with good design and navigation clarity, although accessibility and SEO could be further improved. Hosting and DNS are managed via Cloudflare, but DNSSEC is not enabled, representing a minor security gap. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms from bots. Domain registration is privacy protected but consistent with the business profile. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of published security policies or incident response contacts suggests room for maturity in security governance. Overall, Twistoo presents a credible and professional online presence with a moderate security posture and good business credibility. Strategic improvements in DNS security, security headers, and transparency around security policies would enhance trust and compliance.

P

Peace and Sport

peace-sport.org

45

Peace and Sport is an established international non-profit organization founded in 2007, dedicated to promoting peaceful, inclusive, and equitable communities through sport. The organization leverages a network of high-profile sports champions and global partnerships to advance peacebuilding initiatives worldwide. Their website reflects a professional and consistent brand image, with clear messaging and active engagement channels including social media and event forums. Technically, the site is built on WordPress with modern plugins and themes, providing good mobile responsiveness and SEO optimization. Security posture is strong with HTTPS and reCAPTCHA integration, though explicit security headers and privacy policies are lacking. The absence of WHOIS data limits domain trust verification but does not detract significantly from the organization's credibility given its public profile and external trust signals. Overall, the website serves as an effective platform for advocacy and stakeholder engagement in the peace through sport sector.

V

V360 agency

vvunk.ee

43

V360 Agency OÜ is a small Estonian digital agency specializing in web development, e-commerce solutions, branding, and full digital marketing services. The company positions itself as a creative and professional partner for businesses seeking to elevate their digital presence. Their website showcases a portfolio of projects and client testimonials, indicating a trusted market position within their niche. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and Tippy.js, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS and reCAPTCHA, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.

E

Ettevõtlusnädal 2025

ettevotlusnadal.ee

39

Ettevõtlusnädal 2025 is a prominent Estonian nationwide entrepreneurship event organized annually by regional development centers to foster entrepreneurial spirit and support business startups. The website serves as an information hub for event programs, regional trainings, and inspirational content targeting entrepreneurs and aspiring business owners. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and security, including Google Tag Manager and reCAPTCHA. The site is well-optimized for mobile and SEO, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site reflects a trustworthy and professional digital presence for a non-profit event organization.

T

Tartumaa Omavalitsuste Liit

tartumaa.ee

51

Tartumaa Omavalitsuste Liit is a regional governmental association representing municipalities in Tartu County, Estonia. The organization focuses on local governance, regional cooperation, education, welfare, culture, and strategic development. Their website serves as an information hub for residents, officials, and partners, providing news, event updates, and resources relevant to the county's municipalities. The association operates as a non-profit entity with a clear regional focus and a small organizational size. Technically, the website is built on the Voog CMS platform and utilizes modern web technologies including jQuery, Vue.js, Axios, Google Fonts, and Google Maps API. The site is mobile-optimized with a clear navigation structure and moderate performance. Security measures include HTTPS enforcement and Google reCAPTCHA integration on the contact form, though additional security headers and policies could enhance the security posture. From a security perspective, the site shows good baseline practices but lacks comprehensive privacy and cookie policies, as well as vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's governmental nature, supporting legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and serves its intended audience effectively. However, improvements in privacy compliance and security hardening are recommended to align with best practices and regulatory requirements.

E

Eurochild AISBL

eurochild.org

55

Eurochild AISBL operates as the largest network of organizations and individuals dedicated to child rights advocacy across Europe. Founded in 2003 and headquartered in Belgium, Eurochild focuses on influencing policies, building civil society capacity, and facilitating knowledge exchange underpinned by the UN Convention on the Rights of the Child. The website reflects a mature digital presence with a WordPress CMS, modern front-end libraries, and a moderate performance profile. Security posture is strong with HTTPS enforced, reCAPTCHA integration, and GDPR-compliant cookie consent, though improvements are recommended in DNSSEC and security headers. Overall, the organization demonstrates high legitimacy and trustworthiness with consistent WHOIS data and active social media engagement.

T

Tervisekassa

haigekassa.ee

66

Tervisekassa is a government-related healthcare organization in Estonia responsible for managing national health insurance and providing various health-related benefits and services to insured individuals. The website serves a broad audience including individuals, employers, healthcare providers, and vulnerable groups such as Ukrainian refugees. It offers comprehensive information on health insurance, medical services, preventive screenings, and related administrative procedures. The site is well-structured, multilingual, and integrates modern digital tools to enhance user experience and accessibility. Technically, the website is built on the Drupal CMS platform and leverages several third-party services including Google Analytics, Google Tag Manager, Google reCAPTCHA, Siteimprove, and tawk.to for analytics, marketing, security, and user support. The site is hosted behind Cloudflare DNS, uses HTTPS, and implements a robust cookie consent mechanism compliant with GDPR. Performance and accessibility are rated good, with mobile optimization and clear navigation. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, it lacks explicit security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's governmental and Estonian identity, supporting legitimacy. Overall, Tervisekassa's website demonstrates a mature digital presence with strong business credibility and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

A

Anija Mõis

anijamois.ee

42

Anija Mõis is a historic manor and cultural site located in Northern Estonia, offering a wide range of services including a permanent exhibition, visitor programs, event hosting such as weddings and seminars, workshops, a manor café, and a gift shop. The website reflects a well-established cultural tourism business targeting families, tourists, and event organizers. The site is built on WordPress using the Avada theme and Fusion Builder, integrating modern plugins like Slider Revolution and Contact Form 7 with Google Analytics and reCAPTCHA for security and analytics. Security posture is good with HTTPS and reCAPTCHA, though some security headers are missing and no privacy policy page was found, indicating room for compliance improvement. Overall, the website is professional, content-rich, and trustworthy, with clear contact information and active social media presence.

V

Visit Otepää

visitotepaa.com

44

Visit Otepää is a regional tourism promotion website dedicated to showcasing the attractions, events, accommodation, and culinary experiences of Otepää, Estonia's winter capital. The site targets tourists and visitors interested in exploring the natural beauty and cultural offerings of the region. It provides comprehensive information and interactive features such as maps, event listings, and a newsletter subscription to engage its audience. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap and JavaScript libraries, and integrates Google Maps for location services. SEO is enhanced through Rank Math plugin and structured data markup is implemented for better search engine understanding. Security-wise, the site uses HTTPS with a valid SSL certificate and employs Google reCAPTCHA on its contact form to mitigate spam. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Overall, the website is professional, user-friendly, and trustworthy, but could improve its privacy compliance and security headers to enhance its security posture.

V

V360 agency

v360.ee

43

V360 Agency OÜ is a small Estonian digital agency specializing in web development, e-commerce solutions, branding, and full digital marketing services. The company positions itself as a smart solution for digital success, targeting businesses seeking to elevate their online presence through comprehensive marketing and branding strategies. Their website showcases a professional design with clear navigation, client testimonials, and a portfolio of projects, indicating a trusted market presence. Technically, the site is built on WordPress with modern JavaScript libraries such as Swiper.js and Tippy.js, and integrates Google Tag Manager and reCAPTCHA for tracking and security. The hosting and domain registration are managed by Zone Media OÜ, a reputable Estonian registrar and hosting provider. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional and credible, though improvements in privacy and security policies are recommended.

H

Hiiumaa Arenduskeskus

hiiumaaarenduskeskus.ee

41

Hiiumaa Arenduskeskus is a regional development center based in Hiiumaa, Estonia, focused on supporting local entrepreneurs, NGOs, tourism clusters, and community initiatives. The organization provides consulting, training, event hosting, and facilities such as remote offices and seminar rooms. Their market position is that of a key regional coordinator and promoter of economic and social development in Hiiumaa. The website reflects a small-sized, government or non-profit entity founded recently in 2022, with a clear focus on local community and business support services. Technically, the website is built on WordPress with a modern plugin ecosystem including WooCommerce, Yoast SEO, and booking/event management tools. It uses HTTPS with good SSL configuration and integrates analytics tools like Google Analytics and Microsoft Clarity. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and accessibility. From a security perspective, the site uses HTTPS and reCAPTCHA for form protection but lacks explicit security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility compliance to strengthen trust and resilience.

A

AS FEB

feb.ee

54

AS FEB is a leading Estonian company specializing in the sale of sanitary technology, electrical systems, heating, tools, and ventilation products. The company operates a comprehensive e-commerce platform complemented by multiple physical stores across Estonia, targeting both retail consumers and business clients. Their market position is strong within Estonia, supported by a broad product range and a dedicated B2B portal. The website is professionally designed, mobile-optimized, and integrates modern e-commerce technologies such as Magento 2, Google Tag Manager, and Facebook SDK for marketing and analytics purposes. Security measures include HTTPS enforcement and Google reCAPTCHA on login forms, ensuring a secure user experience. However, the absence of explicit privacy and terms of service pages indicates room for improvement in compliance and transparency. Overall, the website demonstrates a mature digital presence with good business credibility and technical implementation.

T

Tallinna Vesi

tallinnavesi.ee

42

Tallinna Vesi is a well-established water utility company based in Estonia, primarily serving the Tallinn region with water supply and wastewater treatment services. The company demonstrates a strong market position supported by comprehensive service offerings including water purification, meter installation, and customer self-service portals. Their website reflects a professional digital presence with multilingual support and investor relations, indicating a mature business model focused on transparency and customer engagement. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good performance and SEO optimization. Security posture is robust with HTTPS enforcement and ISO certifications, although improvements can be made in security headers and incident response transparency. Privacy compliance is mostly adequate but lacks a visible cookie consent mechanism, which should be addressed to fully comply with GDPR requirements. Overall, the website and domain data indicate a trustworthy and credible organization with a solid digital infrastructure.

S

Smiltenes novada pašvaldība

smiltenesnovads.lv

63

Smiltenes novada pašvaldība is the official local government authority for Smiltene Municipality in Latvia. The website serves as a comprehensive portal providing residents and stakeholders with access to municipal services, administrative information, social and cultural resources, and community news. The site is well-structured with clear navigation and covers a broad range of local government functions including education, social services, culture, tourism, and public safety. The target audience primarily consists of local residents and businesses seeking municipal information and services. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies such as Bootstrap for responsive design and Google services like reCAPTCHA and Analytics for security and user behavior insights. The site demonstrates good mobile optimization and accessibility features, ensuring usability across devices. Performance is moderate, with proper meta tags and SEO considerations implemented. From a security perspective, the website enforces HTTPS and includes several security headers to protect against common web vulnerabilities. The use of Google reCAPTCHA on forms helps mitigate automated abuse. However, the site lacks a publicly accessible privacy policy and terms of service, which are important for GDPR compliance and user trust. No explicit incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, the website is a credible and professional government portal with strong business credibility and technical implementation. The main areas for improvement include publishing comprehensive privacy and terms policies, enhancing transparency around data protection and incident response, and expanding direct contact information. These steps would strengthen compliance and user trust while maintaining a secure and user-friendly digital presence.

Eesti Paralümpiakomitee is the official Estonian Paralympic Committee, a non-profit organization dedicated to supporting Paralympic athletes and promoting Paralympic sports within Estonia. The website serves as a hub for news, event calendars, athlete information, and organizational details, targeting athletes, supporters, and the general public interested in Paralympic sports. The organization maintains a clear national presence with sponsorships and social media engagement. Technically, the website employs a modern JavaScript stack including jQuery, Google reCAPTCHA, Axios, and sliders for dynamic content presentation. It uses HTTPS with a valid SSL configuration and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile and accessibility, with room for improvement in SEO and accessibility features. From a security perspective, the site benefits from HTTPS and CSRF token usage in forms, but lacks explicit security headers and detailed security or incident response policies. No privacy or cookie policies are present, which is a compliance gap. Contact information is clearly provided, enhancing trust and user engagement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

E

Eesti Maaturismi Ühing

saunatee.ee

26

Saunatee.ee is a specialized Estonian website dedicated to promoting sauna culture, tourism, and related products. Operated by Eesti Maaturismi Ühing, it serves as a comprehensive portal listing various sauna types, sauna packages, and educational content about sauna traditions in Estonia. The website targets sauna enthusiasts and tourists interested in authentic Estonian sauna experiences, positioning itself as a niche cultural and tourism information platform. The business model focuses on information dissemination and promotion of sauna-related services and products, supported by a small but consistent content base and community engagement through newsletters and social media.

T

The Hertz Corporation

hertz.ie

70

The website www.hertz.ie is the Irish regional portal for The Hertz Corporation, a globally recognized car rental company. It offers car and van rental services across Ireland with a focus on quality and convenience, including electric vehicle options. The site supports multiple languages and internationalization, reflecting a mature digital presence. Technically, the site employs modern JavaScript frameworks, asynchronous script loading, and integrates Google services such as Tag Manager and Analytics, alongside Stripe for payments and reCAPTCHA for bot protection. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response information are not evident. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR-aligned cookie consent. Business credibility is supported by consistent branding and professional content, though direct contact details are not prominently displayed on the analyzed page. Overall, the site is professionally designed, functional, and secure, suitable for enterprise-level operations in the transportation sector.

M

MTÜ Eesti Pagulasabi

pagulasabi.ee

49

Eesti Pagulasabi is a well-established Estonian non-profit humanitarian organization founded in 2011, dedicated to supporting refugees and displaced persons both in Estonia and internationally. The organization provides a broad range of services including humanitarian aid, social and economic wellbeing programs, mental health support, and integration assistance. Their website reflects a professional and consistent brand presence with comprehensive content and multiple language support, targeting refugees, donors, volunteers, and partners. The donation infrastructure is robust, offering multiple payment options and detailed forms to facilitate contributions. Technically, the website is built on Drupal 9, leveraging modern analytics and consent management tools, and is hosted by a reputable Estonian registrar and hosting provider. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. Privacy compliance is strong with clear cookie consent and privacy policy documentation. Overall, the website is trustworthy, accessible, and professionally maintained, supporting the organization's mission effectively.

S

SA Harju Ettevõtlus- ja Arenduskeskus

heak.ee

43

SA Harju Ettevõtlus- ja Arenduskeskus (HEAK) is a regional non-profit foundation based in Estonia focused on supporting local development through consulting, training, and partnership initiatives. The organization targets entrepreneurs, civic associations, and tourism sector participants, offering free advisory services and organizing events to foster regional growth. The website reflects a stable and professional presence with clear business objectives and a consistent brand identity. Technically, the site is built on WordPress with common plugins for event management, multilingual support, and analytics integration, demonstrating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though improvements could be made by adding security headers and formal incident response contacts. Overall, the website is trustworthy and well-maintained, supporting the organization's mission effectively.

E

Ettevõtlik kool

evkool.ee

44

Ettevõtlik Kool is a non-profit educational network in Estonia focused on promoting entrepreneurial learning and providing a quality mark for modern education. The website serves as a portal for schools and kindergartens to access training, tools, and certification processes. It targets educational institutions and professionals within Estonia, supporting over 221 schools and more than 41,000 students. The business model revolves around educational services and network collaboration rather than commercial sales. Technically, the website is built on WordPress with modern enhancements such as lazy loading, Google Tag Manager, and reCAPTCHA for security. The site is mobile-optimized and includes accessibility features, reflecting a mature digital presence. SEO and metadata are well implemented, supporting discoverability and user engagement. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and avoids exposing sensitive data. However, it lacks explicit security policies and incident response contacts, which could be improved. Privacy and cookie policies are present and appear GDPR compliant, enhancing user trust. Overall, the website presents a trustworthy and professional image with good content quality and technical implementation. The domain registration data aligns with the business claims, supporting legitimacy. Strategic improvements in security policy transparency and additional compliance documentation would further strengthen the site's posture.

S

Sihtasutus Ida-Viru Investeeringute Agentuur (IVIA)

ivia.ee

52

Sihtasutus Ida-Viru Investeeringute Agentuur (IVIA) is a public sector development organization based in Estonia, specializing in the creation and management of modern industrial and business parks in the Ida-Viru region. The agency facilitates investment by offering land plots with established infrastructure and provides free support services to investors, including administrative assistance and networking. The website reflects a well-established regional development entity with a clear focus on industrial real estate and investment promotion. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use, and integrates Google Maps and reCAPTCHA for enhanced user experience and security. Security posture is strong with HTTPS, security headers, and consent mechanisms in place, though formal security policies and incident response contacts are absent. Overall, the site presents a credible, professional, and trustworthy digital presence aligned with its public sector mission.

L

Lastekaitse Liidu Lastelaagrite OÜ

lastelaagrid.eu

41

Lastekaitse Liidu Lastelaagrite OÜ is a small Estonian non-profit organization dedicated to providing educational and recreational youth camps and programs aligned with the mission of Lastekaitse Liit. The organization operates recognized youth camps such as Pivarootsi and Remniku and offers educational programs during school time. Their target audience includes children, youth, schools, municipalities, and entrepreneurs within Estonia. The website is built on a modern WordPress CMS with WooCommerce integration, supporting online interactions and registrations. The technical infrastructure includes standard web technologies and third-party services such as Google Analytics and CookieYes for consent management. Security posture is solid with HTTPS and reCAPTCHA implemented, though some security headers are missing and no formal security or privacy policies are published. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, well-branded, and trustworthy, but could improve privacy compliance and security transparency.

T

Tervisekassa

tervisekassa.ee

64

Tervisekassa is the official Estonian national health insurance portal, providing information and services related to state health insurance, medical benefits, and healthcare access. The website targets insured individuals, employers, healthcare providers, and partners within Estonia. It offers comprehensive content on insurance coverage, medical services, reimbursements, and public health initiatives. The site is well-positioned as a government-backed service with a clear mission to facilitate healthcare access and information dissemination. Technically, the website is built on Drupal CMS, leveraging modern analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Siteimprove. It employs Cloudflare for DNS and CDN services, ensuring good performance and security. Accessibility and mobile optimization are well addressed, with features like contrast toggling and skip links. Security posture is strong with HTTPS, cookie consent mechanisms, and bot protection via Google reCAPTCHA. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies and GDPR-aligned consent management. Contact information is transparent, including official email and phone numbers, and social media presence is active on major platforms. Overall, the website demonstrates a mature digital infrastructure suitable for a public healthcare service, balancing usability, security, and compliance effectively.

A

AS Lahevesi

lahevesi.ee

45

AS Lahevesi is a municipal utility company founded in 2008, providing water supply, sewage, property management, cemetery services, and public space maintenance in Lääne-Harju municipality, Estonia. The company operates under contracts with the local government and serves residents and businesses in the region. The website is built on WordPress using Elementor and several plugins, featuring a professional design with clear navigation and mobile optimization. Security measures include HTTPS and Google reCAPTCHA on forms, though additional security headers and cookie consent mechanisms are recommended. The WHOIS data confirms the legitimacy of the company with consistent registration details. Overall, the website demonstrates a solid technical and business foundation with room for improvement in privacy compliance and security policies.

Ida-Virumaa Omavalitsuste Liit is a regional government association serving the municipalities of Ida-Virumaa, Estonia. The website provides comprehensive information on governance, development strategies, programs, projects, education, public health, safety, culture, and visa-related matters. It targets local residents, government officials, and stakeholders interested in regional development. The organization operates as a small-sized government entity founded in 2010, with a clear focus on regional coordination and public service. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, Google reCAPTCHA, and Font Awesome. The site is hosted by Elkdata OÜ, consistent with the WHOIS data. The website is mobile-optimized and provides a good user experience, although some technical aspects like the use of an outdated jQuery version and lack of security headers indicate areas for improvement. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate automated abuse. However, the absence of security headers and outdated JavaScript libraries present potential vulnerabilities. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could expose the organization to regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced security practices and improved privacy compliance to align with modern standards and regulations.

Aktsiaselts Koeru Hooldekeskus is a regional healthcare and eldercare service provider based in Järva County, Estonia. The organization specializes in 24/7 general care, nursing assistance, special care for individuals with deep disabilities, and dementia care. The website reflects a medium-sized entity with a clear focus on providing comprehensive care services to elderly and special needs clients. The business maintains a consistent brand presence and provides clear contact information and service descriptions, positioning itself as a trusted local healthcare provider. Technically, the website is built on WordPress using a modern tech stack including LayerSlider, WPBakery Page Builder, and Google reCAPTCHA for security. The site is mobile-optimized, accessible, and SEO-friendly, leveraging Yoast SEO and structured data for enhanced search visibility. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and integrates Google reCAPTCHA to protect forms. However, it lacks some security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website demonstrates a solid digital presence with good business credibility and technical implementation. Strategic improvements in security headers, privacy compliance, and incident response documentation would enhance the security posture and regulatory adherence.

E

eHost OÜ

arenduskeskus.ee

40

Investor.ee is a small Estonian educational website focused on providing information and guidance about investing and financial growth. The site targets individuals and organizations interested in learning about investment strategies, risk management, and financial planning. The business operates primarily as an informational resource with content in Estonian, positioning itself as a niche player in the finance education sector. The website is built on WordPress using modern themes and plugins, with a moderate level of technical maturity and good mobile optimization. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security best practices such as security headers and explicit privacy policies are missing. Overall, the site demonstrates a moderate security posture with room for improvement in privacy compliance and security transparency.

K

Kihnu Vallavalitsus

visitkihnu.ee

43

Visit Kihnu is a specialized tourism website promoting the Estonian island of Kihnu. It provides comprehensive information about local events, accommodations, transport options, cultural heritage, and services, targeting tourists interested in visiting the island. The website is operated by Kihnu Vallavalitsus, an official local government entity, which adds credibility and trustworthiness to the platform. The domain is registered since 2017 and aligns well with the business purpose and location. Technically, the website uses a modern JavaScript stack including jQuery, Leaflet.js for maps, Google Analytics, and Facebook Pixel for tracking. It employs Google reCAPTCHA for form security and uses HTTPS to secure communications. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks explicit privacy and cookie policies, which is a compliance gap. From a security perspective, the site has a good SSL configuration and uses CSRF tokens in forms, but no security headers were detected in the provided data. There is no visible incident response or vulnerability disclosure information. Tracking and analytics are moderately extensive, but privacy compliance is weak due to missing policies and consent mechanisms. Overall, the website is a credible and functional tourism portal with good business credibility and technical implementation. To improve, it should address privacy compliance by publishing policies and implementing cookie consent, enhance security headers, and provide incident response contacts to strengthen trust and compliance.

Maardu Linnavalitsus operates as the municipal government portal for the city of Maardu, Estonia, providing residents and visitors with information about city services, news, events, and contact details. The website serves as an essential communication channel for local government functions and citizen engagement. It targets local residents, visitors, and stakeholders seeking municipal information and services. The business model is that of a government entity offering public services and information dissemination.

Promised Land Art Festival is a professionally organized event celebrating digital and traditional art, primarily targeting creative professionals in gaming, film, and advertising industries. The festival is supported and organized by CD PROJEKT RED and local cultural institutions in Łódź, Poland, positioning it as a significant niche event in the creative media sector. The website reflects a high level of digital maturity, utilizing modern web technologies such as Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though improvements in security headers and explicit security policies are recommended. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR considerations. Overall, the website presents a trustworthy and professional image, though the lack of WHOIS data for the domain introduces some uncertainty about domain registration status.

J

John Lothian News

johnlothiannews.com

58

John Lothian News is a specialized media outlet focused on delivering financial markets news and analysis. Established in 2011, it serves a niche audience of financial professionals and market participants. The website employs a WordPress CMS with the Divi theme and WooCommerce plugin, indicating a modern and flexible technical infrastructure. Hosting is provided by SiteGround, and the site uses Google Analytics and Tag Manager for user tracking. Security posture is solid with HTTPS enabled and use of Google reCAPTCHA, though there is room for improvement in security headers and DNSSEC implementation. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

E

Eesti Meediaettevõtete Liit

meedialiit.ee

41

Eesti Meediaettevõtete Liit is a well-established Estonian media association founded in 1990, representing a broad spectrum of private media outlets including web portals, TV, radio, newspapers, and magazines. The organization focuses on promoting trustworthy journalism, protecting the interests of its members, and advocating for fair competition in the media market. The website reflects this mission with relevant content, press council decisions, and news updates targeted at media professionals and the Estonian public. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and Google reCAPTCHA, ensuring a good user experience and basic security measures. The security posture is solid with HTTPS and anti-bot protections, though some advanced security headers could be added. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its audience effectively.

Z

Zone Media OÜ

digioskused.ee

47

Digioskused.ee is an Estonian educational platform offering free AI and digital skills training, developed in partnership with Google and Estonian government agencies. The website serves individuals and businesses aiming to enhance their digital competencies through practical, accessible online courses. The platform leverages modern web technologies including WordPress, jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers are missing. The domain registration is consistent with the business purpose and geographic location, supporting legitimacy. Overall, the site presents a professional and trustworthy digital presence with good content quality and user experience.

Juuriharja Consulting Group Oy operates the First Whistle Service, a confidential online whistleblowing platform designed to help organizations report and manage misconduct and non-compliance efficiently. The service emphasizes legal compliance, particularly with GDPR and national personal data protection laws, targeting organizations seeking secure and anonymous reporting tools. The company positions itself as a niche provider in the compliance and whistleblowing sector within Finland and potentially broader European markets. Technically, the website is built as a modern single-page application likely using React, with asynchronous JavaScript modules and Google reCAPTCHA integration for bot protection. Hosting appears to leverage AWS infrastructure, indicated by the nameservers. The site demonstrates good mobile optimization and basic accessibility but lacks some advanced SEO and security header implementations. From a security perspective, the site uses HTTPS and reCAPTCHA to secure user inputs and protect anonymity. However, it lacks DNSSEC, explicit security headers, and a cookie consent mechanism, which are areas for improvement. The WHOIS data is transparent and consistent with the business identity, enhancing trustworthiness. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, the website and service present a trustworthy and professional offering with room for technical and security enhancements to fully align with best practices and regulatory requirements.

M

Milrem Robotics

milrem.com

54

Milrem Robotics is a leading global provider of autonomous unmanned ground vehicles (UGVs) specializing in combat-ready robotic solutions that enhance military operational effectiveness and tactical advantages. Established in 2013 and headquartered in Estonia, the company has expanded its footprint with offices across Europe, the UAE, and the USA, serving 19 customer countries. Their product portfolio includes multi-mission UGVs such as THeMIS, VECTOR, HAVOC, and Type-X, supported by advanced autonomy kits and participation in key EU defense projects. The website reflects a professional and modern digital presence with comprehensive content tailored to defense and military audiences. Technically, the website is built on WordPress with modern SEO and user experience optimizations, including mobile responsiveness and accessibility considerations. It employs standard security measures such as HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent mechanisms. However, there is room for improvement in security headers and explicit security policy disclosures. Analytics usage is moderate, primarily via Google Analytics through Google Tag Manager, with privacy compliance well addressed. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but lacks dedicated incident response or vulnerability disclosure information. WHOIS data confirms domain legitimacy and consistency with the company's history and operations. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, supporting Milrem Robotics' position as a reputable defense technology provider.

P

Placet Group OÜ

placetgroup.com

55

Placet Group OÜ is a financial services company established in 2005, specializing in secured and unsecured loans, credit cards, and related financial products. Operating primarily in Estonia and Lithuania, with additional brands in Poland, the company serves private individuals and legal entities, emphasizing fast, convenient, and reliable financing solutions. Their market position is supported by a broad customer base and multiple subsidiaries, with a focus on individual customer approach and quality service. Technically, the website employs a modern JavaScript stack including jQuery, Google Analytics, and various carousel libraries, hosted under a domain registered since 2010. The site is mobile optimized and presents a professional design with clear navigation. However, some accessibility features are basic, and no CMS or advanced frameworks are detected. From a security perspective, the site uses HTTPS and Google reCAPTCHA on its contact form, but lacks DNSSEC, security headers, and published security or privacy policies. The WHOIS data is consistent with the business claims, indicating legitimacy. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the website demonstrates a moderate to good security posture and business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

R

Reliex

activitytimeline.com

63

ActivityTimeline, operated by Reliex, is a mature and reputable provider of a Jira plugin focused on resource planning and time tracking. The company has established a strong market presence with over 5,000 teams worldwide, including large enterprises. Their product integrates deeply with Jira, offering capacity planning, timesheets, reporting, and synchronization features that enhance Jira's native capabilities. The website is professionally designed, mobile-optimized, and rich in content, including customer testimonials and detailed documentation. Technically, the site leverages modern web technologies and analytics tools, ensuring good performance and user experience. Security-wise, the site enforces HTTPS and uses reCAPTCHA and cookie consent mechanisms, though it lacks explicit security headers and incident response contact details. Overall, the domain registration and WHOIS data confirm the legitimacy and longevity of the business.

A

ALMIC OÜ

creditreports.ee

73

The website creditreports.ee represents the Estonian branch of Dun & Bradstreet, a globally recognized business information provider. It offers credit reports, AAA credit ratings, and marketing packages primarily targeting businesses seeking reliable financial and credit data. The site is professionally designed, multilingual, and integrates key services such as Google Tag Manager and reCAPTCHA for enhanced user experience and security. The technical infrastructure is based on Drupal 7 with modern tracking and consent management tools, indicating a mature but slightly dated platform. Security posture is solid with HTTPS enforcement and bot protection, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a credible and trustworthy business presence in the finance sector within Estonia.

Z

Zone Media OÜ

tellimine.ee

53

Tellimine.ee is an Estonian e-commerce platform specializing in online subscriptions for newspapers and magazines. Operated by Zone Media OÜ since 2010, the website targets Estonian-speaking customers interested in print media subscriptions. The platform offers a range of products including newspapers, magazines, and gift subscriptions, positioning itself as a niche player in the local media subscription market. The website uses Magento 2 with a custom Olegnax theme and integrates GDPR compliance modules to manage cookie consent and user privacy. Technically, the site employs modern JavaScript libraries and frameworks such as jQuery, KnockoutJS, and RequireJS, and includes Google reCAPTCHA for bot protection on login forms. Security posture is generally good with HTTPS enforced and no exposed sensitive data, although some security headers are missing and DNSSEC is not enabled. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Contact information is not directly available on the site, which may impact user trust. Overall, the website is functional, professionally designed, and moderately secure, but could improve transparency and compliance documentation.

M

Moneyzen

moneyzen.ee

56

Moneyzen is an Estonian-based online financial platform specializing in providing personal loans and investment opportunities through a transparent and empathetic approach. The platform targets individuals seeking flexible loan options and investment avenues, operating primarily in the Estonian market with multilingual support. The business model centers on connecting borrowers and investors, offering various loan types including personal, renovation, travel, health, auto, education, and refinancing loans. Despite recent challenges leading to the cessation of new loan and investment applications as of June 6, 2025, Moneyzen remains committed to servicing existing contracts and investor accounts. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies such as Google Tag Manager, reCAPTCHA, Hotjar, and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data, although explicit security policies and incident response information are absent. Overall, Moneyzen presents a professional and trustworthy online presence with clear business information and contact channels. The domain registration aligns well with the business claims, enhancing legitimacy. However, improvements in privacy compliance documentation, security policy transparency, and incident response readiness are recommended to strengthen trust and regulatory adherence.

S

Sisustuskoda OÜ

sisuko.ee

42

Sisustuskoda OÜ is a small Estonian company specializing in custom furniture manufacturing, particularly kitchen furniture. Established in 2014, it serves local consumers seeking high-quality, tailor-made interior solutions. The website reflects a niche retail business model with a focus on craftsmanship and design. The company maintains an active online presence with social media integration and a WooCommerce-based e-commerce platform. Technically, the website is built on WordPress using Elementor and Astra theme, leveraging modern web technologies and Google services such as reCAPTCHA and Tag Manager. Security posture is adequate with HTTPS enabled and basic protections, but lacks explicit security headers and formal privacy or cookie policies. Overall, the site is professional and functional, though privacy compliance and security best practices could be enhanced to improve trust and regulatory adherence.

The website laen.eu operates as a loan information and comparison portal primarily targeting Estonian consumers seeking various loan products such as quick loans, small loans, and secured loans. It provides detailed loan comparisons, affiliate links to loan providers, and educational content about loan types and borrowing in Estonia. The site leverages WordPress CMS with plugins for loan comparison, table of contents, and Google services for analytics and CAPTCHA protection. The technical infrastructure is modern and supports mobile responsiveness with moderate performance. Security posture is good with HTTPS enforced and use of Google reCAPTCHA, though it lacks explicit security headers and formal privacy or cookie policies. Contact information is limited to a contact form without direct emails or phone numbers, which may impact user trust. Overall, the site is functional, professional, and serves its niche well but would benefit from enhanced privacy compliance and security best practices.

Drama Queen Communications is a Nordic marketing and communications agency founded in 2018, specializing in creative business advantage through marketing, advertising, technology, and communications services. The company positions itself as an award-winning agency with a strong presence in the Nordic market, targeting businesses seeking innovative and creative marketing solutions. Their website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on WordPress with modern tools such as Gravity Forms, Yoast SEO, and Google Tag Manager, hosted behind Cloudflare DNS. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, with a comprehensive cookie consent mechanism supporting GDPR compliance. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the website and domain registration data indicate a legitimate and credible business with a strong digital presence.

R

Raison FinTechnologies Inc.

raison.app

68

Raison FinTechnologies Inc. operates raison.app as a comprehensive digital family office platform offering investment opportunities across venture deals, public stocks, crypto-assets, structured products, and asset management services. The company targets both individual and institutional investors, providing tiered account plans and a broad range of financial instruments. With over 30,000 users globally and regulatory licenses from multiple jurisdictions, Raison positions itself as a trusted fintech innovator in the investment space. Technically, the website is built on a modern Nuxt.js and Vue.js stack, optimized for performance and mobile responsiveness. It integrates essential third-party services such as Google Tag Manager, reCAPTCHA, and Intercom for analytics, security, and customer engagement. The site demonstrates good SEO and accessibility practices, with comprehensive metadata and structured content. From a security perspective, the platform enforces HTTPS, employs security headers, and uses CAPTCHA to protect forms. It holds multiple financial regulatory licenses, enhancing trust and compliance. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly detailed. Overall, raison.app presents a professional, secure, and user-friendly investment platform with strong regulatory backing and a clear business model. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection roles to further strengthen trust and compliance.

H

Hoperfy

hoperfy.com

53

Hoperfy is a small technology company specializing in a white-label event hotel booking platform designed to help event organizers monetize hotel bookings made by their international visitors. The platform offers a 50/50 revenue-sharing model and subscription upgrades with advanced analytics and flight booking capabilities. The website is professionally designed, mobile-optimized, and provides clear business information and customer testimonials, positioning Hoperfy as a niche player in the hospitality technology sector. Technically, the site uses modern JavaScript libraries, integrates Google Tag Manager and reCAPTCHA for security and analytics, and is hosted with reputable providers including GoDaddy and Cloudflare. Security posture is good with HTTPS and form protections, but lacks published security policies and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and credible but could improve transparency and security practices.

K

Kodulehe tegemine OÜ

disain.ee

44

Kodulehe tegemine OÜ operates a professional web design and development studio based in Estonia, specializing in website creation, e-commerce solutions, SEO optimization, and graphic design services. The company targets businesses and organizations primarily in Europe and the USA, offering a comprehensive suite of digital services including website maintenance, analysis, and branding. Their market position is that of a trusted, experienced small business with nearly two decades of industry presence and a strong portfolio of satisfied clients. Technically, the website is built on WordPress with modern frameworks like Uikit, integrates Google services such as reCAPTCHA and Tag Manager, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS and CAPTCHA usage, but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance and security improvements. Overall, the site is accessible without WAF or blocking, and the domain registration is consistent and legitimate. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing explicit contact information to improve trust and compliance.

V

vDesignly

vdisain.ee

40

vDesignly operates as a small Estonian web design and development company, focusing on creating custom digital solutions to elevate web standards. The company leverages WordPress as its CMS platform, enhanced by popular plugins such as Yoast SEO and Google Tag Manager for SEO and analytics. The website demonstrates a good level of technical maturity with HTTPS enabled and reCAPTCHA implemented to secure forms. However, the absence of explicit privacy and cookie policies, as well as contact information, indicates gaps in privacy compliance and user trust facilitation. Security posture is generally sound but could be improved by adding security headers and formal incident response contacts. Overall, the site is professional and functional but would benefit from enhanced transparency and compliance documentation.