Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,179001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
86,001–86,050 of 99,068
- It koolitus
koolitus.ee
Information technology and services · Estonia
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Movemytalent relocation servicesmovemytalent.com
Individual & family services · Estonia
65Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Worldquant llcweareworldquant.com
Investment management · United states
71Medium
NIS2 50 · GDPR 50
NIS2 50 · GDPR 50
Condo.comcondo.com
Real estate · United states
72Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Graanul Investgraanulinvest.ee
Energy · Estonia
58Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Graanul Invest is a leading global producer of biomass and bioenergy products, with a strong market position as the largest pellet producer in Europe. The company focuses on sustainable renewable energy solutions, leveraging wood waste to produce environmentally friendly fuels and energy. Their website reflects a mature enterprise with comprehensive content, certifications, and a clear commitment to sustainability. Technically, the site is built on WordPress using modern libraries like jQuery and Bootstrap, with good SEO practices and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site projects high professionalism and trustworthiness, supporting the company's strong business credibility.
4Room4room.ee
Retail · Estonia
51Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
4Room is an Estonian manufacturer and retailer specializing in tailor-made design lighting products such as pendant lamps, ceiling lamps, and fabric shades. The company targets customers seeking high-quality, design-oriented lighting solutions, positioning itself as a niche player with a focus on Estonian design aesthetics. The website is professionally designed with good mobile optimization and clear navigation, supporting the business model of online retail and custom manufacturing. Technically, the site uses a ShopRoller CMS platform with common JavaScript libraries and tracking tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy and terms of service present, but no cookie consent mechanism is implemented. Overall, the website is trustworthy and functional, though improvements in security and privacy transparency are recommended.
Transportation · Estonia
64Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.transpordiamet.ee is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to the site's content. As a result, no business, contact, or policy information is available for analysis. The site appears to be protected by Cloudflare's security services, indicating an intent to mitigate automated access or attacks. Without access to the actual website content, it is not possible to assess the company's market position, services, or compliance posture. The technical infrastructure relies on Cloudflare's platform for security and performance, but no further details can be extracted. The security posture cannot be fully evaluated due to lack of accessible data, but the presence of a WAF challenge suggests a baseline security measure is in place. Overall, the risk assessment is limited by the lack of accessible information, and strategic recommendations focus on enabling secure but accessible content delivery and publishing clear compliance and contact information.
Snowhoundsnowhound.eu
Technology · Estonia
71Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Snowhound is a technology company specializing in software development, consulting, and training services primarily targeting businesses and organizations. Their market position is that of a trusted software development partner focused on delivering quality solutions that simplify and optimize client operations. The company operates mainly in Estonia with offices in Tartu and Tallinn. The website presents a professional and consistent brand image with detailed case studies and client testimonials, indicating a strong business credibility. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution. It employs modern web technologies including lazy loading for images and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. Hosting details are not explicitly disclosed. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and security headers which are recommended best practices. Privacy compliance is partial, with a cookie consent banner present but no privacy policy or terms of service pages found, representing a compliance gap. Overall, the website is professional and trustworthy with good business and technical foundations. The main risks relate to privacy compliance and security policy transparency. Addressing these gaps would enhance trust and regulatory adherence.
GiftTime Rugbygifttimerugby.com
Media
51Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
GiftTime Rugby is a niche media website dedicated to rugby-related content including news, podcasts, interviews, and movie reviews. Founded in 2013, it serves rugby enthusiasts with a variety of multimedia content and advertising opportunities. The website is built on WordPress with Elementor, leveraging modern web technologies and Google services for analytics and monetization. The site demonstrates good content quality and user experience with consistent branding and clear navigation. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks advanced security headers and explicit privacy or cookie policies. Overall, the site is legitimate and functional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.
Other
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website prepayway.com is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, preventing access to any substantive content. The domain is registered since 2017 with OVH sas and uses Cloudflare DNS and WAF services. Due to the blocking mechanism, no business information, contact details, or policies are available for review. The technical infrastructure shows use of Cloudflare security services but lacks visible security headers or privacy compliance indicators. Overall, the security posture cannot be fully assessed, and the lack of accessible content severely limits trust and credibility evaluation.
LTH-Baaslth-baas.com
Transportation
51Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
LTH-Baas operates as a specialized marine technical and outfitting contractor providing integrated ship services. The website presents a professional and well-structured digital presence targeting maritime industry stakeholders such as ship owners and marine contractors. The technical infrastructure is based on WordPress CMS with common plugins and Google Analytics integration, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of reCAPTCHA and cookie consent mechanisms; however, the absence of security headers and explicit security policies limits the overall security maturity. The lack of WHOIS registration data and absence of privacy and contact information represent notable gaps in business credibility and compliance. Overall, the website is functional and professional but requires improvements in transparency and security documentation to enhance trust and compliance.
- Patrika News
rajasthanpatrika.com
Media · India
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Patrika News is a prominent Hindi-language news portal focused on Rajasthan state news, offering a wide range of content including political, crime, sports, tourism, education, business, cultural, and social news. The website targets Hindi-speaking audiences interested in regional news and provides multimedia content such as photos, videos, short videos, web stories, live TV, and e-paper services. Technically, the site is built using modern web technologies including React, Next.js, Tailwind CSS, and AMP, and integrates multiple analytics and advertising platforms such as Google Analytics, Chartbeat, Comscore, and Google DoubleClick. The site is mobile-optimized and SEO-friendly with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses asynchronous script loading but lacks visible security headers and formal security policies or incident response contacts. The WHOIS data is unavailable, which raises concerns about domain transparency but the active and professional nature of the site suggests legitimacy. Privacy and cookie policies are not found, indicating a gap in compliance. Overall, the site is a well-established regional news platform with room for improvement in privacy and security transparency.
- BByteLife Solutions OÜ
bytelife.com
Technology · Estonia
54Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
ByteLife Solutions OÜ is an established Estonian IT infrastructure company specializing in providing comprehensive IT infrastructure solutions including cloud services, network and server infrastructure, security, and log management. The company positions itself as a pioneer in the Estonian market with strong partnerships with major technology vendors such as Cisco, Dell/EMC, Nutanix, VMware, and Fortinet. Their services target government agencies, financial institutions, healthcare, telecommunications, and energy sectors, emphasizing flexibility and comprehensive lifecycle management of IT services. Technically, the website is built on WordPress with modern frontend technologies like Tailwind CSS and integrates analytics and customer engagement tools such as Google Analytics and Zoho SalesIQ. The site is well-optimized for mobile and accessibility, with fast performance and good SEO practices. However, explicit privacy and cookie policies are missing, which is a compliance gap. From a security perspective, ByteLife demonstrates maturity with ISO 9001 and ISO 27001 certifications and HTTPS enforcement. There is room for improvement in publishing security headers, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS registration data reduces domain trustworthiness, but the professional presentation and business information support legitimacy. Overall, ByteLife Solutions presents a professional and credible IT service provider with strong market positioning in Estonia and the Baltics. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.
Other
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.cendyn.com is currently inaccessible due to a Cloudflare security challenge page requiring human verification before access. This prevents retrieval of any meaningful business, technical, or security content. The WHOIS lookup failed to return any registration data, indicating the domain may not be registered or WHOIS data is withheld, which raises concerns about domain legitimacy. The site relies on Cloudflare's security and performance services but does not expose any public privacy, cookie, or terms of service policies. Due to these access restrictions, a comprehensive security posture assessment and business analysis cannot be performed. The overall risk is elevated due to lack of transparency and blocked content.
Tridenstridens.si
Technology
75Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Tridens is a technology company specializing in digital solutions for monetization, billing, and EV charging, targeting industries such as Communications, Energy & Utility, Media, Software, and e-Mobility. Founded in 2018, the company positions itself as a B2B service provider with a focus on innovative digital transformation solutions. The website reflects a professional and consistent brand image with a clear business focus. Technically, the website is built on WordPress using the Elementor framework, hosted on AWS infrastructure with Cloudfront CDN. It integrates multiple analytics and tracking tools including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, Hotjar, and Microsoft Clarity, indicating a mature digital marketing approach. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and implements key security headers, contributing to a solid security posture. However, DNSSEC is not enabled, and there is a lack of explicit security policies or incident response contacts. Privacy compliance is limited due to the absence of a dedicated privacy policy and terms of service pages, which are critical for GDPR and other regulations. Overall, the website is functional, professional, and secure but would benefit from enhanced privacy compliance and transparency measures to improve trust and regulatory adherence.
- Eastern Mediterranean University Cyprus
emu.edu.tr
Education · Cyprus
63Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Eastern Mediterranean University Cyprus is a prominent state university in North Cyprus offering a wide range of associate, undergraduate, and postgraduate degree programs. The institution holds a strong market position as the only state university in the region, supported by multiple accreditations, recognitions, and international rankings. The website reflects a comprehensive academic and administrative structure targeting prospective students, current students, alumni, and academic partners. The university emphasizes research, continuing education, and international exchange programs, indicating a mature and diverse educational business model. Technically, the website employs modern web technologies including Bootstrap, FontAwesome, Google Fonts, and integrates advanced analytics and marketing tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Hosting and performance appear moderate, with no detected CMS but likely a custom or proprietary system. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses secure external scripts. However, it lacks visible security headers and explicit security or incident response policies. There is no cookie consent mechanism, which is a compliance gap given GDPR relevance. No vulnerabilities or exposed sensitive data were detected, indicating a generally strong security posture. Overall, the website is professional, trustworthy, and well-maintained, with minor improvements recommended in privacy compliance and security transparency to enhance user trust and regulatory adherence.
Stereo Creativestereocreative.com
Media
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Stereo Creative is a global creative agency specializing in culturally charged branding and marketing services. The website presents a professional and visually rich experience, showcasing recent projects and emphasizing brand building that engages audiences culturally. The agency targets brands seeking innovative and culturally relevant creative campaigns. Technically, the website is built using Framer, a modern web design platform, and integrates analytics tools such as Google Analytics, HubSpot, and LinkedIn Insight Tag, indicating a moderate level of digital maturity. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics in place. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks important security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content itself appears professional and active. Overall, the site scores moderately on content quality and technical implementation but falls short on privacy compliance and business credibility due to missing contact and legal information.
Education · Finland
68Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Seinäjoen ammattikorkeakoulu SEAMK is a Finnish higher education institution offering a broad range of bachelor's and master's degree programs, as well as continuing education and open university studies. Positioned as a regional leader in education within South Ostrobothnia, SEAMK serves students, academic partners, and local businesses. The website reflects a mature digital presence with multilingual support and clear navigation, supporting its educational mission effectively. Technically, the site is built on WordPress with modern libraries and integrates comprehensive analytics and marketing tools, all managed with a strong cookie consent mechanism ensuring GDPR compliance. Security posture is robust with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-aligned with the institution's public educational role.
Bikeepbikeep.com
Transportation · Estonia
56Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Bikeep is a medium-sized Estonian company founded in 2012, specializing in smart micromobility infrastructure including commercial bike racks, smart bike lockers, and e-scooter stations. The company targets municipalities, transit companies, commercial and residential properties, positioning itself as a global leader in smart bike parking and charging solutions. The website is built on WordPress with modern plugins and tracking tools, optimized for performance and mobile use. Security posture is good with HTTPS and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is partial with cookie consent but no explicit privacy policy found. Business credibility is high with clear company information, testimonials, and references. Overall, the website is professional and trustworthy but could improve privacy and security transparency.
- Reach-U
reach-u.com
Telecommunications · Estonia
72Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Reach-U is a technology company specializing in location-based solutions for telecommunications, security, and smart city sectors. With a claimed 30 years of experience and operations across 34 countries, they serve a large subscriber base globally. The website is professionally designed, hosted on the Weebly platform, and incorporates standard analytics and cookie consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and transparency. Security posture is generally good with HTTPS and cookie consent, but outdated libraries and missing security headers suggest room for improvement. Contact information is limited, and no explicit security or incident response policies are published.
Novian Groupandmevara.ee
Technology · Estonia
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Novian Group is a well-established IT services and solutions provider operating primarily in Estonia and the Baltic region, with subsidiaries in Lithuania, Norway, and Rwanda. The company specializes in IT infrastructure management, software development, digitization, and e-government solutions, serving both enterprise and public sector clients. Their market position is strong, supported by over 30 years of experience and a broad portfolio of services tailored to complex IT needs. The website reflects a mature digital presence with multilingual support and comprehensive service descriptions. Technically, the site is built on WordPress with modern plugins and libraries, optimized for performance and SEO. Security posture is solid with HTTPS, cookie consent management, and use of reCAPTCHA, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates professionalism, compliance with GDPR, and effective use of analytics and marketing tools, positioning Novian as a credible and trustworthy technology partner.
AS Pocopaypocopay.com
Finance · Estonia
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
AS Pocopay is a small Estonian financial services company operating as a licensed European payment institution. It offers modern payment services including current accounts, MasterCard cards, and a mobile app. The company has a 10-year history and is regulated by the Estonian Financial Supervision and Resolution Authority. The website clearly communicates the upcoming closure of payment services as of June 5, 2024, reflecting a significant business transition. Technically, the website is built on WordPress, hosted on AWS infrastructure, and uses standard JavaScript libraries such as jQuery and Picturefill. The site is mobile optimized and has good design and navigation, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy and cookie policy present but no consent mechanism or detailed GDPR compliance statements. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.
Hospitality · Estonia
53Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Estonian Convention Bureau operates as a national partner facilitating conferences, meetings, and corporate events within Estonia. It provides comprehensive resources including venue listings, supplier directories, event calendars, and group activity suggestions, targeting event planners and corporate clients. The website is professionally designed with consistent branding and good content quality, reflecting a focused hospitality industry presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates tools such as Yoast SEO, Tawk.to live chat, and AddToAny sharing, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure form handling, though improvements are recommended in security headers and fixing minor PHP warnings. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a high level of professionalism and trustworthiness, supported by consistent WHOIS data and active social media engagement.
Baltika Groupbaltikagroup.com
Retail · Estonia
51Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Baltika Group is a well-established Estonian fashion company with a history dating back to 1928. The company manages the Ivo Nikkolo brand across multiple markets, focusing on premium women's fashion with original designs and high-quality European fabrics. The website reflects a professional retail business with clear branding and consistent messaging. Technically, the site is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks several important security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. The WHOIS data is incomplete, lacking registrar and registrant details, which slightly reduces trust but does not negate the legitimacy of the business as presented on the site. Overall, the site is functional, professional, and credible but could benefit from enhanced security and privacy compliance measures.
BLUESEA Hotelsblueseahotels.com
Hospitality · Spain
72Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
BlueSea Hotels is a hospitality company operating a chain of hotels primarily in Spain and nearby destinations such as the Canary Islands and Marrakech. The company offers a variety of hotel accommodations including all-inclusive, adults-only, family-friendly, and urban hotels, targeting tourists seeking quality stays with exclusive online deals. Their market position is that of a regional hotel chain with a solid online presence and multiple properties. Technically, the website is built on Magnolia CMS with modern JavaScript frameworks and includes integrations with Google Tag Manager and Sentry for analytics and error tracking. The site is mobile optimized and provides a good user experience with clear navigation and booking functionalities. Security posture is good with HTTPS enforced and secure payment mentions, though explicit security headers and policies could be improved. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. However, the lack of WHOIS data for the domain reduces trustworthiness and suggests a need for further domain registration verification. Overall, the website is professional and trustworthy but could benefit from enhanced security transparency and domain legitimacy confirmation.
- OOU Massi Miliano
fits.me
Other · Japan
74Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at fits.me currently serves only a 404 Page Not Found error page with no substantive business content, policies, or contact information. The domain is registered to OU Massi Miliano in Japan since 2008, indicating a long-term registration, but the website itself lacks active content or branding. The technical infrastructure uses Amazon AWS DNS services but lacks DNSSEC and advanced security headers. No HTTPS or SSL configuration details were provided, limiting security posture assessment. No privacy, cookie, or terms of service policies are present, indicating poor compliance with privacy regulations. Overall, the site appears inactive or improperly configured, resulting in low trust and business credibility scores.
Testliotestlio.com
Technology
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Testlio is a technology company specializing in software testing, quality assurance, and quality engineering services. Established in 2012, it positions itself as a leading partner for demanding software testing challenges across various devices, languages, and payment systems. The company targets businesses requiring robust QA services and emphasizes flexibility and global reach. The website reflects a professional and modern digital presence, leveraging WordPress CMS with performance optimization via NitroPack and hosting infrastructure likely on AWS. The site is mobile-optimized and incorporates standard marketing and analytics tools such as Google Tag Manager and HubSpot. Security posture is solid with HTTPS enabled and domain registration protections in place, though there is room for improvement in DNS security and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service. Overall, the website demonstrates a mature business with a strong market position but could enhance trust and compliance by publishing comprehensive privacy and security documentation.
Pro Kapital Eesti ASprokapital.com
Real Estate · Estonia
51Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Pro Kapital Eesti AS operates as a leading real estate development company in the Baltic States, with a history dating back to 1994. The company focuses on developing residential and business quarters, emphasizing timeless design and quality. It is publicly listed on the Tallinn Stock Exchange, indicating a medium-sized enterprise with a solid market position. The website reflects a professional digital presence built on WordPress, incorporating modern tracking and consent management tools. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS registration data is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the company demonstrates a credible business model with clear contact information and a well-structured website.
Statistikaametstat.ee
Government · Estonia
69Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Statistikaamet is the official national statistics agency of Estonia, providing comprehensive statistical data and analysis to the public, researchers, and policymakers. The website is well-branded, consistent, and primarily serves the Estonian audience with content in the Estonian language. It operates as a government entity with a medium-sized organizational footprint, founded in 2010, and maintains a professional online presence. The technical infrastructure is based on Drupal 10 CMS, leveraging modern JavaScript libraries such as Highcharts and Moment.js for interactive data visualization. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance characteristics. Cookie consent mechanisms are implemented with GDPR compliance in mind, including an opt-in banner. Security posture is solid with HTTPS enforced and cookie consent in place, though there is room for improvement by enabling DNSSEC, adding security headers, and publishing explicit security policies or vulnerability disclosure information. No WAF or blocking mechanisms were detected, and WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is trustworthy and professional, with a strong focus on privacy compliance and user experience. Strategic recommendations include enhancing DNS security, improving security headers, and formalizing incident response and vulnerability disclosure processes to further strengthen security and compliance.
- BRV Solutions
brv-solutions.com
Technology · United States
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
BRV Solutions is a small US-based technology consultancy specializing in business transformation and ERP alignment to facilitate digital transformation. The company targets businesses seeking to improve operational processes through technology and change management. The website is professionally designed using Squarespace, with good content quality and clear navigation. Social media presence on Facebook and LinkedIn supports business credibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website presence suggests a legitimate operation. The technical infrastructure is modern but lacks some security best practices such as security headers and privacy policies. Overall, the security posture is moderate with HTTPS enabled but could be improved with additional headers and compliance documentation.
- Delfi Meedia AS
epl.ee
Media · Estonia
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Eesti Päevaleht, operated by Delfi Meedia AS, is a leading Estonian news media outlet offering comprehensive news, opinion, and cultural content. The website demonstrates a mature digital presence with a modern tech stack including Nuxt.js and Vue.js, supported by reputable advertising and analytics providers. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.
Aiv l.p.arroyodoor.com
Oil & energy · United states
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Sdsdsdsd.com
Maritime · United kingdom
72Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
- CCoodly llc
coodly.com
Information technology and services
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
BDO Eestibdo.ee
Finance · Estonia
75Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
BDO Eesti is a prominent professional services firm specializing in accounting, auditing, tax planning, payroll, and business consulting services primarily for Estonian and international clients. The company leverages its affiliation with the global BDO network to provide comprehensive and reliable financial and consulting solutions. The website reflects a mature digital presence with detailed service descriptions, a professional design, and multilingual support, targeting business clients seeking expert financial services. Technically, the site is built on modern frameworks like React and Kentico CMS, hosted on Azure infrastructure, and employs advanced analytics tools with privacy-conscious configurations. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a credible digital asset for BDO Eesti.
Other
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at vicecitymotors.com/lander is currently a minimal placeholder or parking page with no substantive business content or contact information. The domain is registered since 2017 with GoDaddy and is active, but the site itself does not provide any clear business description, services, or branding. The technical infrastructure relies on a parking lander platform with JavaScript and Google AdSense scripts, indicating monetization attempts through ads rather than active business operations. Security posture is basic with no advanced headers or policies implemented, and no privacy or cookie policies are present, which limits compliance with GDPR or other regulations. Overall, the site lacks professionalism and trust indicators, resulting in a low risk but also low credibility profile.
- W
Technology
55Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website wearesubrosa.com is currently a parked domain placeholder page indicating that the domain has been registered but is not actively used for any business operations. The page offers potential buyers the opportunity to solicit a request to purchase the domain from the owner. The business model revolves around domain registration and resale facilitation, with additional promotional links to domain registration, SSL certificates, professional email, and website protection services offered by the registrar Gname 118 Inc. The website content is minimal and lacks any substantive business information, contact details, or privacy and security policies. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting and domain registration are managed by Gname 118 Inc. The website is mobile responsive with basic accessibility and SEO features. However, the site lacks HTTPS usage, DNSSEC is not enabled, and no security headers are present, indicating a low security posture. There are no analytics or tracking scripts detected beyond a single script from the registrar's domain. Security posture evaluation reveals that while the domain status clientTransferProhibited is set, providing some protection against unauthorized transfers, the absence of HTTPS, DNSSEC, and security headers are notable vulnerabilities. No privacy policy, cookie policy, or terms of service are present, and no contact or incident response information is available, limiting compliance with GDPR and other regulations. Overall, the website presents a low-risk profile due to its inactive status but lacks trustworthiness and business credibility. Strategic recommendations include enabling HTTPS, implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and providing clear contact information to improve trust and compliance.
Research · Estonia
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Operailoperail.com
Logistics and supply chain · Estonia
55Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Hotel santa barbarahotelsantabarbara.com
Hospitality · United states
67Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Centre of registers and information systemsegov-estonia.eu
Information technology and services · Estonia
52Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
- Monese
monese.com
Banking · United kingdom
71Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Sympowersympower.net
Renewables & environment · Estonia
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
- AAudentes school
audentes.ee
Higher education · Estonia
67Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
- Starmaker interactive
starmakerstudios.com
Entertainment · United states
65Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
- Eurofins environment
omegam.nl
Environmental services · Netherlands
72Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Tv guidetvguide.com
Entertainment · United states
73Medium
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
- KKgk
kgk.se
Automotive · Sweden
67Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Roofit.Solarroofit.solar
Energy · Estonia
53Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Roofit.Solar is a medium-sized Estonian company founded in 2016 specializing in integrated solar roofing solutions that combine Nordic design with advanced solar technology. The company holds a strong market position supported by multiple international design awards and offers key services including solar roof panels, smart home energy management, and full-service installation. The website is built on WordPress with modern performance optimizations and provides a seamless user experience with excellent design and navigation. Privacy compliance is supported by a detailed cookie consent mechanism, though explicit privacy and terms policies are not found in the provided content. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved by enabling DNSSEC and publishing security policies. Overall, the website and business demonstrate high professionalism and trustworthiness.
Intertrust Technologiesintertrust.com
Technology
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Intertrust Technologies is a technology enterprise specializing in trusted digital collaboration and interoperability solutions primarily for the energy and media sectors. The company positions itself as a leader in enabling secure, scalable, and open connectivity across decentralized and data-driven ecosystems. Their key offerings include Intertrust Energy, Intertrust Connect, Flexworks, and PKI solutions, targeting organizations seeking to optimize IoT networks and media distribution with enhanced trust and security. The website reflects a mature digital presence with professional branding and comprehensive content tailored to enterprise clients. Technically, the website is built on WordPress with modern performance optimizations such as lazy loading, use of GSAP, Typed.js, and integration with HubSpot for marketing and analytics. The site is mobile-optimized, SEO-friendly, and employs tracking technologies including Facebook Pixel and Google Tag Manager. However, explicit security headers and detailed security policies are not evident, and no direct contact emails or phone numbers are provided, relying instead on contact forms. Security posture is generally good with HTTPS enforced and cookie consent implemented, but the absence of WHOIS data and lack of visible privacy policy or incident response information present gaps in transparency and compliance. The domain WHOIS query returned no match, which is unusual for an established enterprise and may indicate privacy protection or data source issues. Overall, the website is professional and trustworthy in appearance but would benefit from enhanced transparency and explicit security and privacy disclosures. Strategically, Intertrust should prioritize publishing clear privacy and security policies, provide direct contact channels for incident response, and address the WHOIS data gap to improve domain trustworthiness. These steps will strengthen their security posture and compliance standing, reinforcing their market position as a trusted technology provider.