Security Directory

A

Avenga

seavus.com

80

Avenga is a global technology partner specializing in IT services including custom software development, AdTech and MarTech, data and AI, and managed services. With over 20 years of experience, Avenga serves a diverse range of industries such as automotive, manufacturing, retail, banking, media, telecommunications, life sciences, mobility, and logistics. The company positions itself as a trusted B2B partner offering comprehensive technology solutions to enterprises worldwide. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to business clients. Technically, the site is built on WordPress and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, Microsoft Clarity, and Piwik PRO, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced, security headers present, and bot protection via Google reCAPTCHA. Privacy compliance is well addressed through a comprehensive privacy and cookie policy with a user-friendly consent mechanism. However, the absence of explicit terms of service, security policy, incident response information, and direct contact details for security or data protection officers suggests areas for improvement. The WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional website and privacy compliance. Overall, Avenga demonstrates a robust business and technical foundation with good security and privacy practices, suitable for enterprise clients.

B

Baltic Geospatial Information Technology Conference

balticgitconf.eu

44

The Baltic Geospatial Information Technology Conference website represents a regional event focused on fostering collaboration and knowledge exchange in geospatial information technology across the Baltic states. The conference is organized by key regional GIS associations and features a diverse set of speakers from industry, academia, and community projects. The website is built on a modern WordPress platform with a professional design and good content quality, targeting students, researchers, government, and industry professionals interested in geospatial technologies. Technically, the site uses common WordPress plugins and libraries, including Google Analytics for user tracking, but lacks visible privacy and cookie policies, which is a compliance gap. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but security headers and incident response information are absent. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

B

Baltic Wild

balticwild.com

51

Baltic Wild is a small Latvian company specializing in the sale and distribution of premium wild game meat products sourced from animals raised in natural environments. Their product range includes fresh, frozen, canned, smoked, dried, and semi-finished game meat, targeting retail and catering businesses across Europe. The website is built on WordPress with Elementor, offering a modern and user-friendly experience with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain registration locks, but lacks advanced security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the business appears legitimate with consistent domain age and content, but privacy compliance and security transparency need enhancement.

A

AG Capital CFO Services

agcapitalcfo.com

54

AG Capital CFO Services is a specialized financial services provider offering fractional CFO and outsourced financial planning and analysis services primarily targeting start-ups and SMEs. The company leverages deep financial expertise, including credentials such as CFA and MFM, and is closely associated with the Financial Modeling World Cup, enhancing its market credibility. The website is professionally designed with clear navigation and rich content describing their comprehensive financial services portfolio. Technically, the site is built on WordPress with Elementor and uses modern plugins and tracking tools such as Google Tag Manager and Hotjar. Security posture is good with HTTPS and cookie consent mechanisms in place, though some security headers and policies are missing. Overall, the site reflects a mature, credible business with room for improvement in privacy and security policy transparency.

E

EPG Financial Services Limited

epg-financials.com

67

EPG Financial Services Limited is a Malta-based licensed e-money institution and payment services provider, offering innovative solutions that integrate cash and digital payments. Their flagship product, paylado, exemplifies their commitment to empowering businesses in the evolving financial landscape. The company maintains a strong market position as a leading licensed entity regulated by the Malta Financial Services Authority (MFSA). Technically, the website is built on WordPress using the Avada theme, enhanced with Yoast SEO and Contact Form 7 plugins. Hosting and domain registration are managed through reputable providers including Amazon Registrar and Cloudflare DNS. The site demonstrates good mobile optimization, SEO practices, and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and security headers are absent, indicating room for improvement. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact suggests an opportunity to enhance transparency and readiness. Overall, EPG Financials presents a professional, trustworthy online presence with strong business credibility and compliance posture. Strategic enhancements in security policies and technical safeguards would further solidify their risk management and customer trust.

C

CMA laenud

cma.ee

51

CMA laenud operates as a small Estonian financial information website focused on providing content about various loan and credit products, including unsecured loans and credit accounts. The site targets Estonian-speaking individuals seeking financial solutions and appears to function primarily as an informational and possibly affiliate platform. The website is built on WordPress, leveraging modern SEO tools such as Rank Math, and is hosted behind Cloudflare DNS services, ensuring good SSL configuration and moderate performance. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site benefits from HTTPS and Cloudflare DNS but lacks important security headers and formal security policies. No privacy or cookie policies are present, and contact information is limited to a contact form without direct emails or phone numbers, which may impact user trust and compliance with GDPR. There is no evidence of incident response or vulnerability disclosure mechanisms. The domain registration is consistent with the website's geographic and business focus, registered to an Estonian company since 2016, supporting legitimacy. Overall, CMA laenud presents a professional and functional online presence with good content quality and technical implementation but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trustworthiness and regulatory adherence.

A

Akmens Nami

akmensnami.lv

46

Akmens Nami is a Latvian company specializing in Building Information Modeling (BIM) management, LEED building certification, and dynamic energy analysis services. The company positions itself as a professional and experienced team offering integrated digital construction lifecycle solutions aimed at improving efficiency, transparency, and sustainability in building projects. Their market focus includes developers, architects, and building owners interested in green building certifications and energy optimization. The website is built on WordPress with a professional design and multilingual support, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks modern security headers and uses outdated software versions, which could expose the site to vulnerabilities. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears credible with clear service offerings and social media presence, but WHOIS data is unavailable, limiting full trust verification.

O

OCHOUNOS.COM

ochounos.com

46

Ochounos.com is a small technology service provider specializing in web development, graphic design, photography, web hosting, and software projects including game and Android app development. The company has a long-standing domain since 2008 and offers a diverse portfolio of services targeting businesses and individuals seeking custom digital solutions. The website content is well-structured and provides detailed descriptions of services and projects, reflecting a good level of professionalism and technical capability. The technical infrastructure includes a custom PHP MVC framework (Almanzor Framework), use of modern game engines like Unreal Engine 4 and CRYENGINE, and hosting via Hetzner Online GmbH. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. No CMS or third-party analytics tools are detected, indicating a custom-built platform. From a security perspective, the site uses HTTPS but lacks important security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. No contact or incident response information is provided, limiting transparency and responsiveness to security issues. DNSSEC is not enabled, and no vulnerability disclosure or security certifications are present. Overall, the website presents a solid business offering with good technical foundations but requires improvements in security posture, privacy compliance, and transparency to enhance trustworthiness and regulatory adherence.

A

AndIT Solutions

andit.lv

50

AndIT Solutions is a Latvia-based IT company specializing in digital transformation, web and app development, and tailored IT solutions designed to grow with client needs. The company emphasizes innovation, continuous learning, and client success, positioning itself as a niche provider focused on long-term partnerships. The website is built on WordPress using the Avada theme and common plugins, hosted on AWS infrastructure, reflecting a modern and maintainable technical stack. Security posture is solid with HTTPS enforced and secure forms, though the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and defense-in-depth. Overall, the website presents a professional and trustworthy image with good content quality and business credibility, but would benefit from enhanced privacy compliance and security best practices.

ส

สล็อตเว็บตรง APIแท้ 100% รับวอเลท ไม่มีขั้นต่ำ ดีแน่นอน 100% ที่สุดในไทย

raf-avia.com

51

The website www.rdandt.com operates as an online platform primarily offering direct web-based slot games and casino services targeted at Thai-speaking users. It emphasizes providing a secure, user-friendly experience with features such as wallet integration and no minimum deposit requirements. The site leverages WordPress CMS with SEO optimization plugins and presents a professional design with mobile responsiveness. However, the absence of privacy and cookie policies, lack of verified contact information, and missing WHOIS domain registration data raise concerns about compliance and legitimacy. Technically, the site uses HTTPS but lacks important security headers, which could be improved to enhance security posture. Overall, while the business model and content are clear and relevant to its audience, the site requires improvements in transparency, security best practices, and compliance to build greater trust.

R

ROTORWORKS

rotorworks.de

51

ROTORWORKS is a German company specializing in wind energy services, including installation, maintenance, and repair of wind turbines. Established in 1995, the company emphasizes safety and innovation as core values. The website is professionally designed using WordPress with modern plugins, providing a good user experience and clear navigation primarily in German with English support. Contact is mainly via a contact form, with no direct emails or phone numbers visible on the homepage. The company targets businesses and professionals in the renewable energy sector and potential employees seeking careers in this field. Technically, the site uses a standard WordPress stack with jQuery and popular page builder and slider plugins, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible but could improve in transparency and security documentation.

T

Translate 24/7

translate24-7.com

40

Translate 24/7 is a small language service provider specializing in Baltic and CIS language translation solutions targeting LSPs. The website is currently under construction, indicating ongoing updates to their digital presence. The company has a stable domain registration dating back to 2008, consistent with their business age and Latvian location. Technically, the site is built on WordPress with common JavaScript libraries such as jQuery and Swiper, hosted on SiteGround. The site shows basic mobile optimization and accessibility but lacks advanced SEO and performance optimizations. Security posture is moderate; the domain is protected against transfer but lacks DNSSEC and visible security headers. No privacy or cookie policies are present, indicating compliance gaps. Contact information and social media presence are clearly provided, supporting business credibility.

F

FDT System AB

fdt.se

48

FDT System AB is a Swedish company specializing in retail business and point-of-sale systems, with a strong focus on the Nordic market. Founded in 1979, the company offers cloud-based, flexible, and integrated solutions designed to streamline retail operations across multiple channels. Their flagship product, FDT Sellus, combines backoffice and POS functionalities with modern features and real-time data access. The company positions itself as a leading provider for specialty retail chains in the Nordic region, supported by partnerships with major payment processors like Klarna and Nets. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Slider Revolution, and Contact Form 7. It employs modern frontend technologies including Bootstrap and jQuery, and integrates Google Maps and Google reCAPTCHA for enhanced user experience and security. The site is mobile-optimized and includes cookie consent mechanisms, reflecting GDPR compliance efforts. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms to mitigate spam. However, no explicit HTTP security headers were detected, and there is no visible security policy or incident response information. The absence of WHOIS data for the domain www.fdt.se is a notable concern, potentially indicating privacy protection or domain registration under a different name. Despite this, the website content, business information, and external trust signals support the company's legitimacy. Overall, FDT System AB demonstrates a mature digital presence with good content quality and technical implementation. To enhance trust and security posture, it is recommended to implement standard security headers, publish a security policy, and clarify domain registration details. These steps will strengthen compliance and reassure customers and partners about the company's commitment to security and transparency.

D

DYNINNO

dynatech.lv

69

Dyninno Technologies operates as a multinational technology hub specializing in IT, finance, and entertainment sectors. With over 450 professionals across the UAE, Latvia, and India, the company delivers innovative software solutions and infrastructure support to its internal divisions and external fintech and entertainment platforms. Their market position is strong, supported by 20+ years of experience and a diversified portfolio of subsidiaries including Trevolution, Multipass, Nectaro, Ecofinance, and Entertech. The company emphasizes modern technology stacks such as Node.js, React, Kubernetes, and AWS cloud services, reflecting a mature and scalable technical infrastructure. Security practices include HTTPS enforcement, infrastructure as code, peer code reviews, and comprehensive monitoring, although there is room for improvement in DNS security and formal security policies. Overall, Dyninno demonstrates a high level of professionalism, compliance with GDPR, and a robust digital presence, positioning it well for continued growth and innovation.

U

Universitäts-Kinderspital beider Basel (UKBB)

ukbb.ch

60

The Universitäts-Kinderspital beider Basel (UKBB) is a leading pediatric university hospital located in Basel, Switzerland. It provides specialized medical care for children and adolescents, alongside active research and educational programs. The website reflects a professional healthcare institution with a clear focus on patient care and academic excellence. The digital infrastructure is based on WordPress with Elementor, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS and standard security headers, though improvements in CSP and vulnerability disclosure are recommended. Privacy compliance is strong, with comprehensive GDPR-aligned policies and cookie consent mechanisms. Overall, the website demonstrates high trustworthiness and professionalism, suitable for its healthcare audience.

B

Banku Augstskola

ba.lv

47

Banku Augstskola is a Latvian higher education institution providing academic programs, research, cooperation, and lifelong learning services. The website reflects a professional educational entity with a clear market position in Latvia's education sector. The institution targets students, researchers, and lifelong learners, offering accredited programs and maintaining active communication channels including social media and a mobile app. Technically, the website is built on WordPress with modern front-end technologies such as AngularJS and jQuery, and uses WPBakery Page Builder for content management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though accessibility could be further improved. Security-wise, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, it lacks explicit security headers and publicly available security or incident response policies, which are recommended for enhanced trust and compliance. The WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website is trustworthy, well-maintained, and suitable for its educational purpose.

D

Diatom Enterprises

diatomenterprises.com

71

Diatom Enterprises is a well-established Latvian custom software development and IT consulting company founded in 2004. With over 20 years of experience, the company offers a broad range of services including web, mobile, and desktop development, leveraging technologies such as React, Angular, .NET Core, Node.js, Ruby, and PHP. Their market position is strong, supported by long-term contracts, a skilled team of over 80 developers, and international presence including offices in Latvia and the US. The company targets businesses seeking tailored software solutions across various industries including fintech, logistics, real estate, and education. Technically, the website is built on WordPress and employs modern web technologies and frameworks. The site is mobile optimized, well-structured, and includes SEO best practices. Performance is moderate with good accessibility features. The company uses Google Tag Manager and other marketing tools, with a GDPR-compliant cookie consent mechanism in place. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections such as clientTransferProhibited status. However, DNSSEC is not enabled, and some security headers are not explicitly detected. There is no publicly available security policy or incident response contact, and no vulnerability disclosure policy was found. Overall, the security posture is solid but could be improved with additional measures. Overall, Diatom Enterprises presents a professional, trustworthy, and credible online presence with strong business and technical foundations. Strategic recommendations include enhancing DNS security, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

Elektronikas un datorzinātņu institūts (EDI) is a Latvian research institute specializing in electronics and computer science. The organization focuses on innovative research and technological solutions in sectors such as smart transport, smart manufacturing, healthcare, space technologies, and security. The website presents a professional and content-rich platform targeting researchers, industry partners, and students, with multiple ongoing projects and services showcased. Technically, the site is built on WordPress with popular plugins like WPBakery and Slider Revolution, indicating a mature but somewhat dated infrastructure. Security posture is adequate with HTTPS enforced but lacks modern security headers and uses outdated libraries, which could pose risks. Privacy compliance is basic, with no visible cookie consent mechanisms or detailed privacy policies. Overall, the site reflects a credible research entity but would benefit from technical and security updates to enhance trust and compliance.

W

winpartners.lv

winpartners.lv

58

WIN partners is a Latvian-based small education and training service provider specializing in customized corporate training programs focused on leadership growth, customer service excellence, project management, and employee development. The company targets businesses seeking tailored learning solutions to enhance workforce capabilities. The website is professionally designed using WordPress with modern frameworks and SEO plugins, indicating a moderate level of digital maturity. However, the absence of WHOIS data limits full verification of domain legitimacy. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and incident response information. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service policies. Overall, the business appears legitimate and focused on niche educational services in Latvia, but improvements in security and compliance transparency are recommended.

D

DBDH - Danish Board of District Heating

dbdh.org

59

DBDH (Danish Board of District Heating) is an organization focused on supporting and promoting district energy development worldwide. The website positions itself as a go-to partner for knowledge sharing, engagement creation, and support within the district energy sector. The organization appears to be recently established in 2024, with a small-sized operational scope targeting stakeholders in the energy industry. Technically, the website is built on WordPress with Elementor and integrates Google Analytics and Cookiebot for analytics and cookie consent management. The site is hosted by GoDaddy and uses HTTPS, but lacks DNSSEC and visible security headers, indicating room for security enhancements. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found. Contact information is not explicitly provided, which may affect user trust and compliance. Overall, the website demonstrates a moderate level of professionalism and technical maturity but would benefit from improved transparency and security practices.

W

Women Sports – Femmes et Sports – Sport au féminin

womensports.fr

44

Women Sports is a French media platform dedicated to women's sports, offering news, results, interviews, and a magazine subscription service. The website targets French-speaking sports enthusiasts, particularly women interested in female athletes and sports culture. It operates under the Sport & Sponsoring Media Group and maintains a subsidiary focused on African content. Technically, the site is built on WordPress with modern plugins and uses Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and Google reCAPTCHA is implemented, but the absence of security headers and missing WHOIS data slightly reduce trust. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is professional and trustworthy but could improve security posture and transparency.

H

Hindreku talu

hindrekutalu.ee

54

Hindreku talu is a small hospitality business based in Estonia, offering lodging, learning opportunities, and event hosting in a natural and inspiring environment. The website reflects a niche local hospitality provider with a clear focus on providing a unique experience in a rural setting. The business was founded in 2016, consistent with the domain registration date, and operates under Elkdata OÜ as the registrar and hosting provider. The website uses WordPress with the Astra theme and Elementor page builder, integrating modern SEO tools such as Rank Math and analytics services including Google Analytics and Plausible. A cookie consent mechanism is implemented with detailed user preferences, indicating a basic level of privacy compliance.

S

Sigma Technology Group

sigmatechnology.com

62

Sigma Technology Group is a well-established global technology company founded in 1999, specializing in software and embedded systems development, IT infrastructure, cloud services, and digital transformation. The company targets businesses seeking advanced digital and engineering solutions, positioning itself as a trusted partner with a strong presence in Sweden and international offices. Their key services include software development, AI consulting, DevOps, cloud technology, and automotive solutions, supported by a professional and comprehensive online presence. Technically, the website is built on WordPress with modern JavaScript libraries and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website reflects a high level of professionalism, trustworthiness, and business credibility.

V

Visit Elva

visitelva.com

48

Visit Elva operates as a regional tourism information portal focused on promoting the Elva area in Estonia. The website provides visitors with information on local attractions, events, accommodation, dining, and active leisure opportunities. It targets tourists and visitors seeking authentic experiences in the Elva region, positioning itself as a key resource for regional tourism promotion. The business model centers on providing curated content and event promotion to enhance visitor engagement and regional visibility. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. Hosting and domain registration are consistent with the business location and purpose. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks DNSSEC and advanced security headers, which could enhance its security posture. No explicit security policies or incident response contacts are published, indicating room for improvement in transparency and readiness. Overall, Visit Elva presents a professional and trustworthy online presence with solid content and technical foundations. Strategic enhancements in security policies, DNS security, and incident response disclosures would further strengthen its risk management and compliance posture.

E

Elva Kultuur

elvakultuur.ee

44

Elva Kultuur is a local government cultural portal serving the Elva municipality in Estonia. The website consolidates information about various cultural institutions and events within the municipality, targeting residents and visitors interested in cultural activities. It provides event calendars, news updates, and detailed pages for multiple cultural houses and centers. The site is positioned as an official source for cultural information in the region, supported by local government entities.

The website linnuriik.ee serves as an informational and promotional platform focused on birdwatching and nature tourism in Matsalu National Park, Estonia. It provides detailed descriptions of bird species, observation towers, hiking trails, and virtual tours, targeting nature enthusiasts and tourists interested in the region. The site is operated by the Foundation of Lääne County and funded by the European Regional Development Fund, indicating a regional public interest focus. Technically, the website is built on WordPress using a modern tech stack including popular plugins like Yoast SEO, WPBakery Page Builder, and Slider Revolution. The site is hosted under the registrar Zone Media OÜ, an Estonian entity, with HTTPS enabled and good SEO practices implemented. Mobile optimization and accessibility are adequate, though some improvements could be made. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC and important security headers, and does not publish explicit security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. Overall, the website is a well-maintained regional informational resource with good business credibility but requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

K

Keep.eu

keep.eu

48

Keep.eu is a specialized platform providing aggregated information on Interreg and IPA-IPA cross-border projects, partners, and programmes. It serves governmental and non-profit organizations involved in cross-border cooperation by consolidating operational and financial data in one accessible location. The website leverages a WordPress CMS with modern JavaScript libraries and integrates Google services such as Maps and Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks comprehensive privacy and security policies, which are critical for compliance and trust. Overall, the platform is functional and professionally presented but would benefit from enhanced transparency and security documentation.

The Outdoor Industries Association (OIA) CIC is a UK-based non-profit membership organization representing over 200 entities in the outdoor recreation sector. It provides advocacy, representation, promotion, and leadership services to unite the industry with a common voice. The website is professionally designed using WordPress with modern plugins for SEO, performance, and membership management. It targets industry members, retailers, NGOs, and related organizations in the UK outdoor recreation market. The site features comprehensive content including news, events, membership information, and resources. Technically, the site uses a modern tech stack with performance optimizations and is mobile responsive. Security posture is good with HTTPS enforced and some security headers present, though explicit privacy and cookie policies are missing. Analytics tracking is implemented with Google Analytics and PixelYourSite, with moderate user tracking. WHOIS data for the queried domain 'www.theoia.co.uk' is unavailable due to domain naming rules, indicating a possible misconfiguration or incorrect domain query, which slightly impacts trust. Overall, the site is credible and professional but would benefit from enhanced privacy compliance and published security policies.

V

Visit Talsi

visittalsi.com

44

Visit Talsi is a regional tourism information center website dedicated to promoting the Talsi region in Latvia. The site provides comprehensive information about local attractions, events, accommodations, and dining options, targeting tourists and visitors interested in exploring the area. The business operates as a small entity focused on hospitality and regional tourism promotion, with a clear market position as a trusted local information source. The website is multilingual, primarily in Latvian, with options for English, German, Estonian, Lithuanian, and French, enhancing accessibility for international visitors. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, Google Maps API, and Google Fonts. It uses common plugins such as MonsterInsights for Google Analytics tracking. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Hosting is via name servers cloudns1.hostnet.lv and cloudns2.hostnet.lv, though the exact hosting provider is not explicitly identified. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protection enabled. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no visible privacy policy, cookie policy, or terms of service, and no consent mechanism for tracking cookies, which poses compliance risks under GDPR. Incident response and security policies are not published, indicating a low maturity in security governance. Overall, the website is professional, trustworthy, and serves its business purpose well but requires improvements in privacy compliance and security best practices to reduce risk and enhance user trust. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response contacts.

SoftExpert OÜ is an Estonian IT company specializing in the development and maintenance of mission-critical and complex web-based systems. Established since 2000, it has contributed to several major Estonian web services such as CV-Online and various photo and video platforms. The company offers a broad range of IT services including consulting, system creation, and maintenance, targeting Estonian businesses requiring reliable IT partnerships. The website content is primarily in Estonian with an English option, reflecting a local market focus. Technically, the website uses legacy technologies such as PHP, Perl, and C, hosted on Unix/Linux platforms. The site lacks modern frameworks and shows basic SEO and accessibility features. Performance is moderate, but mobile optimization is poor. The site includes Google Analytics and Tag Manager scripts for user tracking but lacks visible privacy or cookie policies, which is a compliance gap. From a security perspective, no HTTPS confirmation or security headers were detected in the provided data, indicating potential vulnerabilities. No forms or input fields are present, reducing attack surface but also limiting user interaction. The WHOIS data is consistent and transparent, with a domain age appropriate for the business history. Overall, the security posture is moderate but requires improvements in SSL/TLS implementation and security headers. The overall risk is moderate with recommendations to implement HTTPS, add privacy and cookie policies, improve mobile responsiveness, and enhance security headers. These steps will improve compliance, user trust, and security resilience.

M

Murimäe veinikelder

murimaevein.ee

43

Murimäe veinikelder is a small Estonian hospitality business operating the world's northernmost terraced vineyard. The company offers a combination of e-commerce wine sales, wine tastings, accommodation, and event hosting, targeting wine enthusiasts and tourists. The website is built on WordPress with WooCommerce and Elementor, reflecting a moderate level of digital maturity with good SEO and mobile optimization. Security posture is adequate with HTTPS and nonce usage, but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the business presents a professional online presence with clear offerings but should enhance privacy compliance and security transparency to strengthen trust and regulatory adherence.

A

Anija Mõis

anijamois.ee

42

Anija Mõis is a historic manor and cultural site located in Northern Estonia, offering a wide range of services including a permanent exhibition, visitor programs, event hosting such as weddings and seminars, workshops, a manor café, and a gift shop. The website reflects a well-established cultural tourism business targeting families, tourists, and event organizers. The site is built on WordPress using the Avada theme and Fusion Builder, integrating modern plugins like Slider Revolution and Contact Form 7 with Google Analytics and reCAPTCHA for security and analytics. Security posture is good with HTTPS and reCAPTCHA, though some security headers are missing and no privacy policy page was found, indicating room for compliance improvement. Overall, the website is professional, content-rich, and trustworthy, with clear contact information and active social media presence.

V

Visit Otepää

visitotepaa.com

44

Visit Otepää is a regional tourism promotion website dedicated to showcasing the attractions, events, accommodation, and culinary experiences of Otepää, Estonia's winter capital. The site targets tourists and visitors interested in exploring the natural beauty and cultural offerings of the region. It provides comprehensive information and interactive features such as maps, event listings, and a newsletter subscription to engage its audience. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap and JavaScript libraries, and integrates Google Maps for location services. SEO is enhanced through Rank Math plugin and structured data markup is implemented for better search engine understanding. Security-wise, the site uses HTTPS with a valid SSL certificate and employs Google reCAPTCHA on its contact form to mitigate spam. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Overall, the website is professional, user-friendly, and trustworthy, but could improve its privacy compliance and security headers to enhance its security posture.

S

SA Jõgevamaa Arendus- ja Ettevõtluskeskus

jaek.ee

45

SA Jõgevamaa Arendus- ja Ettevõtluskeskus (JAEK) is a regional development and entrepreneurship support organization based in Jõgeva County, Estonia. Founded in 2010, it provides a broad range of services including entrepreneurship training, community programs, cultural and tourism promotion, and health and safety initiatives. The website serves as an information hub for local businesses, citizens, and institutions, offering news, project details, and contact information. The organization positions itself as a key regional player in supporting economic and social development.

Eesti Ehitusinseneride Liit (EEL) is a non-profit voluntary association representing construction engineers in Estonia. Founded in 1991, it serves approximately 500 individual members and several collective members, providing professional membership services, certification, training, and information resources. The website positions EEL as a reputable and established professional body within the Estonian construction sector. Technically, the site is built on WordPress with common plugins and libraries, featuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers are absent and privacy compliance is minimal due to lack of privacy and cookie policies. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission, but could improve in privacy and security policy transparency.

I

Itero – Digitālā marketinga aģentūra

itero.lv

24

The website www.itero.lv appears to be a small business site hosted on WordPress with minimal content and limited digital maturity. The site lacks essential legal documents such as privacy policy, cookie policy, and terms of service, which are critical for compliance and user trust. Contact information and social media presence are not evident, reducing accessibility and credibility. Technically, the site uses standard web technologies but lacks advanced security headers and optimization features. The security posture is basic with no visible incident response or vulnerability disclosure mechanisms. Overall, the site presents a low-risk profile but requires significant improvements in compliance, security, and content quality to enhance trust and professionalism.

S

SportAccord

aimsisf.org

43

The Alliance of Independent Recognized Members of Sports (AIMS) operates as a non-profit international sports alliance representing various independent sports federations. The organization is positioned as a key stakeholder in the global sports governance ecosystem, partnering with major entities such as the International Olympic Committee (IOC), SportAccord, WADA, and ITA. The website serves as a communication platform providing news, member federation information, and partnership details to its target audience of sports professionals and federations worldwide. Technically, the website is built on WordPress using the Elementor page builder, hosted on StableServer infrastructure. The site demonstrates good mobile optimization, clear navigation, and a professional design, although some accessibility features could be improved. Performance is moderate, with no major technical issues detected in the HTML content. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but DNSSEC is not enabled and some security headers are not explicitly detected, suggesting room for improvement. From a security and compliance perspective, the website lacks explicit privacy, cookie, and terms of service policies, which impacts its privacy compliance score. No incident response or vulnerability disclosure information is available, and no direct contact emails or phone numbers are provided, limiting transparency in communication channels. The WHOIS data is consistent and transparent, confirming the legitimacy of the domain ownership and alignment with the organization's identity. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance measures, improved security header implementation, and clearer contact information to strengthen user trust and regulatory adherence.

Z

Zone Media OÜ

korvpall24.ee

36

Korvpall24.ee is a specialized Estonian media website focusing on basketball news, interviews, and event coverage. Operated by Zone Media OÜ since 2017, it serves a niche audience of basketball enthusiasts primarily in Estonia. The website features regularly updated content, including interviews and reports on local and international basketball events. Technically, the site is built on WordPress with Elementor and integrates modern web technologies such as push notifications (OneSignal), Google Analytics, and Facebook Pixel for marketing and analytics. The site uses HTTPS with good SSL configuration, ensuring secure data transmission. However, it lacks a cookie consent mechanism and explicit security or incident response policies, which are important for GDPR compliance and user trust. Overall, the site demonstrates a good balance of content quality, technical implementation, and business credibility, but could improve privacy compliance and security transparency.

P

Pärnu Lahe Partnerluskogu

plp.ee

39

Pärnu Lahe Partnerluskogu is a regional non-profit partnership organization based in Estonia, focused on supporting local development projects, cooperation, and dissemination of information in the Pärnu Bay area. The website serves as an information hub for local government entities, community organizations, and residents, providing updates on meetings, funding opportunities, and collaborative projects. The organization appears well-established with a domain age since 2010 and consistent regional focus. Technically, the website is built on WordPress using the Sydney theme and common plugins such as Yoast SEO and Elementor. It employs HTTPS and basic SEO optimizations, with moderate performance and good mobile responsiveness. However, accessibility features are basic, and some security best practices like DNSSEC and security headers are missing. From a security perspective, the site has a good SSL configuration but lacks advanced security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure mechanisms are evident. The absence of contact emails and phone numbers in the HTML limits direct communication channels, though physical addresses linked to local municipalities are present. Overall, the website is functional and professional for its purpose but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen trust and regulatory adherence.

E

Elkdata OÜ (registrar)

veetee.ee

46

VeeTee.ee is a small Estonian business specializing in outdoor recreational services including ski and snowboard rentals, canoe and rubber boat trips, and accommodation rental at Annemäe Puhkemaja. The company targets tourists and local outdoor enthusiasts seeking guided water and winter sports experiences. The website is built on WordPress with modern plugins and provides clear contact information and service descriptions. Technically, the site uses HTTPS and common WordPress technologies but lacks some security headers and explicit privacy consent mechanisms. Security posture is moderate with no critical vulnerabilities detected but room for improvement in policy transparency and compliance. Overall, the business appears legitimate with consistent domain registration data and a professional web presence.

E

Eesti Kergejõustikuliit

ekjl.ee

42

Eesti Kergejõustikuliit is the national athletics federation of Estonia, providing organizational support, event management, and athlete services within the Estonian athletics community. The website serves as a comprehensive portal for news, competition calendars, results, rankings, and educational materials targeting athletes, coaches, clubs, and fans. It holds a strong market position as the official governing body for athletics in Estonia. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, and uses Bootstrap for responsive design. The site demonstrates good digital maturity with structured data, SEO optimization, and mobile responsiveness, although some accessibility features could be improved. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses standard libraries without visible vulnerabilities. However, it lacks some security headers and does not provide explicit security or incident response policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in privacy compliance, security policy transparency, and accessibility would enhance its security posture and user trust.

P

Planeerimine.ee

planeerimine.ee

46

Planeerimine.ee is an Estonian government-related informational website dedicated to spatial planning. It provides comprehensive materials including legal documents, guidelines, FAQs, and training information to support planners and stakeholders in Estonia. The site targets professionals and public officials involved in spatial planning and related regulatory processes. The business model is primarily informational and educational, positioning itself as an authoritative resource within the Estonian government sector. Technically, the website is built on WordPress 6.8.1 with a modern tech stack including jQuery, Google Analytics, and accessibility tools. The site is mobile-optimized, uses HTTPS, and implements cookie consent mechanisms. SEO and accessibility features are well integrated, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection. However, some security headers are not explicitly present, suggesting room for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages. Overall, the website demonstrates a solid security posture and technical maturity suitable for a government informational portal. Strategic recommendations include enhancing security headers, publishing privacy and incident response policies, and maintaining up-to-date software to mitigate risks.

H

Hannomal OÜ

veebispetsid.com

50

Hannomal OÜ operates a professional web development and e-commerce service business based in Estonia, with a strong market presence since 2011. The company offers a comprehensive suite of services including website creation, e-shop development, graphic design, programming, and content writing, primarily leveraging the WordPress platform. Their website reflects a mature digital presence with good SEO and user experience design. Technically, the site uses modern web technologies and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the business demonstrates transparency and credibility with clear contact information and consistent branding.

M

MTÜ Lastekaitse Liit

markalast.ee

41

MTÜ Lastekaitse Liit operates the 'Märka Last' web portal, a non-profit platform dedicated to promoting child rights and welfare in Estonia. The website offers a variety of content including opinion articles, podcasts, news updates, and educational resources targeting parents, children, youth, and child protection professionals. The organization is well-established with a domain registered since 2019 and maintains a consistent brand presence online. Technically, the site is built on WordPress using modern themes and plugins, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and basic security practices in place, though improvements such as enabling DNSSEC and publishing a security.txt file are recommended. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found in the provided content. Overall, the website is professional, trustworthy, and serves its non-profit mission effectively.

Z

Zone Media OÜ

maardupanoraam.ee

39

Maardu Panoraam is a local news and information website serving the residents of Maardu, Estonia. It provides timely news, official announcements, event information, job postings, and messages from the mayor, targeting the local community. The website is built on WordPress CMS, leveraging common plugins such as WPBakery Page Builder and WPML for multilingual support. It uses Google Analytics and Tag Manager for visitor tracking and performance insights. The site is hosted under the domain registered by Zone Media OÜ, an Estonian registrar, aligning with the website's geographic focus. Technically, the website demonstrates a moderate level of digital maturity with responsive design, good SEO practices, and integration of modern web technologies. However, it lacks some advanced security measures such as DNSSEC and security headers, which could be improved to enhance protection against common web threats. The absence of privacy and cookie policies indicates a gap in compliance with GDPR and related privacy regulations, which is critical given the use of tracking technologies. From a security perspective, the site uses HTTPS and secure login forms but does not provide explicit security or incident response policies. No WAF or blocking mechanisms are detected, and no suspicious or malicious indicators are present. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.

Jaanilill is a small local kindergarten based in Järva-Jaani, Estonia, providing early childhood education services primarily to local families. The website serves as an informational portal with basic content about the kindergarten, including navigation to pages about history, daily schedule, and parental information. The business model is straightforward, focusing on educational services for young children in a local community setting. The domain age and WHOIS data indicate a legitimate and consistent online presence since 2015. Technically, the website is built on WordPress using the Twenty Seventeen theme and includes jQuery as a JavaScript library. The hosting is provided by Elkdata OÜ, a local Estonian hosting provider. The site is accessible over HTTPS with a good SSL configuration but lacks advanced security headers and modern tracking or analytics tools. Mobile optimization and accessibility are basic but functional. From a security perspective, the site benefits from HTTPS but lacks security headers and does not display privacy or cookie policies, which are important for GDPR compliance. No forms or data collection mechanisms are present on the homepage, reducing immediate data protection risks. However, the absence of incident response contacts or security policies indicates a low maturity in security governance. Overall, the website is a basic but legitimate online presence for a local kindergarten. It would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to increase trust and regulatory adherence.

Aktsiaselts Koeru Hooldekeskus is a regional healthcare and eldercare service provider based in Järva County, Estonia. The organization specializes in 24/7 general care, nursing assistance, special care for individuals with deep disabilities, and dementia care. The website reflects a medium-sized entity with a clear focus on providing comprehensive care services to elderly and special needs clients. The business maintains a consistent brand presence and provides clear contact information and service descriptions, positioning itself as a trusted local healthcare provider. Technically, the website is built on WordPress using a modern tech stack including LayerSlider, WPBakery Page Builder, and Google reCAPTCHA for security. The site is mobile-optimized, accessible, and SEO-friendly, leveraging Yoast SEO and structured data for enhanced search visibility. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and integrates Google reCAPTCHA to protect forms. However, it lacks some security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website demonstrates a solid digital presence with good business credibility and technical implementation. Strategic improvements in security headers, privacy compliance, and incident response documentation would enhance the security posture and regulatory adherence.

E

Ettevõte

jarvakodu.ee

43

Järvakodu is a small healthcare business operating a newly renovated elderly care home in Järva-Jaani, Estonia. The facility offers 24/7 general care services with a focus on personalized attention, a supportive environment, and sustainable energy solutions such as solar panels and geothermal heating. The website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the site is built on WordPress using modern plugins and frameworks, hosted by Elkdata OÜ, and demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though some security headers and policies could be improved. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, but no terms of service or incident response information is published. Overall, the site is trustworthy and well-maintained, supporting the business's credibility and customer engagement.

R

Rakvere Spordikeskus

rakverespordikeskus.ee

48

Rakvere Spordikeskus is a well-established public sports center located in Rakvere, Estonia, founded in 2010. It serves as a key regional hub for sports facilities, events, and training programs targeting local residents, sports clubs, and event organizers. The website reflects a professional and community-focused organization with clear contact information and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although formal security policies and incident response information are not published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the site demonstrates a mature digital presence suitable for its public service role.

R

Rakvere kultuurikeskus

rakverekultuurikeskus.ee

43

Rakvere kultuurikeskus is a public cultural center based in Rakvere, Estonia, providing cultural event hosting, room rentals, and advertising services to the local community and visitors. The website serves as an information portal for cultural activities and services offered by the institution. The domain is well-established since 2012 and aligns with the organization's public service role. Technically, the website is built on WordPress using a modern theme and several plugins to enhance functionality, including social media integration and event management features. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy, serving its purpose effectively with room for security and compliance improvements.