Security Directory

K

Klépierre Management Česká Republika s.r.o.

klepierre.cz

54

Klépierre Management Česká Republika s.r.o. operates prominent shopping centers in the Czech Republic, including Nový Smíchov in Prague and Plzen Plaza in Plzeň. The company is part of the larger Klépierre group based in France, specializing in retail real estate management. Their website provides information about their centers, compliance mechanisms including a whistleblowing system, and cookie consent management, reflecting a commitment to regulatory compliance and user privacy. Technically, the website is built using modern web technologies such as Next.js and React, hosted via Gandi registrar's infrastructure. The site includes a comprehensive cookie consent mechanism using tarteaucitron.js and integrates Google Tag Manager for analytics. The website is mobile-optimized and provides a good user experience with clear navigation and branding consistency. From a security perspective, the site enforces HTTPS and uses a high privacy cookie consent mode. It features a whistleblowing system for incident reporting, demonstrating a mature compliance posture. However, explicit security headers and a dedicated security policy page are absent, and no vulnerability disclosure or security.txt file was found. These gaps suggest room for improvement in formalizing security communication and transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The domain age and WHOIS data align with the business claims, indicating legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to strengthen security posture and trust.

D

Dr. Oetker

oetker.cz

63

Dr. Oetker Czech Republic operates a well-designed and content-rich website focused on baking recipes, desserts, and product sales. The site targets home bakers and families, offering recipe inspiration and an e-commerce platform for purchasing products. The brand is well-established with over 100 years of history, reflected in consistent branding and professional content. Technically, the website uses modern frameworks such as Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent management, though explicit security headers and privacy policies are lacking. WHOIS data is missing, which reduces trustworthiness but the website's content and branding strongly suggest legitimacy. Overall, the site is professional and user-friendly but could improve transparency on privacy and security policies.

T

Tervise ja Heaolu Infosüsteemide Keskus

terviseportaal.ee

64

Terviseportaal is the official Estonian government digital health portal operated by the Tervise ja Heaolu Infosüsteemide Keskus (TEHIK). It provides comprehensive health-related information and services to Estonian residents, including access to personal health data, appointment booking, prescriptions, health certificates, and screening programs. The portal is well-positioned as the primary national health service gateway, integrating with key partners such as Tervisekassa and the Estonian Health Development Institute. The website demonstrates a high level of digital maturity with modern technologies like React and Next.js, excellent mobile optimization, and good accessibility features. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Overall, the portal is trustworthy, professional, and compliant with GDPR and cookie regulations, serving a large user base effectively.

F

Funky Pigeon

funkypigeon.com

70

Funky Pigeon is a UK-based e-commerce retailer specializing in personalized greeting cards, gifts, and flowers. The company operates under the parent company WH Smith PLC, positioning itself as a significant player in the UK retail market for personalized gifting solutions. The website offers a broad range of products tailored for various occasions, targeting consumers seeking unique and personal gift options. Technically, the site is built using modern web technologies including React and Next.js, with integrations for customer data platforms and marketing analytics, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS, employs standard security headers, and provides comprehensive privacy and cookie policies with consent mechanisms, indicating a strong commitment to user data protection. However, the absence of WHOIS registration data is a notable anomaly, though the overall site professionalism and parent company association mitigate concerns. Strategic recommendations include publishing explicit security policies and incident response contacts, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security posture.

R

Rahva Raamat

rahvaraamat.ee

56

Rahvaraamat.ee is the leading Estonian bookstore chain offering a comprehensive selection of books and media products through both online and physical retail channels. The company is well-established with a domain age since 2010 and operates under Zone Media OÜ. Their website is built on modern technologies such as Next.js and React, providing a responsive and user-friendly experience. The integration of Cookiebot ensures GDPR compliance with a detailed cookie consent mechanism. Security posture is strong with HTTPS enforced and appropriate security headers in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates a mature digital presence with extensive analytics and advertising integrations, supporting a robust e-commerce business model.

C

Coolbet

coolbet.se

64

Coolbet is an online gambling platform offering casino games, sports betting, and poker services primarily targeting the Finnish market. The website is professionally designed with consistent branding and uses modern web technologies including React and third-party services for geolocation compliance and analytics. The platform operates under multiple licenses and employs geolocation restrictions to comply with regulatory requirements. Security posture is generally good with HTTPS enforced and error monitoring via Sentry, but lacks explicit security headers and detailed privacy or cookie policies. The absence of WHOIS data reduces domain transparency and trustworthiness, although the website content and technology usage indicate a legitimate business. Strategic recommendations include enhancing privacy compliance, publishing clear contact and security policies, and improving security header implementation.

C

Coolbet

coolbet.mx

59

Coolbet is a multi-jurisdictional online gambling operator offering casino games, poker, and sports betting services primarily targeting regulated markets including Mexico. The platform leverages modern web technologies such as React and integrates third-party services for geolocation compliance and betting functionalities. While the website demonstrates good technical implementation and security posture with HTTPS and security headers, it lacks visible privacy and cookie policies, incident response documentation, and explicit contact information, which are critical for compliance and user trust. The WHOIS data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and transparency would enhance overall trust and regulatory adherence.

C

Coolbet

coolbet.ca

62

Coolbet operates as an online gambling platform offering sports betting, casino games, and poker services across multiple regulated markets including Canada, Estonia, Malta, and Sweden. The website demonstrates a modern technical infrastructure leveraging React, third-party integrations such as GeoComply for geolocation compliance, Playtech for poker, and BetRadar for sports data. The platform is designed with a professional and consistent branding approach, targeting online gamblers in regulated jurisdictions. Security posture is generally good with HTTPS enforced and error tracking via Sentry, though explicit security headers and privacy policies are not evident in the provided content. The absence of WHOIS data for the domain www.coolbet.com is a notable gap, reducing transparency and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer contact information.

V

Vejle Idrætshøjskole

vih.dk

67

Vejle Idrætshøjskole is a Danish educational institution specializing in sports-focused high school courses, targeting young people in sabbatical years or summer courses. The website presents a professional and modern digital presence built on React and Next.js, with good mobile optimization and SEO practices. The site implements a comprehensive cookie consent mechanism via Cookiebot, ensuring GDPR compliance and user privacy awareness. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security and incident response policies are not publicly visible. WHOIS data is unavailable, which is typical for Danish domains, but no suspicious indicators are found. Overall, the site reflects a trustworthy and well-managed educational service with moderate to good digital maturity.

Y

Yaga

yaga.co.za

62

Yaga is a South African online marketplace specializing in preloved and new fashion items, providing a platform for users to buy and sell clothing safely. The website targets consumers interested in sustainable fashion and sellers looking to monetize their preloved items. The platform integrates secure payment methods and multiple delivery partners, enhancing user trust and convenience. Technically, Yaga employs modern web technologies including React, Next.js, and Material-UI, with integrations for analytics and marketing tools such as Google Tag Manager, TikTok Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses secure payment gateways, but lacks explicit security headers and published privacy or terms policies, which are recommended for compliance and trust. Overall, the website is professional and trustworthy, though improvements in privacy transparency and security policies would strengthen its posture.

K

Klarvinduer

klarvinduer.dk

65

Klarvinduer.dk is a Danish retail website specializing in custom-made windows and doors, offering high-quality products at factory prices with discounts up to 60%. The business targets both DIY consumers and professional customers, positioning itself competitively in the Nordic and European markets with sister sites in multiple countries. The website is built on modern web technologies including React and Next.js, with content managed via DatoCMS and cookie consent managed by Cookiebot. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy or terms of service policies. Contact information is limited to a contact form without explicit emails or phone numbers. The domain registration is consistent with the business history and shows no suspicious patterns, supporting the legitimacy of the site.

N

Natuzzi SpA

natuzzi.com

68

Natuzzi SpA is a globally recognized furniture brand specializing in the design and retail of sofas, chairs, tables, beds, and other home furnishings. The company targets consumers seeking premium and harmonious home decor solutions, positioning itself as a leader in the retail furniture industry. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored for an international audience. Technically, the site leverages modern technologies including React, Google Tag Manager, and Cookiebot for compliance and analytics, ensuring a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published, representing an area for improvement. The WHOIS data is notably missing or unavailable, which introduces some uncertainty about domain registration transparency, but the overall website and brand presence strongly indicate legitimacy. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing domain registration transparency to bolster trust and compliance.

W

Wunderkraut

wunder.io

76

Wunder is a Finnish digital solutions company specializing in digital transformation, software development, data analytics, and cloud hosting services. Established in 2012, the company serves a diverse client base including public sector organizations and enterprises, positioning itself as a trusted partner in delivering user-centered digital services. The website reflects a mature digital presence with comprehensive content, client success stories, and clear service offerings. Technically, the site leverages modern frameworks such as Next.js and Drupal CMS, hosted on reliable platforms with Cloudflare DNS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be explicitly added. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website demonstrates professionalism, trustworthiness, and a solid digital maturity level.

D

Decacorn Capital

decacorncapital.com

66

Decacorn Capital is a Singapore-based venture capital firm specializing in funding innovative technology startups and disruptive companies. The firm positions itself as a backer of 'rebel minds' aiming to create new opportunities and unlock possibilities in various sectors including AI, cybersecurity, fintech, and more. Their portfolio includes a mix of unicorns, decacorns, and acquired companies, demonstrating a strong market presence and investment acumen. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS and comprehensive security headers, though there is room for improvement in privacy compliance and incident response transparency. Overall, the site reflects a professional and credible investment firm with a solid digital infrastructure.

Enefit Green is a leading renewable energy producer in the Baltic Sea region, specializing in wind and solar energy production across Estonia, Latvia, Lithuania, Poland, and Finland. The company operates a substantial portfolio of wind parks, solar power plants, and other renewable energy assets, positioning itself as the largest wind energy producer in the Baltics. Their business model focuses on sustainable energy production and regional energy independence, supported by significant recent investments and growth. Technically, the website is built on modern frameworks like React and Next.js, hosted with Cloudflare DNS and CDN services, ensuring fast performance and mobile optimization. The site implements strong privacy and cookie consent mechanisms, reflecting good GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and providing incident response contacts to further strengthen trust and compliance.

Bolt Technology OÜ operates a leading European mobility superservice platform offering ride-hailing, food and grocery delivery, car and scooter rentals, and business travel solutions. The company is well-positioned in the transportation and technology sectors with a large global footprint across 600+ cities and 50+ countries. Their digital presence is robust, leveraging modern web technologies such as Next.js and React, with strong SEO, mobile optimization, and accessibility features. The website demonstrates a high level of professionalism and branding consistency, supported by comprehensive privacy and cookie policies aligned with GDPR requirements. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, Bolt's website and digital infrastructure reflect a mature and trustworthy business with a strong market presence and good compliance practices.

J

John Robertson Architects

jra.co.uk

61

John Robertson Architects is a reputable architectural practice operating primarily in the UK with offices in London, Edinburgh, and Lodz. They specialize in commercial, residential, and mixed-use architectural projects, offering design, planning, and project delivery services. The firm positions itself as a leading player in the architectural sector with a strong portfolio and industry recognition. Technically, the website is built on modern frameworks such as Next.js and uses Sanity CMS, delivering a fast, mobile-optimized, and accessible user experience. The site employs HTTPS and a cookie consent mechanism, indicating good privacy compliance. However, the absence of WHOIS data for the domain www.jra.co.uk due to a naming rules violation introduces some uncertainty about domain registration legitimacy. Security posture is generally strong with no visible vulnerabilities, but the lack of explicit security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, though the domain registration anomaly should be clarified to enhance credibility.

Plastok is an Estonian-based e-commerce business specializing in the sale and custom manufacturing of plastic, rubber, and sealing products. Established in 2010, the company offers a broad range of products including antivibration mats, seals, and BulletSafe shooting range equipment. The website is professionally designed with a clear focus on product categories and customer navigation, targeting businesses and individuals requiring specialized plastic and rubber solutions. The technical infrastructure leverages modern web technologies such as React and Emotion CSS, hosted by Radicenter OÜ, a reputable Estonian hosting provider. Analytics and cookie consent are managed via Google Tag Manager and Cookiebot respectively, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, though the absence of security headers and explicit privacy and terms policies suggests room for improvement. Overall, the website is functional and trustworthy but would benefit from enhanced compliance documentation and security best practices to strengthen user trust and regulatory adherence.

A

Altex

altex.ro

48

Altex.ro is a well-established Romanian e-commerce platform specializing in the sale of electronics and household appliances. Founded in 2001, it holds a strong market position as a leading retailer in Romania, offering a wide range of products including phones, laptops, TVs, and home appliances. The website features a comprehensive product catalog and supports fast delivery and installment payment options, targeting Romanian consumers seeking competitive prices and convenience. Technically, the website is built using modern web technologies such as React and Next.js, hosted on Akamai's infrastructure, and integrates analytics and marketing tools like Google Tag Manager, Hotjar, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected. However, the absence of a visible privacy policy, terms of service, and direct contact information for security incidents indicates areas for improvement in compliance and transparency. Overall, Altex.ro demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic enhancements in privacy documentation, security policy publication, and contact transparency would further strengthen its security posture and regulatory compliance.

Mehiläinen Oy is a leading Finnish healthcare service provider offering comprehensive medical and health services across Finland. The website presents a professional and user-friendly interface, targeting Finnish residents seeking quality healthcare. The company operates both physical clinics and digital health services, positioning itself strongly in the Finnish healthcare market with a long history dating back to 1909. The website is built on modern technologies including React and Gatsby, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and multiple security headers present, though there is room to improve transparency by publishing a dedicated security policy and incident response contacts. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

R

Rephop

rephop.com

74

Rephop is a specialized SaaS provider offering web-based group consolidation, reporting, and planning software tailored for CFOs and finance professionals. Established in 2013, it has positioned itself as a trusted solution for simplifying complex financial consolidation processes across multiple subsidiaries and currencies. The platform emphasizes ease of use, powerful features such as intergroup transaction reconciliation, non-controlling interest calculations, and compliance with IFRS and US GAAP standards. Its market presence is supported by customer testimonials and a clear pricing model targeting small to medium-sized businesses and enterprises. Technically, Rephop leverages modern web technologies including Next.js and React, hosted on Vercel with Cloudflare DNS services. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Analytics tools such as Vercel Analytics and Google Tag Manager are used for user behavior tracking, though privacy compliance could be enhanced with explicit cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a consistent and legitimate domain registration history aligned with the company's operational timeline. Overall, Rephop demonstrates a strong business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and enabling DNSSEC to bolster trust and regulatory adherence.

E

Eklips Digital

eklips.se

57

Eklips Digital is a specialized provider of subscription-based corporate websites, targeting listed and non-listed companies primarily in the Nordic region. Founded in 2011, the company offers a Corporate Website as a Service (CWaaS) platform that includes web development, design, branding, hosting, maintenance, security, and support services. Their market position is strengthened by serving 10% of Nasdaq Stockholm Main Market companies and delivering over 300 websites with a 99.9% uptime guarantee. The website is professionally designed using modern technologies such as Next.js and React, reflecting a mature digital infrastructure. However, the absence of WHOIS data for the domain www.eklips.se raises concerns about domain registration legitimacy, which should be verified. Security posture is moderate with no visible vulnerabilities but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website presents a trustworthy and professional business presence but requires improvements in compliance and domain legitimacy verification.

A

Afternic (GoDaddy Operating Company, LLC)

ryapolov.com

70

The website ryapolov.com is a domain sales landing page hosted on the Afternic platform, a domain aftermarket service owned by GoDaddy Operating Company, LLC. It offers the domain ryapolov.com for sale with options to buy outright or lease to own. The site targets domain buyers including businesses and individuals seeking premium domain names. The business model is focused on domain brokerage and sales, leveraging GoDaddy's extensive infrastructure and brand recognition. The platform provides contact forms and phone support to facilitate domain price inquiries and transactions. Technically, the site is built using modern web technologies including React and Next.js, hosted on Amazon AWS infrastructure. It employs HTTPS with strong security headers and integrates third-party services such as Klarna for payments and Trustpilot for reputation. The site is optimized for performance and mobile responsiveness, with good SEO and basic accessibility features. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature digital presence. From a security perspective, the website demonstrates strong posture with enforced HTTPS, secure forms protected by reCAPTCHA, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy documentation and incident response contact information, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain reduces transparency but is likely due to privacy protection or query limitations. Overall, the site is legitimate, professional, and secure, suitable for its domain sales purpose. The overall risk assessment is low, with recommendations to improve transparency by publishing security policies and incident response details, enhancing accessibility, and maintaining regular audits of third-party scripts. These steps will further strengthen trust and compliance in the competitive domain aftermarket space.

A

AS G4S Eesti

g4s.ee

68

AS G4S Eesti is a leading security services provider in Estonia, operating as part of the international G4S group. The company specializes in a broad range of security solutions including home security, video surveillance, manned guarding, fire safety, event security, and training services. Their website reflects a mature and professional organization with a strong market position and a comprehensive service portfolio targeting both private individuals and business clients. The company has been established since 2010, with a consistent domain registration and a clear digital presence. Technically, the website is built on modern frameworks such as Next.js and React, with a CMS likely based on Strapi, hosted on reliable infrastructure including AWS and Ultradns. The site is well-optimized for mobile devices, SEO, and accessibility, providing a positive user experience. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and integrates trusted third-party services like LiveChat and Cookiebot. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance with privacy regulations such as GDPR.

Entigo is a technology company specializing in container management platforms, site reliability engineering as a service, and hands-on training for development and platform teams. Positioned as a niche B2B provider, Entigo targets developers and enterprises adopting cloud-native containerized infrastructure. The company demonstrates strong market positioning through partnerships with AWS, Google Cloud, and Kubernetes certifications, supported by ISO 9001 quality management certification. Technically, the website is built on modern frameworks including Next.js and Strapi CMS, hosted on Vercel, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website reflects a professional, trustworthy, and mature digital presence suitable for its target audience.

Welement AS is a medium-sized Estonian company specializing in offsite timber construction solutions, serving contractors, engineers, and developers primarily in Northern Europe. Founded in 2015 and part of the Rand & Tuulberg Group, Welement offers prefabricated timber frame elements and facade systems, positioning itself as an innovative partner in the construction industry. The website reflects a professional and consistent brand with clear business messaging and multiple case studies showcasing their projects. Technically, the site is built on modern frameworks like Gatsby and React, with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. Privacy compliance is basic, lacking a dedicated privacy policy page, which is a notable gap. Overall, the domain registration and WHOIS data support the legitimacy and maturity of the business.

N

NeighborFavor, Inc.

favordelivery.com

70

Favor Delivery is a Texas-exclusive on-demand delivery service specializing in fast, contactless delivery of food, groceries, and other items. The company operates as a subsidiary of H-E-B, a well-known Texas grocery chain, positioning Favor as a regional leader with strong local branding and hospitality focus. The website targets Texas residents and businesses seeking convenient delivery solutions, leveraging a mobile-optimized, React-based platform with extensive third-party integrations for analytics and marketing. The technical infrastructure reflects modern web development practices, including the use of Google Tag Manager, Segment, Braze, and Firebase, supporting a robust digital presence. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contacts are not visible. The absence of WHOIS data is a notable anomaly but does not detract from the professional presentation and affiliation with H-E-B. Overall, Favor Delivery demonstrates a mature e-commerce platform with good privacy compliance and marketing sophistication.

H

HUB88 Limited

hub88.io

62

HUB88 Limited operates a technologically advanced casino games aggregation platform, offering a single API to integrate over 12,000 games from more than 100 suppliers. The company positions itself as the fastest aggregator in the iGaming industry, targeting operators and suppliers seeking efficient and scalable integration solutions. Their platform includes a powerful back office, personalized player content, and a payments platform, supported by 24/7 live customer support and transparent platform status monitoring. The company is licensed and regulated by the Malta Gaming Authority, enhancing its credibility in the regulated gaming market. Technically, the website is built using modern frameworks such as Next.js and React, hosted behind Cloudflare DNS and CDN services. It employs analytics tools including Google Tag Manager and LinkedIn Insight Tag, indicating a mature digital marketing and analytics setup. The website is well-optimized for mobile devices, has good accessibility features, and demonstrates strong SEO practices. From a security perspective, the site enforces HTTPS, uses standard security headers, and does not expose sensitive data. However, it lacks a visible cookie consent mechanism and formal security or incident response policies, which are areas for improvement to enhance compliance and trust. The domain registration is consistent and legitimate, with no privacy protection masking ownership, and a long registration period indicating business stability. Overall, HUB88 presents a professional, secure, and credible online presence with minor gaps in privacy compliance and formal security disclosures. Strategic improvements in these areas would further strengthen their market position and regulatory adherence.

L

Location Unit

locationunit.ee

42

Location Unit is a specialized service provider offering location rental and management services primarily for TV commercials, films, and photo shoots. Established in 2014 and based in Estonia, the company targets media production professionals in the Baltic region. Their website reflects a focused business model with clear service categories including green products, facilities, vehicles, and equipment rentals. The company maintains a consistent brand presence and leverages modern web technologies such as Next.js and React for their digital platform. The site is mobile-optimized and performs well, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is weak due to the lack of privacy and cookie policies or consent mechanisms. The WHOIS data confirms domain legitimacy with a consistent registration history and alignment with the business location. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures to strengthen trust and compliance.

Agentuur MUST is a small Estonian event organizing company with a Facebook presence dating back to 2009. Their Facebook page serves as their primary digital footprint, offering basic business information, contact details, and social proof through likes and followers. The company targets clients seeking event management services locally. Technically, the page leverages Facebook's robust platform, ensuring good performance, mobile optimization, and security through HTTPS and standard security headers. However, the page lacks explicit privacy, cookie, and security policies, which limits compliance and trust signals. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security transparency. Overall, the business appears legitimate and consistent with its domain registration data, but enhancing privacy and security disclosures would strengthen its digital maturity and user trust.

Enefit Group is a leading Estonian energy company focused on transitioning to sustainable and renewable energy sources. Their business spans electricity and heat production from oil shale and alternative raw materials, renewable energy generation through solar and wind parks, and providing smart energy solutions to consumers and industries. The company operates primarily in Estonia but also has presence in Latvia, Lithuania, Poland, and Finland. The website reflects a mature digital presence with a modern React/Next.js tech stack, comprehensive cookie consent mechanisms, and clear corporate branding. Security posture is strong with HTTPS, security headers, and secure cookie practices, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting Enefit's market position as a responsible energy provider in the Baltic region.

C

Catapult Labs

catapultlabs.eu

54

Catapult Labs is a specialized software development and systems integration company based in Estonia, focusing on critical infrastructure and systems integrators globally. The company offers end-to-end software development, consulting, and integration services, with a strong portfolio including clients such as Ericsson, Pipedrive, and Fujitsu. They also act as an official reseller for Microsoft and Adobe business software licenses. Technically, the company employs a modern technology stack including Node.js, Java, React, Flutter, and cloud platforms like AWS and Azure, demonstrating a mature digital infrastructure. Security-wise, the website uses HTTPS and modern tracking tools but lacks explicit security headers and privacy/cookie policies, indicating room for improvement in compliance and security posture. Overall, the business appears credible and professional with a strong market position in its niche, though it should enhance privacy compliance and security transparency to further strengthen trust.

N

NEVERHACK

expert-line.com

62

NEVERHACK is a well-established cybersecurity company founded in 2016, providing a broad range of services including risk assessment, identity and access management, managed security services, compliance consulting, and incident response. The company targets businesses seeking to strengthen their cybersecurity posture and comply with regulations such as GDPR and NIS2. The website demonstrates a mature digital presence with modern technologies and a comprehensive content strategy highlighting use cases and expert testimonials. Technically, the site is well implemented with a performant stack and good mobile optimization. Security posture is strong, leveraging HTTPS, domain protections, and offering managed SOC services, although some improvements like DNSSEC and explicit vulnerability disclosure could enhance trust. Privacy compliance is generally good, with a clear privacy policy, but lacks a cookie consent mechanism. Business credibility is high, supported by certifications and detailed service descriptions. Overall, NEVERHACK presents as a credible and professional cybersecurity partner with room for minor enhancements in transparency and privacy controls.

E

Eton

etonshirts.com

72

Eton is a well-established Swedish brand specializing in premium men's shirts and accessories, with a history dating back to 1928. The company operates a sophisticated e-commerce platform targeting men seeking quality and style in shirts and related apparel. Their market position is strong within the premium retail segment, supported by a comprehensive product range including custom-made options and a membership club offering exclusive benefits. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Contentful CMS and integrating analytics tools like Google Tag Manager and Voyado. The site demonstrates excellent design quality, mobile optimization, and accessibility, providing a seamless user experience. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of explicit security policy or incident response information is noted. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is missing, which raises concerns about domain registration transparency despite the site's legitimacy and professional appearance. Overall, the website is secure, professional, and user-friendly but would benefit from improved domain registration transparency and explicit security disclosures.

I

Inzmo Gmbh

inzmo.com

72

INZMO GmbH is a German-based innovative insurance provider specializing in digital insurance solutions for consumers. Their offerings include mobile phone insurance, rental deposit warranties, bicycle insurance, laptop/tablet insurance, and e-scooter insurance. The company positions itself as a revolutionary player in the insurance market, emphasizing ease of use, fast claims processing, and 24/7 customer support. Their market approach leverages a user-friendly app and digital-first experience to attract tech-savvy customers seeking hassle-free insurance products. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforcement and bot protection via Google reCAPTCHA, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting trust and regulatory adherence. Overall, INZMO demonstrates a mature digital presence with a solid business model and good security hygiene.

SRV Yhtiöt Oyj operates in the Finnish real estate sector, focusing on sustainable and energy-efficient construction of new residential and commercial properties. The website targets potential home buyers and commercial tenants, presenting a professional and modern digital presence built with React and Gatsby technologies. The content is relevant and well-structured, although explicit privacy and cookie policies are not found in the provided content. Security posture is limited due to lack of visible security headers and policies, and no contact information or incident response details are provided. WHOIS data confirms the legitimacy and consistency of the domain registration with the business entity in Finland. Overall, the website demonstrates a good business credibility and technical foundation but requires improvements in privacy compliance and security best practices.

V

Visit Estonia

visitestonia.com

69

Visit Estonia operates as the official national tourism website for Estonia, providing comprehensive travel information, tips, and cultural insights to visitors. The website targets tourists and travelers seeking to explore Estonia's attractions, nature, and culinary experiences. It maintains a strong market position as a government-backed tourism portal with a well-established domain since 2000. The business model focuses on tourism promotion and trip planning services, leveraging digital content to attract and assist visitors.

D

Decoland

decoland.cz

52

Decoland is a Czech Republic based luxury and design furniture retailer and interior design studio. The company offers a curated gallery of design furniture and accessories, targeting consumers seeking high-end interior solutions. The website is built on a modern React and Next.js framework, incorporating cookie consent and Google Tag Manager for analytics and privacy compliance. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies in Czech language. Security posture is good with HTTPS and security headers, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not indicate malicious intent. Overall, Decoland presents a professional and trustworthy online presence in the luxury furniture retail sector.

Y

Yolla Calls International OÜ

yollacalls.com

75

Yolla Calls International OÜ operates a telecommunications service focused on providing affordable international calling and texting through its mobile app and web platform. Founded in 2014 and based in Estonia, Yolla targets international callers, expatriates, and travelers seeking cost-effective communication solutions. The company offers free calls between Yolla users and low-cost calls to any mobile or landline worldwide, supported by subscription offers and a reseller program. The website is professionally designed with clear navigation, mobile optimization, and comprehensive content including FAQs, offers, and social proof via Trustpilot reviews. Technically, the site uses modern frameworks such as Next.js and Material UI, integrates Google Tag Manager for analytics, and employs CookieYes for cookie consent management. Security posture is good with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved and a formal security policy is absent. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the site presents a trustworthy and mature business with a solid digital presence.

S

Salva Kindlustuse AS

salva.ee

54

Salva Kindlustuse AS is an established Estonian insurance company founded in 1993, offering a range of insurance products to the local market. The website reflects a mature business with consistent branding and a focus on providing insurance services to Estonian customers. The technical infrastructure is modern, leveraging React and Material-UI frameworks, integrated with Google Tag Manager for analytics and Apple MapKit for mapping services. The presence of a chat widget indicates customer engagement capabilities. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit privacy and terms of service documentation are missing, which impacts compliance confidence. Overall, the website is professional and trustworthy, with room for improvement in privacy transparency and contact information clarity.

V

Valio Eesti AS

valio.ee

56

Valio Eesti AS is a well-established dairy manufacturing company founded in 1992, operating primarily in Estonia. It produces and markets fresh dairy products and cheeses sourced mainly from Central and Southern Estonian farms. The company holds a strong market position as one of the largest local dairy producers, supported by a professional and content-rich website targeting Estonian consumers. The website demonstrates a mature digital infrastructure using modern technologies such as React, Azure hosting, and integrated analytics tools including Google Analytics and Hotjar. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, with clear contact information and social media presence enhancing trust. Overall, the website reflects a high level of professionalism and business credibility.

B

BekaertDeslee

bekaertdeslee.com

67

BekaertDeslee is a specialized manufacturer and provider of mattress textiles and fabric solutions, targeting mattress manufacturers and related industries. The website demonstrates a professional digital presence with multilingual support and modern web technologies, primarily built on the Liferay CMS platform. The site includes rich multimedia content such as corporate videos and product showcases, enhancing user engagement. Security posture is solid with HTTPS enforced and consent-based analytics tracking, though explicit security headers and policies are not evident. The absence of WHOIS registrant data raises concerns about domain registration transparency, which slightly impacts trustworthiness. Overall, the site is functional and professional but would benefit from improved transparency and compliance documentation.

R

random forest

randomforest.ee

50

Random Forest is a small Estonian IT consultancy and AI development agency founded in 2019, specializing in providing CTO-for-hire services, software development from UI/UX design to scalable backend systems, and AI/ML solutions. Their market position is that of a niche technology partner focused on solving real-life business problems with optimal technology stacks including React, Flutter, Node.js, and Python. The company emphasizes deep business understanding and scalable solutions. Technically, the website is built on Webflow, uses modern fonts and libraries, and is hosted with Cloudflare DNS and Webflow hosting. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided with multiple channels and social media presence. Overall, the website is professional and trustworthy but can improve privacy and security transparency.

K

Kingspan

kingspan.com

67

Kingspan operates as a global leader in manufacturing high-performance insulation and building envelope solutions. The website analyzed serves primarily as a country selector landing page, directing users to localized product sites or the corporate site for investor and corporate information. The digital infrastructure leverages Adobe Experience Manager and Adobe Launch, indicating a mature and modern web platform. The presence of a cookie consent banner and integration with Civic Cookie Control demonstrates attention to privacy compliance, particularly GDPR. However, the absence of visible contact information, security policies, and vulnerability disclosures limits transparency. The WHOIS data is notably missing or unresolvable, which raises concerns about domain registration legitimacy despite the professional website presentation. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

N

Noxtton | IT & Consulting Services

noxtton.com

64

Noxtton is an international technology and consulting company and venture studio founded in 2016. They provide a broad range of services including software development, design, digital marketing, big data and AI solutions, security assessments, and consulting. The company targets businesses and brands globally, positioning itself as a multi-dimensional technology partner with a strong portfolio of ventures and partnerships. Their website reflects a professional and modern digital presence with clear service offerings and a focus on innovation. Technically, the website is built using modern frameworks such as Next.js and React, hosted and registered via Cloudflare, ensuring reliable performance and security. Google Tag Manager is used for analytics and marketing tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, security headers, and explicit security policies or vulnerability disclosures. No contact information for incident response or data protection officers is provided. Privacy and cookie policies are missing, which impacts compliance with GDPR and other regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security policies, and clearer contact information to improve user trust and regulatory adherence.

Enefit Green is a leading renewable energy producer in the Baltic Sea region, specializing in wind and solar energy production across Estonia, Latvia, Lithuania, Poland, and Finland. The company operates a significant portfolio of wind parks, solar power plants, and other renewable assets, with a production capacity exceeding 1100 megawatts. Positioned as the largest wind energy producer in the Baltics, Enefit Green targets environmentally conscious energy consumers and investors seeking sustainable energy solutions. The business model focuses on clean energy generation and regional energy independence, supported by substantial recent investments and a growing asset base. Technically, the website is built on modern frameworks such as React and Next.js, hosted with Cloudflare DNS and CDN services, and incorporates Cookiebot for privacy compliance. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, providing a fast and user-friendly experience. The presence of structured data and comprehensive metadata further enhances its digital maturity. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, though explicit security headers and incident response policies are not publicly detailed. No vulnerabilities or exposed sensitive data were detected. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the security posture is strong but could be improved by adding formal security policies and DNSSEC. The overall risk assessment is low, with the website presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing transparency around security and incident response to further strengthen trust and compliance.

O

ONLINE ONLY OÜ

onlineonly.com

62

ONLINE ONLY OÜ is a small, Estonia-based digital marketing and online business management company operating a fully remote team of about 30 people. The company focuses on managing and investing in profitable online businesses including SaaS, eCommerce, and publishing sectors. Their key services include conversion optimization, Google Ads, SEO, design, and development. The company presents a professional and consistent brand image with a clear portfolio of owned businesses, indicating a stable market position in their niche. Technically, the website is built on a modern React and Gatsby framework, delivering good performance and mobile optimization. However, the site lacks critical privacy and cookie policies, and no security headers were detected, which are areas for improvement. The domain is well maintained with a long history and consistent WHOIS data, supporting the legitimacy of the business. Overall, the security posture is moderate with room for enhancements in policy transparency and technical security measures.

G

gotoAndPlay

gotoandplay.ee

57

gotoAndPlay is a small, agile web development team based in Estonia, founded in 2013. They specialize in creating web applications, websites, and MVPs using modern technologies such as React, Laravel, and WordPress. The company emphasizes close collaboration with clients to deliver result-driven digital solutions. Their market position is that of a niche, high-quality service provider focused on innovation and client partnership. Technically, the website is built on a modern stack with good performance, mobile optimization, and SEO best practices. Security posture is strong with HTTPS, security headers, and privacy compliance including cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site reflects a professional and trustworthy business with a clear focus on privacy and user experience.

P

Platvorm

platvorm.ee

47

Platvorm is a specialized data visualisation studio based in Tallinn, Estonia, focusing on integrating physical and digital spaces through innovative digital platforms. Their services include data visualisation, exhibitions, smart city solutions, mapping, installations, web development, VR/AR, and 3D printing. The company targets clients who require advanced digital storytelling and interactive media solutions. The website reflects a niche market position with a professional and consistent brand presence. Technically, the website is built using modern technologies such as React and Next.js, with a focus on performance and mobile optimization. The use of Plausible Analytics indicates a privacy-conscious approach to user tracking. However, there is room for improvement in accessibility and security headers to enhance the overall technical maturity. From a security perspective, the site benefits from HTTPS and deferred script loading but lacks important security headers and formal privacy and cookie policies, which are critical for GDPR compliance. No forms or sensitive data exposure were detected, reducing immediate risk. The WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the website is professional and functional but should address privacy compliance and security best practices to reduce risk and improve trustworthiness.

B

Brink's Global Services

brinks.com

69

Brink's Global Services is a well-established enterprise specializing in secure cash management and financial logistics solutions. Founded in 2000, the company offers a broad range of services including armored transportation, risk mitigation, and secure vault services, targeting businesses that require secure handling of valuable assets. The website reflects a professional and consistent brand presence with a focus on security and operational efficiency. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript frameworks such as React and AlloyEditor, hosted on Amazon infrastructure. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security-wise, the site enforces HTTPS and domain registration protections but lacks advanced security headers and published security policies. Privacy compliance is partially addressed through a OneTrust cookie consent mechanism, but no explicit privacy policy or GDPR compliance statements were found. Overall, the domain is legitimate and stable, with no blocking or WAF interference detected, supporting a high trustworthiness rating.