Security Directory

K

Kambja vald

kambja.ee

55

Kambja vald is a municipal government entity serving the Kambja region in Estonia, providing a broad range of public services, community news, and administrative information to its residents. The website serves as an official portal for local governance, social services, education, culture, and infrastructure-related information. It targets local residents and stakeholders, offering access to documents, contact details, and event calendars. The business model is typical for a government authority, focusing on service provision rather than commercial activities. Technically, the website is built on the Liferay CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and FontAwesome. It integrates third-party services like Google Analytics and Facebook SDK for analytics and social media functionalities. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technologies like jQuery are outdated, which could pose security risks. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. There is no evidence of advanced security headers or explicit security policies and incident response information publicly available. The use of outdated libraries and lack of visible security headers suggest room for improvement in security posture. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is a credible and professional government portal with good content quality and business credibility. Strategic recommendations include updating outdated libraries, implementing security headers, and publishing explicit security and incident response policies to enhance trust and compliance.

T

The Intercultural Innovation Hub

interculturalinnovation.org

57

The Intercultural Innovation Hub is a non-profit initiative established in 2011, operating as a partnership between UNAOC and the BMW Group. It focuses on supporting innovative grassroots projects that promote intercultural dialogue and cooperation globally. The website presents a professional and consistent brand image with good content quality targeting changemakers and organizations interested in social innovation. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and Facebook Pixel, hosted on Quadranet servers. Mobile optimization and SEO practices are well implemented, though accessibility is basic. Security posture is moderate with HTTPS enabled and domain protection in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

S

SYNLAB International

synlab-notes.com

57

SYNLAB International's investor website synlab-notes.com serves as a portal for investors and registered users to access company information and conference calls. The site is built on TYPO3 CMS and employs modern web technologies, providing a professional and consistent user experience. The business focus is on healthcare laboratory services with an international presence. Technically, the site is moderately optimized with good mobile responsiveness and basic SEO features. Security posture is adequate with HTTPS and secure login forms, but lacks explicit security headers and published incident response policies. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

T

Talsi novads

talsunovads.lv

61

The website www.talsunovads.lv serves as the official digital presence of Talsi Municipality in Latvia, providing comprehensive information about local government operations, public services, cultural events, education, social support, and community engagement. It targets residents, local businesses, and visitors, offering structured navigation and multilingual support primarily in Latvian. The site is built on Drupal CMS with modern web technologies and demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforcement and security headers, though explicit incident response and vulnerability disclosure policies are absent. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism aligned with GDPR requirements. WHOIS data could not be retrieved due to query limits, but the domain appears legitimate and consistent with a government entity. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

O

Overcode.bg

affiliatly.com

64

Affiliatly is a SaaS provider specializing in affiliate marketing program management software tailored for e-commerce businesses. The platform offers a comprehensive suite of features including multiple affiliate tracking methods, affiliate management, payment integrations, marketing asset management, and performance analytics. With over 11 years of experience and more than 2500 registered clients, Affiliatly positions itself as a reliable and established player in the affiliate marketing technology space. The website targets e-commerce store owners and affiliate marketers seeking to launch and manage affiliate programs efficiently. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and various JavaScript libraries for UI enhancements and analytics. It integrates with a broad range of popular e-commerce platforms, demonstrating a mature and flexible technical infrastructure. The site is mobile-optimized and uses Matomo for privacy-conscious analytics tracking. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, privacy policies, and incident response documentation, reflecting a solid security posture. However, the absence of WHOIS data and lack of explicit security headers indicate areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security maturity is good but could benefit from enhanced header configurations and clearer security contact information. The overall risk assessment is moderate with a trustable business presence but some transparency concerns due to missing WHOIS data. Strategic recommendations include improving security headers, providing explicit security contact channels, enhancing accessibility, and maintaining regular audits of third-party scripts to sustain security and compliance standards.

O

OÜ Tervise Paradiis

veekeskus.eu

44

OÜ Tervise Paradiis operates the largest water center in Estonia, located in Pärnu, offering a wide range of recreational and sports facilities including pools, saunas, bowling, and fitness services. The website is well designed, multilingual, and provides comprehensive information and booking forms for various customer segments such as families, schools, and groups. Technically, the site is built on WordPress with modern plugins and frameworks, and it integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and secure form handling, though some security headers could be improved and no explicit security policies are published. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the domain registration is consistent with the business location and sector, indicating legitimacy and trustworthiness.

U

Uma Mekk

umamekk.ee

44

Uma Mekk is a regional food brand based in Estonia, specifically targeting the Vana-Võromaa area. The website serves as a platform for local food and beverage producers to obtain branding and certification under the Uma Mekk trademark. The business model focuses on promoting local food products and supporting regional producers. The website is built on WordPress using the Divi Builder and Bootstrap framework, indicating a modern and maintainable technical infrastructure. SEO is enhanced with Yoast SEO and structured data, improving search visibility. The site is mobile optimized and includes cookie consent mechanisms, reflecting awareness of privacy regulations. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and security policies are absent. Tracking via Google Analytics and Facebook Pixel is present, indicating moderate user data collection. Overall, Uma Mekk presents a credible and professional online presence for a small regional food brand.

V

Visit Otepää

visitotepaa.com

44

Visit Otepää is a regional tourism promotion website dedicated to showcasing the attractions, events, accommodation, and culinary experiences of Otepää, Estonia's winter capital. The site targets tourists and visitors interested in exploring the natural beauty and cultural offerings of the region. It provides comprehensive information and interactive features such as maps, event listings, and a newsletter subscription to engage its audience. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap and JavaScript libraries, and integrates Google Maps for location services. SEO is enhanced through Rank Math plugin and structured data markup is implemented for better search engine understanding. Security-wise, the site uses HTTPS with a valid SSL certificate and employs Google reCAPTCHA on its contact form to mitigate spam. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Overall, the website is professional, user-friendly, and trustworthy, but could improve its privacy compliance and security headers to enhance its security posture.

S

SA Saare Arenduskeskus

sasak.ee

40

SA Saare Arenduskeskus is a regional development foundation based in Estonia, focused on supporting local municipalities, entrepreneurs, and civic organizations in Saare County. The organization provides professional consulting, project management, and training services aimed at fostering regional growth and community development. The website reflects a small-sized, government/non-profit entity with a clear regional focus and a business model centered on service provision rather than commercial sales. Technically, the website is built on the concrete5 CMS platform and utilizes modern web technologies including Bootstrap, jQuery, FontAwesome, and AOS for animations. It integrates Google Analytics and Facebook SDK for tracking and social media functionalities. The site is mobile-optimized and demonstrates good design and navigation clarity, though accessibility features are basic. Hosting appears to be managed by Zone Media OÜ, an Estonian registrar and hosting provider. From a security perspective, the site enforces HTTPS and includes minimal security headers such as X-Content-Type-Options. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of comprehensive security headers and lack of published security or incident response policies indicate room for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms, which could pose regulatory risks under GDPR. Overall, the website is functional, professional, and trustworthy with moderate digital maturity. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enhancing security headers, and publishing incident response contacts to improve compliance and security posture.

Sihtasutus RAEK is a regional development foundation based in Rapla County, Estonia, focused on supporting balanced regional growth by providing professional development services to private, public, and third sector organizations. The website clearly targets entrepreneurs, citizen associations, youth, and local governments with a variety of support services including training, mentoring, and consulting. The organization is well-established with a domain age since 2010 and is part of a national network of county development centers. The website is built on a modern WordPress platform with common web technologies and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks advanced security headers and formal incident response or vulnerability disclosure information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site presents a professional and trustworthy image consistent with a government/non-profit entity.

E

ET Infokeskuse AS

ehituskeskus.ee

38

ET Infokeskuse AS operates the website ehituskeskus.ee, providing construction-related information, seminars, and publications primarily targeted at construction professionals and real estate stakeholders in Estonia. The company has an established presence since 2010 and offers a mix of digital and physical products including training seminars, construction guidelines, and a digital kartoteek service. The website is multilingual, supporting Estonian, English, Finnish, and Russian languages, enhancing accessibility for a broader regional audience. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, leveraging modern web technologies such as Bootstrap, jQuery, and Owl Carousel. The site is hosted behind Cloudflare DNS and CDN services, ensuring reliable performance and security. SEO is well implemented with Yoast SEO plugin, and the site shows good mobile optimization and user experience. From a security perspective, the site enforces HTTPS and uses common security practices, though explicit security headers like Content-Security-Policy are not detected. No critical vulnerabilities or exposed sensitive data were found. However, the site lacks a cookie consent mechanism and does not provide explicit incident response or vulnerability disclosure information, which are areas for improvement. Overall, ehituskeskus.ee presents a professional and trustworthy digital presence for ET Infokeskuse AS, with solid business credibility and technical implementation. Strategic enhancements in privacy compliance and security transparency would further strengthen its posture and user trust.

1

1Kelvin

kelvin.ee

50

1Kelvin is an Estonian-based company specializing in technical system planning, design, and installation with a strong focus on energy efficiency and related services. With over 20 years of experience, the company positions itself as a reliable partner for large and complex projects in Estonia, targeting primarily business clients requiring engineering and energy consultancy services. The website reflects a professional and consistent brand image, offering clear information about services and company expertise. Technically, the site is built on WordPress with modern front-end technologies and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and explicit incident response information. Privacy compliance is partially addressed with references to cookie and privacy policies but lacks an explicit consent mechanism. Overall, the site is trustworthy and credible with room for improvement in security and privacy transparency.

Airwave OÜ is a well-established Estonian company specializing in the import and wholesale of heating, ventilation, and air conditioning (HVAC) equipment, serving primarily the Baltic region and Finland since 1999. The company positions itself as one of the largest HVAC importers and wholesalers in the Baltics, offering a broad range of products including heat pumps, ventilation systems, and climate control devices. Their business model focuses on wholesale distribution supported by professional sales and after-sales services, catering to both commercial and residential customers. Technically, the website is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap and FontAwesome for UI components. The site demonstrates good mobile optimization and SEO practices, with a clear navigation structure and professional design. Performance is moderate, and accessibility is basic but functional. The absence of advanced analytics or tracking scripts suggests a minimal user tracking approach. From a security perspective, the website enforces HTTPS with a valid SSL configuration and includes CSRF tokens in its scripts, indicating awareness of basic web security practices. However, it lacks several security headers and does not publicly disclose security policies or incident response procedures. There is no visible cookie consent mechanism, which may impact GDPR compliance. The presence of a privacy policy and terms of service pages indicates some level of compliance and transparency. Overall, Airwave OÜ's website reflects a credible and professional business with a solid market presence in the HVAC sector. Security posture is adequate but could be improved with enhanced headers, explicit policies, and cookie consent. The site is trustworthy with consistent WHOIS data and clear contact information. Strategic improvements in privacy compliance and security transparency would further strengthen their digital maturity and customer trust.

V

Valkas novada pašvaldība

valka.lv

55

Valkas novada pašvaldība operates as the official local government authority for the Valkas novads region in Latvia. The website serves as a comprehensive portal offering residents, businesses, and visitors access to municipal services, news, administrative information, and community resources. It is well-positioned as a trusted source of local government information with a clear focus on public service delivery. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies such as Bootstrap and jQuery for responsive design and user experience. The site is mobile-optimized and includes accessibility features, ensuring broad usability. Google Analytics is integrated with privacy-conscious settings to monitor traffic without compromising user privacy. From a security perspective, the site enforces HTTPS, employs standard security headers, and implements cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy and incident response information, which could enhance transparency and preparedness. Overall, Valkas novada pašvaldība's website demonstrates a solid digital presence with good content quality, technical implementation, and security posture. Strategic improvements in security transparency and incident response communication would further strengthen its trustworthiness and compliance.

S

Smiltenes novada pašvaldība

smiltenesnovads.lv

63

Smiltenes novada pašvaldība is the official local government authority for Smiltene Municipality in Latvia. The website serves as a comprehensive portal providing residents and stakeholders with access to municipal services, administrative information, social and cultural resources, and community news. The site is well-structured with clear navigation and covers a broad range of local government functions including education, social services, culture, tourism, and public safety. The target audience primarily consists of local residents and businesses seeking municipal information and services. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies such as Bootstrap for responsive design and Google services like reCAPTCHA and Analytics for security and user behavior insights. The site demonstrates good mobile optimization and accessibility features, ensuring usability across devices. Performance is moderate, with proper meta tags and SEO considerations implemented. From a security perspective, the website enforces HTTPS and includes several security headers to protect against common web vulnerabilities. The use of Google reCAPTCHA on forms helps mitigate automated abuse. However, the site lacks a publicly accessible privacy policy and terms of service, which are important for GDPR compliance and user trust. No explicit incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, the website is a credible and professional government portal with strong business credibility and technical implementation. The main areas for improvement include publishing comprehensive privacy and terms policies, enhancing transparency around data protection and incident response, and expanding direct contact information. These steps would strengthen compliance and user trust while maintaining a secure and user-friendly digital presence.

T

The European Olympic Committees

eurolympic.org

50

The European Olympic Committees (EOC) is a well-established non-profit organization dedicated to promoting the fundamental principles of Olympism across Europe. The website serves as the official digital presence for the EOC, providing comprehensive information about its activities, events, awards, and news. It targets Olympic committees, athletes, sports organizations, and the general public interested in European Olympic sports. The organization holds a strong market position as the continental association for European Olympic Committees and organizes major sports events such as the European Games and the European Youth Olympic Festival. Technically, the website is built on a modern WordPress platform with popular plugins like WPBakery Page Builder and integrates Bootstrap for responsive design. It employs Google Analytics for traffic analysis and Mailchimp for newsletter subscriptions. The site is well-optimized for mobile devices and offers good SEO and accessibility features, though some improvements in accessibility could be made. From a security perspective, the site uses HTTPS with strong security headers and secure forms that include consent checkboxes. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit cookie consent mechanisms and does not publish a security incident response or vulnerability disclosure policy, which are areas for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The lack of WHOIS data limits domain registration insights, but the website's branding, content quality, and external partnerships strongly support its legitimacy. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing accessibility to further strengthen the site's security posture and user trust.

L

Liikumisharrastuse kompetentsikeskus

liikumisaasta.ee

49

Liikumisharrastuse kompetentsikeskus is a government-affiliated non-profit organization established by the Estonian Olympic Committee in 2022 to promote physical activity and healthy lifestyles across Estonia. The website serves as a central hub for information, resources, and events related to physical movement, targeting a broad audience including youth, adults, seniors, and partners in the health and sports sectors. The organization positions itself as a leader in driving a national movement towards increased physical activity and wellness.

E

Eesti Spordi- ja Olümpiamuuseum SA

spordimuuseum.ee

49

Eesti Spordi- ja Olümpiamuuseum is a well-established cultural institution located in Tartu, Estonia, serving as the largest and most modern sports museum in the Baltic region. The museum offers a rich visitor experience with over 15 attractions, educational programs, exhibitions, and a dedicated Hall of Fame. Its target audience includes families, groups, individual sports enthusiasts, and educational institutions. The business model combines ticket sales, educational services, event hosting, and an online store. The museum maintains a strong market position supported by partnerships with cultural and Olympic organizations and environmental certifications.

T

treenerikutse.ee

treenerikutse.ee

46

The website treenerikutse.ee serves as a portal for coaching certification and related educational services primarily targeting the Estonian market. It offers functionalities such as application control, certification verification, self-training campaigns, and registers related to education and sports disciplines. The business operates in a niche sector focused on professional coaching and sports education within Estonia, with a domain registered in 2019 and hosted by Spin TEK AS, an Estonian registrar and hosting provider. Technically, the website employs a variety of common web technologies including jQuery, Bootstrap, FlexSlider, and DataTables, indicating a moderate level of digital maturity. The site is structured with responsive design elements but lacks advanced SEO optimization and accessibility features. The absence of CMS detection suggests a custom or lightweight platform. Performance is moderate, with no explicit indicators of slow loading but also no advanced optimization. From a security perspective, the site lacks visible security headers and does not provide explicit HTTPS status in the provided data, which is a concern. The cookie consent mechanism is implemented, indicating some awareness of privacy compliance, but no privacy policy or terms of service are present, limiting GDPR compliance. No contact information or incident response channels are provided, reducing transparency and trust. Overall, the website presents a basic but functional service portal with moderate business credibility. Security and privacy practices require significant improvement to meet modern standards. Strategic recommendations include implementing HTTPS with strong SSL/TLS, publishing comprehensive privacy and security policies, adding security headers, and providing clear contact information to enhance trust and compliance.

S

SYNLAB International GmbH

synlab.com

64

SYNLAB International GmbH operates as a leading European provider of medical laboratory diagnostic services, offering a broad range of routine and specialty testing solutions. The company targets healthcare providers, clinics, doctors, and patients, emphasizing fast and reliable test results and innovative diagnostic technologies. Their market position is strong, supported by a large network across more than 20 countries and a significant employee base including medical experts. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their audience. Technically, the site is built on TYPO3 CMS with Bootstrap and integrates Matomo analytics and conditional Google Maps functionality, indicating a modern and privacy-conscious infrastructure. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place, though explicit incident response and vulnerability disclosure policies are not publicly visible. The absence of WHOIS data for the domain is notable but does not detract from the overall legitimacy and professionalism of the site. Strategic recommendations include enhancing transparency around security incident response and publishing a security.txt file to facilitate vulnerability reporting.

S

Sisekaitseakadeemia

sisekaitse.ee

58

Sisekaitseakadeemia is a key Estonian governmental educational institution specializing in internal security education, research, and professional training. It serves students, professionals, and government officials with a broad portfolio of academic programs, seminars, and research activities. The website reflects a well-established institution with a clear focus on internal security sectors including police, rescue, prison, finance, and security studies. The institution holds a strong market position as the national authority in its domain. Technically, the website is built on Drupal 9 with modern web technologies such as Bootstrap, jQuery, and lazy loading for images. It integrates analytics tools like Matomo and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile optimized, accessible, and SEO friendly, providing a good user experience. From a security perspective, the site uses HTTPS and employs some best practices like Do Not Track in analytics. However, explicit security headers and incident response policies are not evident. Privacy compliance is partially addressed with privacy and cookie policies present, though lacking a consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the website is professional, trustworthy, and serves its educational and governmental purpose effectively. Strategic improvements in security headers, incident response transparency, and cookie consent would further strengthen its posture.

Luunja Vald is a local government entity in Estonia providing a comprehensive range of municipal services including social aid, education, cultural activities, urban planning, and waste management. The website serves as an official portal for residents and stakeholders to access news, contact information, and administrative resources. The site is built on the Liferay CMS platform and uses common web technologies such as jQuery, Bootstrap, and Font Awesome, with Google Analytics integrated for visitor tracking. The technical infrastructure supports both desktop and mobile users with a moderate performance profile and basic accessibility features. Security posture is adequate with HTTPS enforced, but the use of outdated JavaScript libraries and lack of security headers indicate areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

The website kose.ee serves as a simple informational portal for Kose vald, a local government municipality in Estonia. It primarily functions as a redirect and contact hub linking users to the official Kose vald website (kosevald.ee) and its Facebook page. The site provides basic contact information including official email addresses and phone numbers but lacks comprehensive privacy, cookie, or terms of service policies. The content is minimal and targeted at residents or stakeholders seeking municipal information. Technically, the site is built on WordPress using common libraries such as jQuery, Bootstrap, and Font Awesome. Hosting appears to be managed by Zone Media OÜ, an Estonian registrar and hosting provider. The site uses HTTPS with good SSL configuration but lacks advanced security headers and modern privacy compliance features. Mobile optimization and accessibility are basic but functional. From a security perspective, the site shows moderate maturity with HTTPS enabled but no visible security policies or incident response contacts. No forms or user data collection mechanisms are present, reducing attack surface but also limiting user engagement. The absence of privacy and cookie policies indicates non-compliance with GDPR best practices, which is a risk for a government entity. Overall, the website is legitimate and consistent with its stated purpose but would benefit from enhanced security practices, privacy compliance, and improved user experience to better serve its audience and meet regulatory requirements.

V

Võru Linnavalitsus

voru.ee

52

Võru Linnavalitsus operates as the official municipal government of Võru city in Estonia, delivering a wide range of public services including urban planning, social welfare, cultural activities, and administrative support. The website serves residents, local businesses, tourists, and other stakeholders by providing comprehensive information and access to e-services. The site is multilingual, supporting Estonian, English, and Russian languages, enhancing accessibility for diverse users. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, and Font Awesome. It demonstrates moderate performance and good mobile optimization, with a clear navigation structure and professional design. The presence of Google Analytics indicates moderate user tracking, balanced with a cookie consent mechanism and a privacy policy page, reflecting good privacy compliance. From a security perspective, the site enforces HTTPS and employs secure form submissions. However, it lacks explicit security headers and a dedicated incident response or vulnerability disclosure page. The use of an older jQuery version may pose minor risks. Overall, the security posture is solid but could benefit from enhancements in security policy transparency and technical hardening. The website's WHOIS data aligns well with its government identity, showing consistent registrant information and domain age appropriate for a municipal entity. No blocking or WAF interference was detected, allowing full content accessibility. Strategic recommendations include updating JavaScript libraries, implementing security headers, and publishing clear security policies to further strengthen trust and compliance.

Viljandi Linnavalitsus operates as the official municipal government of Viljandi city in Estonia, providing a broad range of public services including social support, education, urban planning, and cultural activities. The website serves residents, local businesses, and visitors by offering comprehensive information and access to municipal services. The site is well-structured with clear navigation and content relevant to its audience, reflecting a mature public sector digital presence. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, and Font Awesome. It employs HTTPS with a valid SSL certificate ensuring secure communications. The site is moderately optimized for performance and mobile devices, though some legacy JavaScript libraries like jQuery 1.10.2 present potential security risks. SEO and accessibility are adequately addressed, but there is room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks modern security headers and uses outdated JavaScript libraries that could be vulnerable. There is no visible security policy or incident response contact, and no cookie consent mechanism is implemented, which may affect GDPR compliance. Google Analytics is used for visitor tracking, indicating moderate user tracking. Overall, the website demonstrates a solid business credibility and trustworthiness as a government entity, with a good content quality and technical foundation. Strategic improvements in updating libraries, enhancing security headers, and implementing privacy compliance mechanisms would strengthen its security posture and regulatory adherence.

M

MTÜ Kodukant Läänemaa

kklm.ee

39

MTÜ Kodukant Läänemaa is a small Estonian non-profit organization dedicated to promoting and supporting village life and rural community development in the Läänemaa region. The organization provides project support, facilitates funding opportunities, and organizes community events to strengthen local engagement. The website is built on WordPress using the Virtue theme and several plugins such as MailPoet for newsletters and Google Calendar Events for event management. The technical infrastructure is modern and moderately performant with good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks important security headers and formal privacy or cookie policies. Contact information is clearly provided with a physical address and company email, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security practices.

R

Rohelise Jõemaa Koostöökogu

joemaa.ee

39

Rohelise Jõemaa Koostöökogu is a small regional cooperative organization based in Estonia, focused on sustainable rural economic development, cultural heritage preservation, and tourism promotion. The website serves as an informational and promotional platform highlighting the organization's mission, events, and regional identity. The technical infrastructure is based on WordPress with common plugins such as Yoast SEO and Contact Form 7, supported by standard web technologies like jQuery and Bootstrap. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but requires improvements in privacy, security, and compliance to enhance trust and user protection.

T

Thrifty Car Rental

thrifty.ie

69

Thrifty Car Rental operates a professional and user-friendly website focused on providing car rental services primarily in Ireland with global reach. The company offers a broad range of vehicles and emphasizes competitive pricing and convenience. The website integrates modern technologies such as jQuery, Bootstrap, and Google Tag Manager, supporting a responsive and accessible user experience. Privacy and cookie policies are clearly presented with a consent mechanism, reflecting compliance with GDPR standards. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security practices are generally sound with HTTPS and CSRF protections, though additional security headers could enhance the posture. Overall, the site represents a credible and established business in the transportation sector with room for technical and security improvements.

S

SYNLAB Eesti

synlab.ee

66

SYNLAB Eesti is the largest medical laboratory in Estonia, operating since 1995 and part of the global SYNLAB Group. The company provides a wide range of medical laboratory testing services targeting medical professionals, private clients, and employers. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimizations. It offers multilingual support and integrates GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance trust. Contact is primarily via a contact form, with no exposed direct emails or phone numbers. Overall, the site is professional, trustworthy, and well-aligned with the business's market position.

E

Eesti Kergejõustikuliit

ekjl.ee

42

Eesti Kergejõustikuliit is the national athletics federation of Estonia, providing organizational support, event management, and athlete services within the Estonian athletics community. The website serves as a comprehensive portal for news, competition calendars, results, rankings, and educational materials targeting athletes, coaches, clubs, and fans. It holds a strong market position as the official governing body for athletics in Estonia. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, and uses Bootstrap for responsive design. The site demonstrates good digital maturity with structured data, SEO optimization, and mobile responsiveness, although some accessibility features could be improved. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses standard libraries without visible vulnerabilities. However, it lacks some security headers and does not provide explicit security or incident response policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in privacy compliance, security policy transparency, and accessibility would enhance its security posture and user trust.

S

Spordikoolituse ja -Teabe SA

sport.ee

50

Sport.ee is a government-affiliated Estonian sports information portal managed by Spordikoolituse ja -Teabe SA. It serves as a comprehensive platform providing data on sports training, coaching qualifications, sports organizations, events, and statistics. The site targets sports organizations, coaches, athletes, and enthusiasts within Estonia, positioning itself as a key national resource for sports-related information and management. The business model revolves around offering informational services and integration with official sports registers and government bodies. Technically, the website employs a modern tech stack including Bootstrap, jQuery, AngularJS, and various libraries for UI and data visualization, ensuring a responsive and user-friendly experience. Performance is moderate with good mobile optimization and basic accessibility features.

E

Eesti Noorteühenduste Liit

enl.ee

47

Eesti Noorteühenduste Liit (ENL) is a well-established non-profit umbrella organization founded in 2010 that unites youth associations and participation bodies across Estonia. The organization focuses on advocacy, youth participation, training, and international cooperation, positioning itself as a leading entity in the Estonian youth sector. The website reflects a professional and comprehensive digital presence with clear content, strong branding, and multilingual support. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, accessibility, and SEO. Security posture is solid with HTTPS, cookie consent, and error reporting, though some security headers and formal policies could be enhanced. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media engagement.

K

Kodutütred

kodututred.ee

41

Kodutütred is a well-established Estonian youth organization affiliated with the Kaitseliit (Estonian Defence League), focusing on patriotic education and voluntary activities for girls aged 7 to 18. The website serves as an informational and engagement platform, showcasing news, events, organizational structure, and membership opportunities. The organization has a strong national presence with thousands of members and active participation across all counties in Estonia. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, FontAwesome, and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Hosting and domain registration are consistent with the organization's location and purpose. From a security perspective, the site uses HTTPS and secure forms but lacks advanced security headers and DNSSEC, which could be improved. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security hardening to meet modern standards and regulatory requirements.

J

Jõelähtme Valla Päevakeskus

joelahtmepaevakeskus.ee

40

Jõelähtme Valla Päevakeskus is a local government social service center in Estonia providing social and supportive services primarily to elderly and disabled individuals. The website is built on WordPress using common plugins for booking and accessibility, hosted by Zone Media OÜ. The site is well-structured with clear navigation and good mobile optimization. Security posture is adequate with HTTPS enabled and CSRF tokens in booking forms, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and trustworthy but requires improvements in privacy and security practices.

Ida-Virumaa Omavalitsuste Liit is a regional government association serving the municipalities of Ida-Virumaa, Estonia. The website provides comprehensive information on governance, development strategies, programs, projects, education, public health, safety, culture, and visa-related matters. It targets local residents, government officials, and stakeholders interested in regional development. The organization operates as a small-sized government entity founded in 2010, with a clear focus on regional coordination and public service. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, Google reCAPTCHA, and Font Awesome. The site is hosted by Elkdata OÜ, consistent with the WHOIS data. The website is mobile-optimized and provides a good user experience, although some technical aspects like the use of an outdated jQuery version and lack of security headers indicate areas for improvement. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate automated abuse. However, the absence of security headers and outdated JavaScript libraries present potential vulnerabilities. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could expose the organization to regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced security practices and improved privacy compliance to align with modern standards and regulations.

E

Elkdata OÜ

koerumuusikakool.ee

41

Koeru Muusikakool is a small, regionally focused music school based in Estonia, providing music education and cultural events primarily targeting students and the local community. The website is built on a modern WordPress platform using popular plugins such as WooCommerce and Tutor LMS, indicating a digital maturity suitable for educational content delivery and course management. The site features active social media integration and regularly updated news content, supporting engagement with its audience. Technically, the website is well-structured with responsive design and moderate performance, although accessibility and SEO optimizations are basic. From a security perspective, the website benefits from HTTPS with a valid SSL certificate, but lacks important security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance security posture. The WHOIS data confirms the domain is legitimately registered to Elkdata OÜ since 2010, consistent with the business's operational history. Overall, the website presents a professional and trustworthy front for the music school but requires improvements in privacy compliance and security best practices to reduce risk and increase user confidence. Strategic enhancements in these areas will support sustainable growth and regulatory adherence.

Skepast & Puhkim OÜ is a leading Estonian consultancy specializing in infrastructure, environmental, and spatial planning services with over 15 years of experience. The company offers expert engineering and consulting services including infrastructure design, environmental impact assessments, and spatial planning solutions. Their market position is strong within Estonia, supported by a medium-sized team of 40 experts and a professional digital presence. The website is well-structured, multilingual, and provides clear contact channels and business information. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for traffic analysis. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust with a comprehensive privacy policy and cookie consent banner. No critical vulnerabilities or suspicious WHOIS patterns were detected, indicating a trustworthy domain and business operation.

R

Rakvere Spordikeskus

rakverespordikeskus.ee

48

Rakvere Spordikeskus is a well-established public sports center located in Rakvere, Estonia, founded in 2010. It serves as a key regional hub for sports facilities, events, and training programs targeting local residents, sports clubs, and event organizers. The website reflects a professional and community-focused organization with clear contact information and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although formal security policies and incident response information are not published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the site demonstrates a mature digital presence suitable for its public service role.

R

Rakvere Raamatukogu

lvkrk.ee

39

Rakvere Raamatukogu is a regional public library in Estonia providing a range of library and community services including book lending, e-catalog access, home delivery for vulnerable populations, and educational events. The website is built on Joomla CMS and integrates common web technologies such as Bootstrap, jQuery, and FontAwesome. It uses HTTPS and includes Google Analytics and Tawk.to live chat for user engagement and analytics. The site is well-branded and consistent with its public service mission, targeting local residents and library users. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. WHOIS data confirms domain legitimacy and long-term registration consistent with the institution's history.

Tapa Perearstikeskus OÜ operates as a local healthcare provider in Estonia, offering primary care services including general practitioners, nurses, midwifery, and physiotherapy. The website presents comprehensive contact details and staff information, positioning itself as a trusted community medical center. Technically, the site is built on the Odoo CMS platform with standard web technologies and demonstrates good mobile optimization and user experience. However, the absence of privacy and cookie policies indicates potential compliance gaps with GDPR requirements. Security posture is moderate with some best practices like CSRF tokens but lacks visible security headers and explicit HTTPS enforcement details. Overall, the site is functional and credible but would benefit from enhanced privacy and security measures.

V

Virumaa Koostöökogu

viko.ee

40

Virumaa Koostöökogu is a small Estonian non-profit organization focused on regional cooperation and rural development in the Virumaa area. Founded in 2006, it serves local municipalities and communities by managing projects, organizing events, and facilitating cooperation among stakeholders. The website reflects this mission with relevant content, event announcements, and organizational information. Technically, the site is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, with integration of Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized and SEO-friendly but lacks some accessibility features. Security posture is moderate with HTTPS enforced and use of reCAPTCHA, but missing important security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms despite tracking scripts. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

E

eHost OÜ

arenduskeskus.ee

40

Investor.ee is a small Estonian educational website focused on providing information and guidance about investing and financial growth. The site targets individuals and organizations interested in learning about investment strategies, risk management, and financial planning. The business operates primarily as an informational resource with content in Estonian, positioning itself as a niche player in the finance education sector. The website is built on WordPress using modern themes and plugins, with a moderate level of technical maturity and good mobile optimization. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security best practices such as security headers and explicit privacy policies are missing. Overall, the site demonstrates a moderate security posture with room for improvement in privacy compliance and security transparency.

C

404 Page not found | Canary

cms-dt.com

48

The website cms-dt.com currently serves a 404 error page indicating that the requested content is not available or has been moved. There is no visible business information, contact details, or privacy-related policies on the accessible page. The domain is relatively new, registered in April 2023 via Amazon Registrar, Inc., and uses the Laravel framework with common JavaScript libraries such as jQuery and Bootstrap. The technical infrastructure appears standard but lacks advanced security configurations such as DNSSEC and security headers. The absence of privacy policies, cookie consent mechanisms, and contact information indicates low compliance with privacy regulations and poor user trust signals. Overall, the site is in an early or incomplete state, limiting its business credibility and security posture.

Kihnu.ee is the official website of the Kihnu Municipality Government in Estonia, serving as a comprehensive portal for local governance, community services, cultural events, and public information. The site targets residents, visitors, and local businesses, providing timely news, event calendars, and access to municipal resources. The business model is that of a governmental public service provider with a clear focus on community engagement and transparency. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, and Font Awesome. It is hosted by Zone Media OÜ, an Estonian hosting provider, and employs HTTPS with a valid SSL certificate. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and basic accessibility features. From a security perspective, the site enforces HTTPS but lacks several security headers and uses an outdated version of jQuery, which could expose it to vulnerabilities. There is no visible cookie consent mechanism or published security policy, which are important for GDPR compliance. Contact information is clearly provided, but incident response and vulnerability disclosure details are absent. Overall, the website is trustworthy and professional, reflecting its governmental nature. However, improvements in security practices, privacy compliance, and technical modernization are recommended to enhance its security posture and user trust.

V

Viru-Nigula vald

viru-nigula.ee

53

Viru-Nigula vald operates as a local government entity serving the Viru-Nigula municipality in Estonia. The website functions as an official portal providing residents and stakeholders with access to municipal news, events, services, and contact information. It maintains a clear market position as a trusted source of local government information and services. The site targets local residents, businesses, non-profit organizations, and visitors, offering a range of public services and community resources. The business model is focused on governmental public service and community engagement.

Väike-Maarja vald operates as a local government entity in Estonia, providing a broad range of municipal services including administration, social welfare, education, culture, and community engagement. The website serves as an official portal for residents and stakeholders, offering news, event information, contact details, and access to various public services. The site is well-structured and content-rich, targeting local residents, businesses, and visitors. Technically, the website is built on the Liferay CMS platform, leveraging modern web technologies such as jQuery, Bootstrap, Google Analytics, and Microsoft Clarity for analytics and user experience enhancement. The site is hosted by Telia Eesti AS and uses HTTPS with a good SSL configuration. Mobile optimization and navigation clarity are good, though accessibility features could be improved. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks several important security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain. Overall, the website presents a trustworthy and professional digital presence for the municipality but would benefit from enhanced security headers, privacy compliance improvements, and clearer security policies to strengthen its security posture and regulatory adherence.

Rakvere Linnavalitsus operates as the local government authority for the city of Rakvere, Estonia, providing a wide range of municipal services including public administration, social welfare, urban planning, crisis management, and cultural and sports activities. The website serves residents, visitors, and local businesses with comprehensive information and e-services. The organization maintains a medium-sized municipal operation with a well-structured digital presence. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, and Google Tag Manager for analytics. The site is mobile-optimized and features clear navigation and professional design. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some modern security headers and incident response contacts. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and legitimate, reflecting a stable municipal entity with room for improvements in privacy and security practices.

P

Põltsamaa vald

poltsamaa.ee

54

Põltsamaa vald operates a comprehensive local government website serving the residents of Põltsamaa municipality in Estonia. The site provides a broad range of services including news updates, contact information for municipal departments, public service details, event calendars, and project information. The website is positioned as an essential government portal facilitating communication and service delivery to its local community. The business model is focused on public service and community engagement, with a clear target audience of local residents and stakeholders. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Bootstrap, Font Awesome, and Google Fonts. It integrates external services like Facebook SDK and Google Analytics for social media and analytics purposes. The site demonstrates moderate performance and good mobile optimization, although some accessibility features could be improved. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the website enforces HTTPS and includes a cookie consent banner, indicating awareness of privacy compliance. However, the use of an outdated jQuery version introduces potential vulnerabilities, and the absence of explicit security headers reduces the overall security posture. No public security policies or incident response contacts are available, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and functional, serving its purpose as a government information portal effectively. Strategic improvements in updating third-party libraries, enhancing security headers, and publishing privacy and security policies would strengthen its security and compliance stance.

Novian Eesti OÜ operates the KOVTP service portal, providing IT infrastructure and software development services primarily targeted at local governments in Estonia. The company has a long-standing history dating back to 1970 and is part of the Novian group, positioning itself as a key player in e-government solutions. The website is professionally designed, mobile-optimized, and provides clear contact information and user support resources. Technically, the site uses Liferay CMS, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and jQuery version is outdated. Privacy compliance is adequate with a cookie policy and GDPR considerations, but no explicit privacy or security policies are prominently available. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

S

Sillamäe linn

sillamae.ee

54

Sillamäe linn is the official municipal government website for the city of Sillamäe in Estonia. The site provides comprehensive information about the city's history, governance, social services, cultural events, and economic development initiatives. It serves residents, visitors, and businesses with a broad range of public service information and community engagement tools. The website is built on the Liferay CMS platform, featuring a responsive design suitable for desktop and mobile users. It integrates common web technologies such as jQuery, Bootstrap, and Font Awesome, and uses Google Analytics for visitor tracking. The site enforces HTTPS and includes a cookie consent banner, demonstrating awareness of privacy regulations such as GDPR. However, some technical aspects like the use of an outdated jQuery version and absence of security headers indicate areas for security improvement. Contact information is clearly presented, and the WHOIS data confirms the domain's legitimacy as a government entity. Overall, the website is professional and trustworthy but would benefit from technical and security enhancements.