Security Directory

R

Raasiku Vallavalitsus

raasikukalender.ee

45

Raasikukalender.ee is a local government-operated event calendar website serving the Raasiku municipality in Estonia. It provides categorized listings of cultural, sports, theater, music, and other community events targeted at residents and visitors. The website is designed to promote local events and facilitate community engagement through an accessible online platform. The business model is a public service information portal without commercial intent, focusing on local government communication and event promotion. Technically, the website is built on WordPress CMS with common plugins such as Contact Form 7 and uses modern JavaScript libraries like jQuery and Flatpickr for enhanced user experience. It employs Plausible Analytics, a privacy-conscious analytics tool, and loads resources from reputable CDNs. The site is hosted by Elkdata OÜ, an Estonian hosting provider, and uses HTTPS with a valid SSL certificate, ensuring secure data transmission. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and deferred script loading. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure mechanisms are present, indicating room for improvement in security governance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy and professionally maintained with a clear focus on community service. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, and establishing a vulnerability disclosure process to enhance security posture and regulatory compliance.

I

Ida-Viru Ühistranspordikeskus

ivytk.ee

47

Ida-Viru Ühistranspordikeskus is a non-profit organization dedicated to coordinating and providing public transportation services in the Ida-Viru region of Estonia. The website serves as an information hub for passengers and transport providers, offering schedules, route maps, contact details, and ticket purchasing options. The organization is small-sized, regionally focused, and operates transparently with clear contact information and official registration details. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, jQuery, and Yoast SEO for optimization. It employs Google reCAPTCHA v3 for form security and uses privacy-conscious analytics tools like Plausible. The site is hosted by Elkdata OÜ, consistent with the domain registration data, and uses HTTPS with a good SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and spam protection on forms. However, it lacks published security policies, security headers, and cookie consent mechanisms, which are important for compliance and enhanced security posture. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website is professional, trustworthy, and functional, but it would benefit from improved privacy compliance and enhanced security policies to better protect users and meet regulatory requirements.

N

Nullist OÜ

nullist.ee

50

Nullist OÜ operates a well-established Estonian online marketing education platform, offering practical training and courses for beginners and advanced learners. The company has a strong market presence with over 3000 business clients and targets entrepreneurs, social media managers, and marketing professionals. Their business model focuses on digital education through webinars, workshops, and masterclasses. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Plausible Analytics, ensuring GDPR compliance and user consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is professional, fast, mobile-optimized, and trustworthy, reflecting a mature digital infrastructure and credible business operations.

Nevercode Ltd. operates Codemagic, a specialized SaaS platform providing continuous integration and delivery (CI/CD) services tailored for mobile app development across multiple frameworks including Flutter, React Native, native Android/iOS, Unity, Ionic, and MAUI. The company targets mobile development teams seeking to automate and accelerate their build, test, and release pipelines. With over 150,000 developers trusting the platform and notable clients showcased, Codemagic holds a strong market position as a focused mobile CI/CD solution. Technically, the website is modern, fast, and mobile-optimized, leveraging cloud hosting on AWS and integrating analytics tools such as Google Tag Manager and Plausible Analytics. Security posture is robust, with HTTPS enforced, SOC 2 type 2 and ISO 27001 certifications, and GDPR/CCPA compliance clearly stated. However, DNSSEC is not enabled and no public security.txt or incident response contacts were found, representing areas for improvement. Overall, the platform demonstrates a mature digital presence with strong trust signals and compliance adherence.

The website unitycicd.com serves as a dedicated landing page for Codemagic's Unity CI/CD automation services, operated by Nevercode Ltd. It targets Unity game developers and teams by offering cloud-based continuous integration and delivery solutions that simplify building, testing, and publishing games to multiple platforms including Google Play, Apple App Store, Steam, and Oculus Store. The site is well-branded, consistent with the parent Codemagic platform, and provides extensive documentation and community support links, positioning itself as a mature player in the CI/CD market for game development. Technically, the site is built with modern web standards including HTML5, CSS3, and JavaScript, leveraging Google Tag Manager and Plausible Analytics for tracking. Hosting is inferred to be on AWS based on DNS nameservers. The site is fast, mobile-optimized, and accessible with good SEO practices. No CMS is detected, indicating a custom-built solution. Security is robust with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. From a security posture perspective, the site demonstrates good practices such as cookie consent and a published security statement. However, it lacks explicit vulnerability disclosure mechanisms and incident response contact details. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing a consistent domain registration and no privacy protection, enhancing trust. Overall, unitycicd.com is a professional, secure, and trustworthy website that effectively supports Codemagic's Unity CI/CD offering. Strategic improvements in DNS security and explicit vulnerability disclosure would further strengthen its security and compliance posture.

Nevercode Ltd. operates the Codemagic platform, a specialized continuous integration and delivery service tailored for React Native developers. The platform enables mobile development teams to automate their build, test, and deployment pipelines, accelerating time to market by approximately 20%. Positioned as a leading CI/CD solution in the React Native ecosystem, Codemagic serves a large developer base with integrations across popular Git repositories and testing services. The business model is SaaS-based, focusing on developer productivity and automation.

Nevercode Ltd. operates the Flutterci.com website, providing specialized continuous integration and continuous delivery (CI/CD) services for Flutter developers. The platform supports building, testing, and deploying Flutter applications across multiple platforms including mobile, web, and desktop. Positioned as a leading CI/CD provider in the Flutter ecosystem, the company targets mobile app developers seeking streamlined DevOps pipelines. The website reflects a mature SaaS business model with a focus on developer productivity and automation.

N

NEVERHACK

neverhack.com

64

NEVERHACK is a well-established cybersecurity company founded in 2016, providing a broad range of services including risk assessment, compliance, managed security services, identity management, and incident response. The company targets businesses seeking to strengthen their cybersecurity posture and comply with evolving regulations such as GDPR and NIS2. The website demonstrates a mature digital presence with modern technologies, a comprehensive content offering, and a consistent brand image. Security posture is strong with HTTPS, domain protection, and advanced service offerings, though some improvements are recommended in cookie consent and incident response contact transparency. Overall, NEVERHACK presents a credible and professional cybersecurity partner with a global operational footprint.

W

Wittl

wittl.co

62

Wittl is a SaaS company providing a modern applicant tracking system tailored for small and medium-sized teams. Their platform enables users to create job postings, customize career sites, manage applicant reviews, and collaborate efficiently during the hiring process. Positioned as an affordable and user-friendly alternative to legacy ATS solutions, Wittl targets SMBs seeking streamlined recruitment workflows. The website demonstrates a professional and consistent brand presence with clear service offerings and customer testimonials, reinforcing trust and market relevance. Technically, the site is built on a modern React and Next.js stack, delivering fast performance and excellent mobile optimization. The use of privacy-focused analytics (Plausible) aligns with contemporary data protection expectations. However, the absence of certain security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, reflecting good baseline security hygiene. The lack of published security policies or incident response contacts suggests an opportunity to enhance transparency and preparedness. The WHOIS data is privacy protected, which is typical for SaaS businesses but limits external verification of registrant details. Overall, Wittl presents a credible and well-executed online presence with minor gaps in privacy compliance and security best practices. Strategic enhancements in these areas would further strengthen user trust and regulatory alignment.

B

Brand Archive

brandarchive.xyz

64

Brand Archive is a technology-driven platform launched in 2023 that provides a comprehensive digital archive of brand assets including logos, art direction, and fonts. It targets brand researchers, designers, and marketers seeking inspiration and historical brand data. The platform operates on a subscription model offering free and pro tiers, positioning itself as a niche service in the brand research market. Technically, the website leverages modern JavaScript frameworks such as Nuxt.js and integrates payment processing via Stripe and analytics through RudderStack and Plausible Analytics. The site is mobile optimized and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and uses domain privacy protection, but lacks some recommended security headers and does not publish privacy or cookie policies, which are compliance gaps. Overall, the website is functional and trustworthy but would benefit from enhanced privacy disclosures and security hardening.

G

Fluently: Your AI English Speaking Coach

getfluently.app

62

Fluently is an AI-driven English speaking coach platform offering affordable and accessible language tutoring services. The website positions itself as a cost-effective alternative to traditional human tutors, targeting English learners who want to improve speaking skills and confidence. The technical infrastructure is built using Framer with integrations of popular analytics tools such as Google Analytics, Facebook Pixel, Amplitude, and Plausible, indicating a modern digital maturity level. Security posture is strong with HTTPS enforced and appropriate security headers, but lacks visible privacy and cookie policies, as well as contact information and incident response details, which are important for compliance and trust. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

A

Ajuntament de Barcelona

bcn.cat

66

The website www.barcelona.cat serves as the official digital portal for the Ajuntament de Barcelona, providing comprehensive information and services for residents and visitors of Barcelona city. It offers a wide range of resources including news, cultural events, public services, transport information, and business support, positioning itself as a key government communication channel. The site is well-branded, professionally designed, and targets a broad audience interested in city life and governance. Technically, the site is built on Drupal 10, leveraging modern web technologies such as Bootstrap for responsive design, and integrates multiple analytics platforms including Google Analytics, Matomo, and Plausible. Cookiebot is used for cookie consent management, ensuring GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, uses security headers, and implements anti-CSRF tokens. However, explicit security policies and incident response contacts are not published, and no security.txt file is found. The WHOIS data is unavailable, likely due to registry policies, but the domain and content strongly indicate legitimacy. Overall, the security posture is solid but could benefit from enhanced transparency and formalized vulnerability disclosure mechanisms. The overall risk assessment is low, with the site representing a trustworthy government resource. Strategic recommendations include publishing detailed security and incident response policies, adding a security.txt file, and maintaining vigilance on third-party scripts. These steps will further strengthen trust and compliance in the evolving regulatory landscape.

Welement AS is a medium-sized Estonian company specializing in offsite timber construction solutions, serving contractors, engineers, and developers primarily in Northern Europe. Founded in 2015 and part of the Rand & Tuulberg Group, Welement offers prefabricated timber frame elements and facade systems, positioning itself as an innovative partner in the construction industry. The website reflects a professional and consistent brand with clear business messaging and multiple case studies showcasing their projects. Technically, the site is built on modern frameworks like Gatsby and React, with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. Privacy compliance is basic, lacking a dedicated privacy policy page, which is a notable gap. Overall, the domain registration and WHOIS data support the legitimacy and maturity of the business.

L

Location Unit

locationunit.ee

42

Location Unit is a specialized service provider offering location rental and management services primarily for TV commercials, films, and photo shoots. Established in 2014 and based in Estonia, the company targets media production professionals in the Baltic region. Their website reflects a focused business model with clear service categories including green products, facilities, vehicles, and equipment rentals. The company maintains a consistent brand presence and leverages modern web technologies such as Next.js and React for their digital platform. The site is mobile-optimized and performs well, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is weak due to the lack of privacy and cookie policies or consent mechanisms. The WHOIS data confirms domain legitimacy with a consistent registration history and alignment with the business location. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures to strengthen trust and compliance.

N

NEVERHACK

expert-line.com

62

NEVERHACK is a well-established cybersecurity company founded in 2016, providing a broad range of services including risk assessment, identity and access management, managed security services, compliance consulting, and incident response. The company targets businesses seeking to strengthen their cybersecurity posture and comply with regulations such as GDPR and NIS2. The website demonstrates a mature digital presence with modern technologies and a comprehensive content strategy highlighting use cases and expert testimonials. Technically, the site is well implemented with a performant stack and good mobile optimization. Security posture is strong, leveraging HTTPS, domain protections, and offering managed SOC services, although some improvements like DNSSEC and explicit vulnerability disclosure could enhance trust. Privacy compliance is generally good, with a clear privacy policy, but lacks a cookie consent mechanism. Business credibility is high, supported by certifications and detailed service descriptions. Overall, NEVERHACK presents as a credible and professional cybersecurity partner with room for minor enhancements in transparency and privacy controls.

L

Latitude59

latitude59.ee

53

Latitude59 is a well-established flagship startup and technology event based in Estonia, with a history dating back to 2012. It serves as a key platform for startups, investors, partners, and media to connect and showcase innovation. The website reflects a mature event organization with a strong international presence, offering pitch competitions, investor days, and satellite events worldwide. The business model centers on event management and ecosystem development within the technology sector. Technically, the website is built on WordPress using Elementor and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and PixelYourSite. The site is optimized for SEO and mobile devices, with a good user experience and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is good, with a comprehensive privacy and cookie policy and GDPR adherence. However, the site lacks explicit security policies, incident response contacts, and terms of service pages, which could enhance trust and compliance. Overall, Latitude59's website demonstrates a professional, secure, and privacy-conscious digital presence aligned with its business objectives.

E

European Film Agency Directors association

europeanfilmagencies.eu

68

The European Film Agency Directors association (EFAD) is a non-profit organization representing national film and audiovisual agencies across European countries. It serves as a collective voice for these agencies, which are government or government-associated bodies responsible for funding and regulating audiovisual policies. EFAD's market position is that of a recognized umbrella organization facilitating cooperation, joint initiatives, and advocacy in the European audiovisual sector. The website reflects a professional and well-structured digital presence, supporting EFAD's mission and providing resources such as news, projects, and member information. Technically, the website employs modern web technologies including JavaScript ES modules, Google Fonts, and the Vite build tool. It uses Plausible Analytics for privacy-conscious visitor tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting details are not explicitly identified, but the site uses HTTPS with strong SSL configuration. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers such as Content-Security-Policy or X-Frame-Options, and does not publish a security policy or vulnerability disclosure. The WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious patterns are detected. Contact information and privacy compliance measures are clearly presented, supporting trustworthiness. Overall, EFAD's website demonstrates a mature digital presence aligned with its organizational goals. Security posture is good but could be improved with additional headers and published policies. The domain and business information align well, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to maintain transparency and privacy compliance.

H

Horizon Pulp & Paper Ltd

horizon.ee

53

Horizon Pulp & Paper Ltd is a well-established European manufacturer specializing in 100% virgin sack kraft paper, serving packaging applications and exporting to over 70 countries. The company has a solid market position as a leading manufacturer in its sector, with a business model focused on manufacturing and international export. The website reflects a professional corporate presence with good content quality and consistent branding, targeting industrial and business clients in need of packaging materials. Technically, the website is built on a modern WordPress platform using WooCommerce for e-commerce capabilities, Elementor for page building, and Yoast SEO for search engine optimization. The site demonstrates good mobile optimization and moderate performance, with integration of analytics tools such as Google Analytics and Plausible Analytics. Hosting appears to be managed by Elkdata OÜ, consistent with the domain registration data. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible exposed sensitive data. However, there is a lack of explicit security headers and no published security or incident response policies. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a clear privacy policy and terms of service pages represents a compliance gap. No contact information or incident response contacts were found, limiting user trust and support options. Overall, the website is functional, professional, and secure in basic terms but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include publishing comprehensive privacy and terms policies, adding security headers, and providing clear contact channels for security incidents and data protection inquiries.

Nevercode Ltd. operates Codemagic, a specialized SaaS platform providing continuous integration and delivery (CI/CD) services tailored for mobile app development across multiple frameworks including Flutter, React Native, native Android/iOS, Unity, Ionic, and MAUI. The platform targets mobile development teams seeking to automate build, test, and release workflows to accelerate app delivery. With over 150,000 developers trusting the service, Codemagic holds a strong market position as a focused mobile CI/CD solution with enterprise-grade features and integrations. Technically, the website demonstrates a modern and performant infrastructure hosted on AWS, utilizing JavaScript, CSS, and HTML5 with integrations for Google Tag Manager and Plausible Analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. The platform itself offers cloud-based, fully maintained infrastructure with support for multiple hardware/software configurations, emphasizing ease of use and automation. From a security perspective, Codemagic maintains a robust posture with HTTPS enforced, SOC 2 type 2 and ISO 27001 certifications, and compliance with GDPR and CCPA. The website includes privacy and security statements and cookie consent mechanisms. However, there is no public incident response contact or security.txt file, which could enhance transparency and vulnerability management. No critical vulnerabilities or exposed sensitive data were detected. Overall, Codemagic presents a trustworthy, professional, and technically sound offering with strong compliance and security practices. The domain registration is privacy protected but consistent with the company profile and age. Strategic recommendations include publishing a security.txt file, adding explicit incident response contacts, and enhancing security headers to further strengthen security posture and trust.

P

Platvorm

platvorm.ee

47

Platvorm is a specialized data visualisation studio based in Tallinn, Estonia, focusing on integrating physical and digital spaces through innovative digital platforms. Their services include data visualisation, exhibitions, smart city solutions, mapping, installations, web development, VR/AR, and 3D printing. The company targets clients who require advanced digital storytelling and interactive media solutions. The website reflects a niche market position with a professional and consistent brand presence. Technically, the website is built using modern technologies such as React and Next.js, with a focus on performance and mobile optimization. The use of Plausible Analytics indicates a privacy-conscious approach to user tracking. However, there is room for improvement in accessibility and security headers to enhance the overall technical maturity. From a security perspective, the site benefits from HTTPS and deferred script loading but lacks important security headers and formal privacy and cookie policies, which are critical for GDPR compliance. No forms or sensitive data exposure were detected, reducing immediate risk. The WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the website is professional and functional but should address privacy compliance and security best practices to reduce risk and improve trustworthiness.

BNO (Beroepsorganisatie Nederlandse Ontwerpers) is a well-established Dutch professional association for designers and design agencies, boasting a history of over 100 years. It serves as the largest community of designers in the Netherlands, offering a broad range of services including advice, training, coaching, events, publications, and mentoring. The website reflects a mature organization with a clear market position and a strong focus on supporting and promoting the design sector in the Netherlands. Technically, the site is built on the Odoo CMS platform, leveraging modern web technologies and analytics tools such as Google Tag Manager and Plausible Analytics. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security posture is solid with HTTPS enforced, CSRF protection, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

V

VšĮ „Kino Aljansas“

scanorama.lt

48

Scanorama.lt is the official website for the annual European film festival 'Scanorama' organized by VšĮ „Kino Aljansas“, a Lithuanian non-profit cultural organization. The festival spans multiple Lithuanian cities and focuses on showcasing European cinema, including feature films, short films, and thematic programs. The website provides comprehensive information about the festival program, news, film recommendations, and archival content. It targets film enthusiasts, cultural audiences, and industry professionals within Lithuania and the broader European cinema community. Technically, the website employs modern web technologies including Vue.js, Laravel backend, and integrates multiple analytics platforms such as Google Analytics, Facebook Pixel, Umami, and Plausible. Hosting and media assets are served via DigitalOcean Spaces CDN, ensuring reliable content delivery. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is basic with a cookie consent banner and privacy policy present, but lacks detailed GDPR compliance documentation. Business credibility is supported by clear company information, contact details, and social media presence. However, the absence of WHOIS data due to query limits limits domain trust verification. Overall, the site is professional, content-rich, and well-structured, serving its cultural mission effectively.

W

Withlocals

withlocals.com

66

Withlocals is a travel platform that connects travelers with local hosts offering private tours, food experiences, and home dinners across multiple global destinations. The website presents a professional and user-friendly interface built on modern web technologies such as React and Next.js, with integration of analytics tools like Google Tag Manager and Plausible Analytics. Despite the strong digital presence and good content quality, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Furthermore, the lack of visible privacy and cookie policies, as well as missing security headers, indicates gaps in compliance and security posture. Overall, the platform appears functional and credible from a business perspective but would benefit from enhanced security and privacy measures to improve trust and compliance.

E

Emergn

returnonintelligence.com

64

Emergn is a consulting and professional services company specializing in building product-centric companies and capabilities. They offer a comprehensive suite of services including digital transformation, product management, experience design, data analytics, software development, cloud and DevOps, intelligent automation, and learning skills development. The company targets mid-sized to large enterprises and global corporations, positioning itself as a trusted partner with a proven track record working with Fortune 500 clients and major global brands. Their business model emphasizes enabling clients to own their transformation through competency development rather than dependency on consultants. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, Google Tag Manager, and Plausible Analytics. The site employs performance optimizations like ShortPixel image compression and uses Lottie animations for enhanced user experience. The website is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. However, explicit security headers and dedicated security or incident response policies are not found, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces transparency but does not negate the professional presentation and trust indicators on the site. Overall, Emergn presents a strong business and technical profile with good security posture and privacy compliance. Strategic recommendations include enhancing security header implementation, publishing explicit security policies, and improving domain registration transparency to further strengthen trust and compliance.

W

Weightmans

weightmans.com

72

Weightmans is a leading UK law firm offering a broad range of legal services to businesses and individuals. The firm positions itself as a rapidly growing entity with a global reach, focusing on client and employee satisfaction. Their website reflects a professional and comprehensive presentation of their services, sectors, and products, targeting a diverse audience including commercial clients and private individuals. The firm operates primarily within the UK legal market, serving sectors such as healthcare, insurance, real estate, and regulatory law. Technically, the website employs modern web technologies including Google Tag Manager and Plausible Analytics for tracking, Google Fonts for typography, and implements strong security measures such as HTTPS and multiple security headers. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices with enforced HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of a publicly available security policy or incident response information is a gap. The WHOIS data is missing, which raises questions about domain registration transparency, though the website's professional quality mitigates some concerns. Overall, the website is trustworthy and professional, but verifying domain registration details and publishing security policies would enhance trust and compliance posture.

U

Uasabi Ltd

kube.events

60

Kube Events is a specialized online platform operated by Uasabi Ltd, focused on curating and promoting Kubernetes-related events such as meetups, conferences, workshops, and webinars. The platform targets Kubernetes professionals, developers, and the cloud native community, providing a centralized resource for discovering relevant events worldwide. The business operates primarily as an event aggregator and newsletter service, positioning itself as a niche player within the Kubernetes ecosystem. Technically, the website is hosted and registered via Cloudflare, ensuring robust infrastructure and security. The site employs modern web technologies and integrates privacy-conscious analytics (Plausible Analytics). Security posture is strong with HTTPS enforcement and appropriate security headers, though DNSSEC is not enabled. However, the site lacks explicit privacy and cookie policies, as well as detailed contact information and security incident response disclosures, which are areas for improvement. Overall, the platform demonstrates good professionalism and content quality, with moderate trustworthiness and a solid technical foundation.

G

GodEl

godel.se

63

GodEl is a Swedish energy company specializing in providing renewable electricity contracts without hidden fees or binding periods. The company positions itself as a socially responsible supplier, donating all profits to charity and emphasizing sustainability. Their offerings include fixed and hourly electricity pricing, a mobile app for consumption monitoring, and smart heating solutions. The website reflects a mature digital presence with modern technologies such as WordPress CMS, Google Tag Manager, Cookiebot for consent management, and analytics tools including Google Analytics and Hotjar. Security posture is strong with HTTPS enforced and bot protection via reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed with comprehensive cookie consent and a detailed privacy policy. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, user-friendly, and trustworthy, supporting GodEl's market position as a reputable energy provider in Sweden.

R

Roawr AB

flowby.io

61

Flowby is a Swedish technology company founded in 2021 that offers a SaaS digital queue management solution enabling customers to join queues via their phones and receive notifications when it's their turn. The service targets businesses looking to enhance customer experience and increase sales without requiring physical hardware or installations. The website is built on a modern React and Gatsby framework with Chakra UI for styling, demonstrating good technical maturity and performance. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly visible. Privacy compliance is limited due to the absence of a privacy policy and terms of service, though a cookie consent mechanism is implemented. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

Nemco A/S is a well-established Danish company founded in 1996, specializing in providing innovative and sustainable solutions to the food industry across the Nordic region. Their offerings include machinery, technical equipment, and packaging solutions, supported by service and spare parts. The company positions itself as a leading Nordic supplier with a strong emphasis on personal contact and customer service. Technically, the website is built on modern frameworks such as Nuxt.js, with responsive design and good SEO practices. The site employs comprehensive cookie consent mechanisms and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security-wise, the site uses HTTPS and cookie consent but lacks explicit security policies or incident response contacts, suggesting room for improvement in transparency and security communication. Overall, the domain's long history and consistent WHOIS data reinforce the company's legitimacy and trustworthiness.

L

Lundgrens Advokatpartnerselskab

lundgrens.dk

60

Lundgrens Advokatpartnerselskab is a Danish law firm that has announced the cessation of its independent operations as of February 28, 2025. The firm operates as a partnership and is recognized as among the best within its business areas, focusing on providing high-quality legal services. The website communicates the transition of its partners to other established law firms, ensuring continuity of service for clients. The firm targets clients seeking professional legal advisory services in Denmark. Technically, the website is built on Drupal 9 CMS, utilizing modern JavaScript libraries such as jQuery and GSAP for enhanced user experience. It employs Plausible Analytics for privacy-conscious visitor tracking and is optimized for mobile devices with good accessibility and SEO practices. The site is served over HTTPS, though DNSSEC is not enabled, and some security headers are missing, indicating room for improvement in security hardening. From a security perspective, the website shows a moderate security posture with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of DNSSEC and security headers like Content-Security-Policy suggests potential risks that could be mitigated. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is transparent, including company emails and physical address, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-maintained, with a good balance of content quality, technical implementation, and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing comprehensive security headers, and continuous monitoring of third-party scripts to further enhance security and trust.

I

infinityPV

infinitypv.com

69

infinityPV is a specialized Danish company focused on designing and manufacturing advanced laboratory equipment for slot-die coating and roll-to-roll processing, serving the photovoltaic and energy technology sectors. Their products bridge the gap between research and industrial-scale production, targeting researchers and industrial manufacturers. The website reflects a professional and consistent brand presence with clear contact information and social media engagement. Technically, the site is built on Squarespace, leveraging modern analytics and marketing tools such as Google Tag Manager, Cookiebot, Hotjar, and Plausible Analytics, indicating a moderate level of digital maturity. Security posture is strong with HTTPS and HSTS enabled, but the absence of explicit privacy policies, terms of service, and incident response contacts suggests room for improvement in compliance and transparency. The missing WHOIS data raises concerns about domain registration legitimacy, warranting further verification. Overall, the site is functional, secure, and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

W

WellPerform

wellperform.com

55

WellPerform is a specialized consultancy and engineering firm operating primarily in the energy sector, offering services in well management, drilling and completion engineering, exploration, and development operations. Their portfolio includes projects in Oil & Gas, Geothermal, Carbon Capture Storage, and Salt Cavern wells, serving over 100 international clients with more than 600 completed projects. The company also provides recruitment services tailored to the energy industry. Technically, the website is built on Webflow and integrates modern web technologies such as Lottie animations, Cookiebot for cookie consent, and live chat tools, reflecting a moderate to good digital maturity. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms but lacks published privacy and terms of service policies, which are critical for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional content and contact details suggest a legitimate business presence. Overall, the website is well-designed and functional but would benefit from enhanced transparency and compliance documentation.

E

Enhedslisten | De Rød-Grønne

enhedslisten.dk

64

Enhedslisten.dk is the official website of Enhedslisten, a Danish left-wing political party focused on community, justice, and green transition. The site serves as a platform for political information, membership engagement, and event promotion, targeting Danish citizens interested in red-green politics. The website is built on WordPress with modern plugins such as WooCommerce and Gravity Forms, and uses the Astra theme, indicating a mature digital infrastructure. It integrates Plausible Analytics for privacy-conscious tracking and Sleeknote for lead generation. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, but lacks published privacy and terms of service policies, which are critical for compliance and trust. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and explicit security documentation.

E

EyeJustRead

eyejustread.com

53

EyeJustRead is a Danish-based educational technology company specializing in data-driven reading development tools. Their award-winning SaaS platform leverages eye tracking and audio data to provide automatic analysis and feedback to support reading instruction for students, teachers, and educational consultants. The company collaborates with reputable educational institutions, publishers, and universities, positioning itself as a trusted partner in the education sector. The website is professionally designed, bilingual (Danish and English), and targets a broad audience including educators, parents, and students. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPBakery Page Builder, and integrates Google reCAPTCHA and Plausible Analytics for privacy-conscious tracking. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and anti-bot measures in place, but additional security headers and a published security policy would strengthen defenses. The WHOIS data is unavailable, indicating privacy protection or recent registration, which slightly reduces transparency but does not detract from the professional appearance and active partnerships. No critical vulnerabilities or exposed sensitive data were detected. Overall, EyeJustRead presents a credible and trustworthy online presence with room for minor security and compliance improvements.

C

Concept X

concept.dk

66

Concept X is a digital advertising service provider focused on empowering marketers with a comprehensive toolbox and scalable media distribution to accelerate success in the digital ad space. The website is professionally designed using modern technologies such as Next.js and Prismic CMS, with integration of privacy management and analytics tools like Plausible Analytics. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and privacy policies indicates room for improvement. The domain WHOIS data is missing, which raises concerns about domain registration legitimacy and reduces overall trust. The website lacks visible contact information and formal privacy or cookie policies, which impacts privacy compliance scores. Overall, Concept X presents as a credible small business in the media sector but should address domain registration transparency and privacy compliance to enhance trust and security.

F

Fredericia Spildevand og Energi A/S

frse.dk

64

Fredericia Spildevand og Energi A/S is a municipal utility company based in Denmark, specializing in the transport, treatment, and energy production from wastewater within Fredericia Kommune. The company operates as a key player in the local water cycle, providing essential environmental and energy services to residents and businesses in the region. Their website reflects a professional and consistent brand presence, targeting local customers with clear service information and support channels. Technically, the website is built on modern web technologies including Alpine.js and Tiny Slider, with Umbraco CMS likely powering the backend. The site is mobile-optimized, accessible, and incorporates privacy-compliant analytics via Plausible. Cookie consent is actively managed with a detailed banner and declaration, supporting GDPR compliance. Performance is moderate, with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident and could be improved. There is no visible security policy or incident response contact information, which are areas for enhancement. No vulnerabilities or suspicious patterns were detected. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting a trustworthy user experience. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic improvements in security headers and transparency policies would further strengthen the site’s security and compliance standing.

L

Lund Elmer Sandager Advokatpartnerselskab

lundelmersandager.dk

72

Lund Elmer Sandager is a well-established Danish law firm founded in 2008, specializing in business-oriented legal services. The website reflects a professional and modern approach, targeting businesses and individuals seeking legal advice in Denmark. Their market position is supported by a consistent brand presence and comprehensive service offerings. Technically, the site is built on Drupal 10, integrating modern analytics and marketing tools such as Google Tag Manager, Plausible Analytics, and Cookiebot for GDPR-compliant cookie management. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though some security headers could be improved. The WHOIS data aligns well with the business identity, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations.

A

Aasted

aasted.eu

57

Aasted is a family-owned manufacturing company specializing in world-class machinery for the chocolate, bakery, and confectionery industries. With over 100 years of engineering expertise, the company offers a range of equipment, consultancy, energy solutions, and technology center services targeting B2B clients in the manufacturing sector. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on WordPress with modern SEO and analytics tools, supported by Cloudflare for security and performance. Security posture is strong with HTTPS, security headers, and a comprehensive cookie consent mechanism, although explicit security and incident response policies are not published. Privacy compliance is good with GDPR-aligned cookie management. Overall, the website is trustworthy and well-maintained, supporting the company's market position as an established manufacturer.

T

TV 2 Kosmopol

tv2lorry.dk

57

TV 2 Kosmopol is a Danish media outlet providing metropolitan news coverage focused on Denmark's only metropolitan area. The website offers news articles, video streaming, and user engagement features such as tips and questions. It is positioned as a regional news leader under the TV 2 Danmark A/S umbrella, targeting Danish-speaking audiences interested in local metropolitan news. The site employs modern web technologies including Livewire, Alpine.js, JWPlayer, and Statamic CMS, indicating a mature digital infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit privacy and terms of service policies are not found in the provided content. Overall, the domain registration and WHOIS data align with the business identity, supporting legitimacy and trustworthiness.

T

TV 2 Østjylland

tv2oj.dk

63

TV 2 Østjylland operates as a regional Danish media outlet delivering news, video content, podcasts, and local reporting focused on the Østjylland region. The website is well-branded and targets local residents seeking timely news and multimedia content. It is part of the larger TV 2 Danmark network, positioning it as a key regional media player. The business model centers on content publishing with advertising and digital distribution. Technically, the website employs modern technologies including Alpine.js for interactivity, JW Player for video content, and Statamic CMS for content management. Analytics tools such as Plausible and Microsoft Clarity are used with a cookie consent mechanism to manage user privacy. The site is mobile-optimized and demonstrates good SEO practices, although accessibility could be improved. From a security perspective, the site enforces HTTPS, uses multiple security headers, and avoids exposing sensitive data. However, it lacks explicit privacy policy and terms of service pages, and no direct contact or incident response information is provided, which are areas for improvement. The use of third-party scripts is controlled via consent, but ongoing monitoring is recommended. Overall, the website is professional and trustworthy with a solid security posture but would benefit from enhanced transparency in privacy and security policies and clearer contact channels for users and security incidents.

Q

Quansight Consulting

quansight.com

50

Quansight Consulting is a specialized data science and AI/ML consulting firm leveraging open source software and the Python ecosystem to solve complex data problems. Founded in 2017 and headquartered in Austin, Texas, the company serves organizations seeking advanced AI, machine learning, and data engineering solutions. Their market position is strengthened by notable founders and active contributions to major open source projects, positioning them as trusted experts in the technology sector. Technically, the website is built on WordPress with Elementor, uses modern JavaScript libraries, and is hosted with Cloudflare DNS and CDN services, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers like Content-Security-Policy. Privacy compliance is good with a clear privacy policy and GDPR indicators, though a cookie consent mechanism is missing. Overall, the site reflects a professional, trustworthy, and technically mature organization with room for security enhancements.

O

OpenMined

openmined.org

58

OpenMined is a US-based 501(c)(3) non-profit foundation and community focused on advancing privacy-preserving AI technologies. The organization develops open-source solutions such as SyftBox and PySyft to enable secure and privacy-enhanced data collaboration. Their mission addresses critical challenges in AI training data access blocked by privacy, security, and legal constraints. The website reflects a professional, mission-driven entity with a clear focus on privacy-enhancing technologies and community involvement. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted on AWS infrastructure, and integrates payment processing via Stripe for donations. Security posture is solid with HTTPS and domain protections, though some enhancements like DNSSEC and security headers are recommended. Privacy compliance is limited as no explicit privacy or cookie policies were found, which is an area for improvement. Overall, the site demonstrates good business credibility and technical maturity but would benefit from enhanced privacy and security disclosures.

L

LangChain

langchain.com

69

LangChain is a technology company specializing in AI agent development frameworks and platforms. Their product suite supports developers through the entire lifecycle of building reliable AI agents and LLM applications, including orchestration, integration, evaluation, and deployment. The company has established a strong market position with a large developer community and significant GitHub presence. Technically, the website is built on modern web technologies, including Webflow CMS, JavaScript frameworks, and cloud video hosting, delivering fast performance and excellent mobile optimization. Security posture is good with HTTPS and secure forms, though some security headers and explicit incident response policies are missing. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, LangChain presents a professional and trustworthy digital presence, though the lack of WHOIS data transparency is a minor concern.

E

Evli

evli.com

68

Evli is a Nordic asset management and investment firm serving private individuals, companies, and institutions. The company positions itself as a specialized wealth manager offering personalized services including Private Banking and a broad selection of investment funds. The website content is professionally presented in Finnish with multilingual support, targeting a Nordic audience. Evli's market position is that of a reputable regional financial services provider with a focus on wealth management and investment solutions. Technically, the website employs modern web technologies including Craft CMS, Google Tag Manager, Plausible Analytics, and Cookiebot for consent management. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. The presence of CSRF tokens and HTTPS indicates a solid security foundation, although explicit security headers are not evident in the provided data. Security posture is strong with enforced HTTPS, secure cookie usage, and a comprehensive cookie consent mechanism compliant with GDPR. However, the absence of a publicly accessible privacy policy or terms of service pages in the analyzed content is a gap. No WHOIS data is publicly available, likely due to privacy protection, which is common for financial institutions to safeguard sensitive registration details. Overall, the website presents a trustworthy and professional digital presence for Evli. The lack of WHOIS transparency slightly reduces trust but is mitigated by consistent branding and active social media engagement. Strategic recommendations include publishing explicit privacy and security policies, adding security headers, and providing vulnerability disclosure information to enhance transparency and compliance.

T

Tydliga AB

tydliga.se

60

Tydliga AB is a Swedish intermediary organization specializing in providing clear and professional advice on insurance and investment products. Positioned as a leading entity in Sweden's financial advisory sector, Tydliga supports independent insurance and investment advisors with procurement, education, compliance, and administrative services. The company emphasizes customer-centric, tailored solutions for both private individuals and businesses. Technically, the website is built on a custom CMS with JavaScript and uses modern analytics tools like Plausible and Google Analytics. The site is well-structured, mobile-optimized, and secured with HTTPS, although it lacks some security headers and formal privacy and terms of service pages. Security posture is solid with no evident vulnerabilities, but improvements in compliance documentation and security headers are recommended. Overall, the website reflects a professional and trustworthy business with a moderate to high digital maturity level.

H

HireHive

hirehive.com

29

HireHive is a well-established recruitment software company specializing in applicant tracking and recruitment management solutions. The company targets businesses and recruitment agencies seeking to streamline their hiring processes through a comprehensive SaaS platform. With over 2,000 customers and millions of applications processed, HireHive holds a strong market position in the recruitment technology sector. The website reflects a professional and user-friendly design, showcasing key features such as job posting automation, candidate management, interview scheduling, and recruitment analytics. Technically, the website leverages modern technologies including Svelte for frontend rendering, HubSpot for marketing and CRM integration, and Calendly for scheduling. The site is optimized for performance, mobile responsiveness, and SEO, indicating a mature digital infrastructure. Analytics are implemented via HubSpot, Google Tag Manager, and Plausible, balancing marketing needs with privacy considerations. From a security perspective, the site enforces HTTPS and integrates security best practices through HubSpot's ecosystem. While explicit security headers like Content-Security-Policy are not visible, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, incident response contacts and vulnerability disclosure mechanisms are not publicly documented. Overall, HireHive presents a trustworthy and professional online presence with a solid security posture and compliance framework. The domain registration details align well with the business claims, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and providing explicit incident response contacts to further strengthen trust and security readiness.

Red Sift is a technology company specializing in email security and cyber resilience solutions, prominently offering the OnDMARC platform to protect organizations against phishing and business email compromise (BEC) attacks. The company holds a strong market position with over 1,000 organizations relying on its award-winning cloud-based DMARC, DKIM, and SPF management services. Red Sift integrates advanced AI capabilities through its Radar product, enhancing email security diagnostics and configuration efficiency. The website demonstrates a mature technical infrastructure leveraging modern frameworks like Next.js and React, with a well-optimized, mobile-friendly design and comprehensive content that supports user engagement and trust. Security posture is robust, featuring HTTPS, security headers, and responsible disclosure policies, with no critical vulnerabilities detected. Overall, Red Sift presents a credible and professional digital presence aligned with industry best practices and compliance standards.

H

HelpBnk

helpbnk.com

71

HelpBnk is a technology-driven platform designed to provide community sourced free help and rewards to entrepreneurs globally. It positions itself as a niche social network and support system for entrepreneurs, startups, and pre-entrepreneurs, facilitating peer-to-peer assistance and fostering a collaborative environment. The platform offers features such as spaces for topic discussions, leaderboards, messaging, and curated content to engage its user base. Technically, HelpBnk leverages modern web technologies including React, Laravel, and various analytics and tracking tools like Hotjar, Facebook Pixel, and Plausible Analytics. The hosting and media delivery are managed via DigitalOcean Spaces, indicating a cloud-based infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. The website demonstrates good design quality, mobile optimization, and SEO practices, contributing to a positive user experience. Overall, HelpBnk presents as a credible and functional platform with room for enhanced transparency in security and contact information.

P

Plug and Play Design Ltd

plugandplaydesign.co.uk

66

Plug and Play Design Ltd is a well-established web design agency founded in 2006, operating primarily in London and Surrey, UK. The company offers a comprehensive suite of digital services including web design, eCommerce solutions, branding, mobile app development, digital transformation, and digital marketing. Recognized with multiple industry awards, the agency serves a diverse client base ranging from SMEs to larger corporate entities, emphasizing strategic and creative digital solutions that drive business growth. Their market position is strong, supported by a consistent brand presence and a portfolio of notable clients.

1

1Spatial

1spatial.com

62

1Spatial is a globally recognized leader in geospatial data management and location master data management solutions. The company offers a comprehensive portfolio of products and services designed to automate, validate, cleanse, and enhance spatial and non-spatial data for a wide range of industries including government, utilities, transport, and mapping agencies. Their market position is strong, supported by ISO 27001 certification and a broad client base showcased through success stories. Technically, the website employs modern technologies such as Google Maps API, Cookiebot for consent management, Google Tag Manager, and Plausible Analytics, reflecting a mature digital infrastructure with good performance and accessibility. Security posture is robust with HTTPS enforcement, security headers, and no exposed sensitive data, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.