Security Directory

C

Chudovo

chudovo.de

56

Chudovo is a medium-sized German-based software development company with over 15 years of market presence, specializing in custom software solutions, dedicated development teams, and IT consulting services. The company targets businesses seeking scalable, high-quality software development and maintenance, leveraging modern technologies and AI tools to enhance delivery and performance. Their market position is supported by a professional website, client testimonials, and a presence on reputable platforms like Clutch. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and SEO optimization via Yoast. Hosting and DNS are managed through Cloudflare, providing CDN and security benefits. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses Cloudflare for protection but lacks explicit security headers and formal security policies or incident response disclosures. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website and business demonstrate a solid risk posture with minor areas for improvement in security policy transparency and accessibility. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness.

C

Celsius Healthcare

med24.ee

55

Med24.ee is a well-established Estonian healthcare media and education platform operated by Celsius Healthcare. The website provides comprehensive medical news, e-journals, e-learning courses, and medical databases targeted primarily at healthcare professionals in Estonia. The platform enjoys a strong market position with consistent branding and professional content quality. Technically, the site runs on Drupal 7 with Bootstrap and jQuery, integrating modern analytics and advertising tools such as Google Analytics 4, Facebook Pixel, and Hotjar. While the site is mobile-optimized and SEO-friendly, the use of an outdated CMS poses potential security risks. Security posture is generally good with HTTPS enforced and no critical vulnerabilities detected, but lacks advanced security headers and explicit incident response policies. Privacy and cookie policies are present but basic, with room for improvement in GDPR compliance. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

B

Barnett International

barnettinternational.com

58

Barnett International is a well-established provider of clinical research training and professional development services, operating since 1979. The company offers a broad range of educational products including live training courses, on-demand eLearning, web seminars, and consulting services, targeting clinical research professionals globally. Their market position is strong, supported by a comprehensive curriculum and partnerships with recognized industry organizations. Technically, the website is built on the Sitefinity CMS platform and integrates modern analytics and marketing tools such as Google Tag Manager, Mouseflow, and Bing Ads. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, which should be investigated further. Overall, the website is professional and trustworthy, but improvements in security transparency and domain registration clarity are recommended.

C

Cambridge Innovation Institute

cambridgeinnovationinstitute.com

60

Cambridge Innovation Institute is a specialized organization delivering high-value information and networking platforms primarily in the life sciences, energy, and high technology sectors. The company operates through conferences, publishing, training, and business development services targeting researchers, industry experts, and academic institutions. Their market position is strong within their niche, supported by a growing event portfolio and a professional digital presence. Technically, the website is built on the Sitefinity CMS platform, leveraging modern frameworks like Bootstrap and integrating standard analytics and marketing tools such as Google Tag Manager and LinkedIn Insight. The site is mobile-optimized and provides a good user experience with clear navigation and professional content. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS registration data is a notable anomaly that impacts trustworthiness from a domain registration perspective. Overall, the website reflects a mature business with a good balance of technical and content quality, but domain registration transparency should be addressed.

N

NEVERHACK

neverhack.ee

68

NEVERHACK Estonia is a leading cybersecurity company providing comprehensive cyber defense solutions to both private and public sector clients primarily in Estonia and nearby markets. Founded recently in 2023, the company offers a broad range of services including cyber operations centers (SOC), offensive security testing, advisory services, and cybersecurity solutions such as managed security infrastructure and cyber insurance. The website reflects a professional and modern digital presence built on WordPress with Bootstrap and integrates multiple analytics and marketing tools. The company holds ISO 27001 and ISO 9001 certifications, enhancing its credibility and trustworthiness. Technically, the website is well-structured with good mobile optimization and SEO practices. It uses Cloudflare DNS and CDN services, ensuring reliable hosting and performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. Overall, NEVERHACK Estonia demonstrates a mature cybersecurity business with a solid market position in Estonia, targeting organizations requiring advanced cyber defense capabilities. The website supports this with clear service descriptions, contact options, and trust signals. There are no critical security issues detected, but recommendations include enhancing security headers and publishing incident response and vulnerability disclosure information to further strengthen security transparency and compliance.

E

EUDIS Business Accelerator

eudis-business-accelerator.eu

54

EUDIS Business Accelerator is a specialized EU-wide programme designed to empower start-ups and scale-ups in the defence innovation sector. Backed by the European Commission, it offers tailored coaching, seed funding, networking, and access to testing facilities over an 8-month period. The website reflects a professional and well-structured digital presence, leveraging modern technologies such as Drupal 11 and Bootstrap, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the site demonstrates high professionalism and trustworthiness, with strong compliance to privacy regulations and clear business focus on the European defence ecosystem.

The website prominion.net currently serves only a default Apache HTTP server test page powered by CentOS, indicating that the site is either under construction, misconfigured, or abandoned. There is no actual business content, branding, or contact information available, which severely limits the ability to assess the company's operations or market position. The domain was registered in 2020 through a registrar entity, with no privacy protection, but no registrant business details are provided. Technically, the site uses Apache on CentOS with Bootstrap CSS, but lacks modern web features, security headers, and HTTPS enforcement. From a security perspective, the absence of HTTPS and exposure of a default server page represent significant vulnerabilities and poor security posture. Privacy compliance is non-existent, with no policies or consent mechanisms detected. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility.

The website represents the Estonian Association of Architectural and Consulting Engineering Companies (EKEL), a professional industry association founded in 2015. It serves as a platform for member representation, training, news dissemination, and advocacy within the Estonian construction and architectural consulting sector. The site targets industry professionals and stakeholders in Estonia and Europe, positioning itself as a key national association with European affiliations such as EFCA. The business model is focused on membership services and sector development rather than commercial sales. Technically, the website is built on Joomla CMS using Bootstrap and jQuery, with Google Analytics and Google Tag Manager integrated for visitor tracking. The site is mobile responsive and has a moderate performance profile. However, it lacks advanced accessibility features and comprehensive SEO optimizations. The hosting is provided by Zone Media OÜ, a known Estonian registrar and hosting provider. From a security perspective, the site uses HTTPS (implied by WHOIS domain status and no HTTP-only indications) but lacks visible security headers and does not provide privacy or cookie policies, nor a cookie consent mechanism. No contact information or incident response channels are visible, which limits transparency and user trust. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and functional but requires improvements in privacy compliance, security headers, and transparency of contact information to enhance trust and regulatory adherence. Strategic recommendations include publishing privacy and cookie policies, implementing consent mechanisms, adding security headers, and providing clear contact details for security incidents.

N

NEVERHACK

cybers.eu

68

NEVERHACK Estonia is a leading cybersecurity company providing comprehensive cyber defense services to both private and public sector clients in Estonia and the surrounding region. The company offers a broad range of services including cyber operations centers (SOC), offensive security testing such as penetration testing and red team exercises, advisory services including virtual CISO and risk assessments, as well as cybersecurity solutions like managed security infrastructure and cyber insurance. The website reflects a professional and modern digital presence with clear branding, good content quality, and strong trust signals including ISO certifications and media coverage. Technically, the site is built on WordPress with Bootstrap and integrates multiple analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response contacts could improve the posture further. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, NEVERHACK Estonia presents a credible and trustworthy cybersecurity service provider with a solid market position and growing digital maturity.

N

Nordic Aviation Group

xfly.ee

44

Nordic Aviation Group is a medium-sized airline organization based in Estonia, operating multiple airline brands including Nordica and Xfly. The company provides aviation services primarily in the transportation sector, targeting airline passengers and industry stakeholders. The website content focuses on a recent bankruptcy filing, indicating significant financial distress. The company maintains a professional online presence with consistent branding and structured data, but lacks some privacy and security policy disclosures. Technically, the website is built on WordPress with modern technologies such as Bootstrap and Google Tag Manager. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but could be improved with additional security headers and incident response information. Overall, the website is trustworthy and professionally maintained, but the lack of cookie consent and explicit privacy compliance mechanisms represents a compliance gap. The absence of contact emails and phone numbers on the analyzed page limits direct communication channels. Strategic improvements in privacy compliance and security transparency are recommended to enhance trust and regulatory adherence.

N

Nordic Aviation Group

nagroup.ee

44

Nordic Aviation Group is a regional airline group based in Estonia, operating under brands such as Nordica and Xfly. The company provides passenger air transport services primarily in the Nordic and Baltic regions. The website presents official press releases and corporate information targeting passengers, industry stakeholders, and potential employees. The business is positioned as an important regional player with a medium-sized operational scale. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates SEO and analytics tools such as Rank Math and Google Tag Manager. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and follows some best practices but lacks explicit security headers and a published security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

S

Sunset di Kebun

sunsetdikebun.id

42

Sunset di Kebun is a newly established Indonesian event organizer specializing in music festivals that integrate natural settings, primarily hosted in various cities across Indonesia. The website presents a professional and visually appealing platform showcasing event details, artist lineups, galleries, news, and sponsorship information. The business model revolves around event ticket sales, sponsorship partnerships, and merchandise offerings, targeting music and nature enthusiasts. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, Flickity, and Google Tag Manager, hosted behind Cloudflare DNS services, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and CSRF protections in place; however, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is lacking due to missing privacy and cookie policies, which is a notable gap given the use of tracking technologies. Overall, the domain registration aligns well with the business timeline and geographic focus, supporting legitimacy. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory adherence.

Tribun Network is a large Indonesian media group operating multiple regional newspapers and digital platforms, targeting a broad audience interested in news, lifestyle, and events. The business model includes media publishing, digital news dissemination, loyalty card services, and event organization. The website infrastructure is basic, using older technologies such as jQuery 1.3.2 and Bootstrap, hosted on AWS DNS infrastructure. The site lacks modern security practices, including HTTPS enforcement, security headers, and updated libraries, exposing it to potential vulnerabilities. No privacy or cookie policies are present, and contact information is not provided, which impacts trust and compliance. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to meet current standards.

I

Iklandisini.com

iklandisini.com

52

Iklandisini.com is a self-service advertising platform targeting Indonesian businesses seeking affordable and flexible advertising solutions across digital, social media, video, and TV media. The platform is positioned as an accessible and easy-to-use service for small business owners to manage their own ad campaigns. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Splide.js, and Owl Carousel, with integration of Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS with good SSL configuration but lacks security headers and cookie consent mechanisms, which are important for compliance and protection. The absence of WHOIS data for the domain is a significant concern, impacting trust and legitimacy. Overall, the site is functional and professional but requires improvements in privacy compliance and domain registration transparency.

V

Via 3L

via3l.eu

44

Via 3L is a Baltic-based third-party logistics company specializing in warehouse logistics, central warehousing, and international transportation services. The company positions itself as a leading logistics service provider in the Baltic region, targeting businesses requiring efficient supply chain and transport solutions. The website reflects a medium-sized enterprise with a professional digital presence and a clear focus on logistics services. Technically, the website is built on WordPress using modern frameworks like Bootstrap and includes SEO and analytics tools such as Rank Math and Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and incident response contacts. No privacy policy or terms of service were found, indicating room for compliance improvement. Overall, the domain registration is consistent with the business claims, enhancing trustworthiness.

C

CML Innovative Technologies Ltd

cml-it.com

59

CML Innovative Technologies Ltd is a well-established manufacturer specializing in LED signal lamps and miniature lighting solutions for various industrial applications including aviation, railway, medical, and automotive sectors. Founded in 1931 and now part of the Oshino Lamps group, the company holds a strong market position as a leader in miniature lighting with a broad product range. Their website reflects a professional and comprehensive presentation of their products and markets, targeting industrial B2B customers globally. The technical infrastructure is based on Concrete CMS with modern frontend technologies such as jQuery, Bootstrap, and Revolution Slider, providing a responsive and user-friendly experience. The website is well-optimized for SEO and mobile devices, though accessibility features are basic. Hosting and domain registration are consistent with the company's UK base, and the domain age supports the long business history. Security posture is good with HTTPS enforced and cookie consent mechanisms in place. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing explicit security and incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates high business credibility and privacy compliance, with clear contact details and ISO 9001 certification as trust indicators. The risk level is low, but strategic enhancements in security policies and technical security controls are recommended to further strengthen the security posture.

A

Accorp Sp. z o.o.

pollster.pl

72

Instytut Badań Pollster, operated by Accorp Sp. z o.o., is a well-established Polish market research institute founded in 2012. It specializes in comprehensive market and opinion research services, including CAWI, CAPI, CATI, and qualitative studies. The company holds a strong market position, ranking second in Poland for CAWI interviews in 2022, and targets businesses and institutions seeking data-driven insights to support growth. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website employs modern web technologies such as Bootstrap, FontAwesome, Google reCAPTCHA, Hotjar, and Google Analytics, with a CMS identified as Bolt. Hosting and domain registration are managed by home.pl S.A. The site is mobile-optimized and demonstrates good SEO practices. Privacy compliance is robust, featuring a consent management platform and detailed privacy and cookie policies, ensuring GDPR adherence. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and integrates a consent management platform. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong compliance and professional business representation. Strategic improvements in security headers and incident response transparency could further enhance its security posture and trust.

T

The Medical Journal of Australia

mja.com.au

67

The Medical Journal of Australia (MJA) is a prominent healthcare publication serving medical professionals and researchers primarily in Australia. It offers a wide range of medical research articles, editorials, guidelines, and educational content. The website is professionally designed and well-structured, reflecting its position as a leading medical journal affiliated with the Australian Medical Association. The business model relies on subscriptions, advertising, and content dissemination to healthcare audiences. Technically, the site is built on Drupal 10, leveraging modern web technologies including Google Analytics, Google Tag Manager, and Stripe for payment processing. The site is mobile-optimized and accessible, with moderate performance. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though some security headers could be improved. The WHOIS data is privacy protected by a reputable Australian registrar, which is typical for professional organizations. No signs of malicious activity or suspicious domain registration patterns were found. Privacy compliance is basic with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with strong business credibility and good security hygiene, though improvements in privacy compliance and security headers are recommended to enhance trust and regulatory adherence.

I

IRIS

irisnetwork.org

41

IRIS is a well-established global network of independent market research institutes, operating since 2003 with over 30 offices worldwide. The organization specializes in delivering comprehensive market research services, including public confidence studies and pharma industry research, targeting businesses seeking international market insights. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies such as jQuery, Bootstrap, Google Analytics, and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks DNSSEC and security headers, and does not provide privacy or cookie policies, which are compliance gaps. Overall, the domain WHOIS data supports the legitimacy and long-term operation of the business. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

C

Cirkle Studio Pvt. Ltd.

cirkleinc.com

55

Cirkle Studio Pvt. Ltd. operates the website cirkleinc.com, offering premium Shopify apps, themes, and expert consulting services targeted at Shopify merchants and store owners. The company positions itself as a Shopify Expert and Partner with a presence on the Shopify App Store and Experts platform, indicating a focused niche in e-commerce solutions. Their business model revolves around SaaS app sales, digital product sales (themes), and consulting services, catering to a small-sized enterprise founded in 2017. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and icon libraries, hosted behind Cloudflare DNS. The site is mobile optimized with good design and navigation, though SEO and accessibility features are basic. No CMS or backend platform is explicitly detected. Performance is moderate, with no evident blocking or WAF challenges. From a security perspective, the domain is well-managed with multiple EPP locks and a long registration period, but lacks DNSSEC and visible security headers. The absence of privacy and cookie policies, as well as incident response or vulnerability disclosure information, indicates compliance and security maturity gaps. No HTTPS enforcement details were provided, which is critical for e-commerce sites. Overall, the website is professional and credible within its niche but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and reduce risk. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response contacts.

O

Osaühing SEERSANT M & A

maservice.ee

40

Seersant M&A Service is a small Estonian company specializing in automotive repair, maintenance, and rental services, including trailers and passenger vehicles. Established in 2013, it holds a reputable market position in Rapla, evidenced by its recognition as a fast-growing 'gasell' company and positive customer reviews. The website reflects a professional digital presence built on WordPress with Elementor, offering clear navigation and responsive design. Security measures include HTTPS and Google reCAPTCHA integration, although formal privacy and cookie policies are absent, indicating room for compliance improvement. Overall, the company demonstrates a solid business foundation with trustworthy service offerings and a good technical infrastructure.

Semako Romulad OÜ is a small Estonian company specializing in vehicle dismantling, auto repair, 24-hour roadside assistance, towing services, spare parts sales, and equipment rental. The company targets vehicle owners and businesses in Estonia requiring these transportation-related services. Their market position is local/regional with partnerships with recognized organizations such as Autolammutuste Liit and the Estonian Police and Border Guard Board. The website content is relevant and well-structured, providing clear information about services and contact details. Technically, the website uses a modern but basic tech stack including Bootstrap, jQuery, Flexslider, and Google Analytics. The site is mobile-optimized and performs moderately well. Hosting and domain registration are consistent with the business location, registered through Zone Media OÜ in Estonia. However, no CMS is explicitly detected, and accessibility features are basic. From a security perspective, the website uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for improved security posture. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure policies are found. The site uses Google Analytics for tracking, with moderate user tracking levels but limited privacy compliance. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance improvements, and formalized policies to increase trust and regulatory adherence.

P

PoolQ OÜ

poolq.ee

38

PoolQ OÜ is a small Estonian company specializing in the sale, maintenance, repair, and rental of Tiki and Respo trailers, as well as automotive locksmith and repair services for cars and small vans. The company operates primarily in Pärnu and is an official Autoasi representative, positioning itself as a local trusted service provider in the transportation sector. The website reflects a focused business model targeting vehicle owners and businesses requiring trailer and vehicle services. Technically, the website is built on WordPress with common plugins and libraries such as jQuery and Bootstrap, offering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

M

MPY Telecom Oyj

mpy.fi

55

MPY Telecom Oyj is a Finnish telecommunications company specializing in providing fiber optic internet and reliable connectivity services to residential customers, housing companies, and businesses. Established in 2000, MPY has a strong market presence in Finland, offering high-speed internet solutions tailored for remote work, entertainment, and communication needs. The website reflects a professional and consistent brand image with clear service offerings and customer-centric content. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Matomo and Google Analytics, managed with a compliant cookie consent mechanism. Security-wise, the website enforces HTTPS, implements key security headers, and maintains good SSL configuration, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, MPY demonstrates a mature digital infrastructure and a trustworthy online presence, with room for improvement in security transparency and accessibility compliance.

G

G4S

aiko.ee

69

The website aiko.ee represents a wireless home security service branded as AIKO, supported by the established security company G4S. It offers a modern, wireless home alarm system with a mobile app for remote control and monitoring. The business targets residential customers in Estonia seeking reliable home security solutions with professional installation and a security guarantee. The site is professionally designed, mobile-optimized, and integrates consent management via Cookiebot, reflecting a mature digital presence. Technically, the site uses Bootstrap, Google Fonts, Google Tag Manager, and Cookiebot scripts, hosted by Telia Eesti AS, ensuring stable infrastructure and performance. Security posture is good with HTTPS enforced and no exposed sensitive data, though additional security headers could enhance protection. Privacy compliance is supported by a cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

J

Jill Arcaro

jillarcaro.com

30

Jill Arcaro operates a specialized wellness and educational business focused on holistic therapies such as Thai Massage, Reiki, and Access Bars, complemented by educational travel experiences and an artisan retail store. The website is professionally designed using WordPress and WooCommerce, offering a good user experience with clear navigation and mobile optimization. Privacy and cookie policies are well implemented, indicating GDPR compliance. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site presents a credible business front but requires domain registration verification and enhanced security measures.

H

HARJU ELEKTER UAB

harjuelekter.lt

46

HARJU ELEKTER UAB is a Lithuanian contract manufacturing company specializing in engineering and production of multi-drive systems, power distribution, and prototyping services primarily for industrial and marine sectors. The company operates under the Harju Elekter Group and offers Engineer-To-Order, Make-To-Order, and Assemble-To-Order business models. Their market position is that of a specialized manufacturer with capabilities for fast marine class certification and full load testing. The website is professionally designed using WordPress with Cherry Framework and Bootstrap, featuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers and incident response information are lacking. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a credible and established business with room for improvement in security and privacy transparency.

V

Vanalinna Ehitus

vlrestaurering.se

40

Vanalinna Ehitus is a specialized restoration company focusing on the renovation of plastered facades and restoration of wooden windows and doors, particularly for culturally protected and historically valuable buildings. The company operates primarily in Sweden and emphasizes quality craftsmanship, flexibility, and preservation of architectural heritage. Their market position is that of a niche specialist serving clients who require expert restoration services for heritage properties. Technically, the website is built on WordPress with modern front-end technologies such as Bootstrap and jQuery, optimized for performance and mobile responsiveness. SEO practices are well implemented, and the site uses structured data to enhance search engine understanding. Hosting details are not explicit, but the domain is registered with Ascio and uses European name servers. From a security perspective, the site uses HTTPS with good SSL configuration but lacks DNSSEC and some recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present, but no terms of service or explicit security policies. Contact information is clear and professional, enhancing business credibility. Overall, the website presents a professional and trustworthy image with a solid technical foundation and good content quality. The main areas for improvement include enhancing security headers, publishing a security policy, and improving privacy compliance details to align better with GDPR requirements.

A

Andevis

virosoft.ee

42

Andevis is an Estonian software development company specializing in integrated HR and payroll management solutions, including their flagship Virosoft HR system. The company targets businesses seeking tailored personnel accounting, work time tracking, payroll, training, and self-service portals. The website is professionally designed using WordPress and includes multiple contact forms secured with Google reCAPTCHA v2. The technical infrastructure is modern but lacks some advanced security headers. The domain is well-established since 2010 and registered with an Estonian registrar consistent with the business location. However, the site lacks visible privacy and cookie policies, which impacts compliance scores. Overall, the website presents a credible and professional business presence with room for improvement in privacy and security practices.

A

Accorp Sp. z o.o.

instytut-pollster.pl

72

Instytut Badań Pollster, operated by Accorp Sp. z o.o., is a well-established Polish market research institute founded in 2012. The company specializes in various research methodologies including CAWI, CAPI, CATI, and qualitative studies, holding a strong market position as the second largest CAWI research provider in Poland in 2022. Their services target businesses and institutions requiring reliable market and opinion data to support business growth and societal development. The website reflects a professional and modern digital presence with comprehensive content and clear navigation.

A

ABCS Insights

abcsinsights.com

60

ABCS Insights is a data analytics and marketing measurement company founded in 2020, specializing in leveraging a large single-source database of North American retail sales data to optimize marketing campaigns across multiple channels. The company targets marketing professionals and media companies seeking data-driven insights to improve campaign effectiveness. The website presents a professional and consistent brand image with clear navigation and good content quality, emphasizing their key services such as ad measurement, audience optimization, brand awareness tracking, and sales impact analysis. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Cloudflare services, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced, Cloudflare DNS and bot protection via Turnstile captcha, and a cookie consent mechanism supporting GDPR compliance. However, there is room for improvement in DNS security (DNSSEC not enabled), security headers, and publishing formal security policies or incident response contacts. Overall, the domain registration data aligns well with the business claims, showing a consistent and legitimate online presence.

P

Peaasi.ee

peaasi.ee

48

Peaasi.ee is a well-established Estonian non-profit organization dedicated to supporting youth mental health through a comprehensive online portal. The website offers extensive mental health information, e-counseling services, first aid tools, and training programs aimed at improving mental wellbeing among Estonian youth and those working with them. The organization maintains a strong market position as a leading mental health resource in Estonia, supported by multiple partnerships and funding sources. Technically, the site is built on WordPress with a modern tech stack including WooCommerce, Bootstrap, and various analytics and marketing tools, demonstrating a mature digital infrastructure. The website is multilingual and optimized for mobile devices, providing a good user experience and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit cookie consent mechanisms are missing, representing areas for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, though enhancing privacy compliance and security policies would strengthen its risk profile.

L

Lastekaitse Liit

kiusamisestvabaks.ee

42

Kiusamisest vabaks is a non-profit educational platform operated by Lastekaitse Liit, focused on bullying prevention in Estonia. The website offers multilingual educational materials and awareness content targeting nurseries, kindergartens, and grade schools. It collaborates with reputable partners including the Estonian Ministry of Education and Research and international child protection organizations. The platform is well-positioned within its niche, serving educators, parents, and children with relevant resources. Technically, the website is built on WordPress with modern technologies such as Bootstrap, jQuery, and Google services for analytics and tag management. It employs multilingual support via WPML and uses SEO best practices including structured data and Open Graph metadata. The site is mobile-optimized and performs moderately well, with a consistent and professional design. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the website demonstrates a solid business credibility and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

E

ETKA Andras

andras.ee

44

ETKA Andras is a well-established Estonian non-profit organization dedicated to adult education and lifelong learning. The website serves as a hub for adult learners and educators, providing information on training, certification, and community events. The organization partners with the Estonian Ministry of Education and Research and benefits from European Social Fund programs, reinforcing its credibility and national importance. The site is multilingual, primarily in Estonian, with English and Russian options, enhancing accessibility for diverse audiences. Technically, the website is built on WordPress with modern plugins and frameworks, offering a good user experience and moderate performance. Security measures include HTTPS and reCAPTCHA integration, though additional security headers and explicit privacy policies are recommended to enhance compliance and trust. Overall, the site reflects a professional, trustworthy educational entity with a clear mission and stable digital presence.

L

Luwi OÜ

luwi.ee

45

Luwi OÜ operates as a specialized training center in Estonia, providing a broad range of educational services including group and individual training courses, psychological and addiction counseling, and supervision services. The company is recognized as a partner of the Estonian Unemployment Insurance Fund's training card program, which enhances its credibility and market position. The website is professionally designed, multilingual, and offers clear navigation to various training categories and services, targeting individuals and organizations seeking professional development in Estonia. Technically, the website is built on WordPress with a modern technology stack including Bootstrap, jQuery, and several optimization and security plugins. It employs Google reCAPTCHA v3 for form protection and uses cookie consent mechanisms to comply with privacy regulations. The site is hosted by Zone Media OÜ, a known Estonian hosting provider, and demonstrates moderate performance and good mobile optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with a privacy policy and cookie consent banner. Business credibility is strong with clear contact information, company registration details, and trust signals such as partnerships and certifications. Overall, Luwi OÜ's website presents a trustworthy and professional online presence with room for improvement in security header implementation and formal security policies. The risk level is moderate with no critical issues detected, making it a reliable platform for its users.

Nasdaq Baltic operates as the regional stock exchange platform for the Baltic countries of Estonia, Latvia, and Lithuania, providing trading services for shares, bonds, and funds. The website serves investors, companies, brokers, and advisers by offering real-time market data, news, and capital raising facilitation. It is part of the larger Nasdaq Inc. corporate group, reflecting a strong market position in the finance sector. The site is professionally designed with consistent branding and clear navigation, targeting financial market participants and stakeholders in the Baltic region. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap, jQuery, Swiper.js, and Highstock for data visualization. It integrates Google Analytics and Tag Manager for user tracking and marketing insights. The site is mobile optimized and SEO friendly, with structured data enhancing search engine understanding. Hosting and domain registration are managed by reputable providers, ensuring stable infrastructure. From a security perspective, the site enforces HTTPS and employs domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit security headers or incident response policies are published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Overall, Nasdaq Baltic's website demonstrates a mature digital presence with strong business credibility and good security hygiene. Strategic improvements could focus on enhancing DNS security, publishing formal security policies, and expanding incident response transparency to further strengthen trust and compliance.

V

Váš Hosting s.r.o.

hlidam.to

66

Hlídám.to is a Czech-based professional server monitoring service operated by Váš Hosting s.r.o. The company offers uptime and performance monitoring, outage alerts, email server monitoring, and API access, targeting website owners and IT administrators in the Czech market. The website is well-structured, with clear navigation and legal compliance including privacy and cookie policies. Technically, the site uses a custom CMS with common JavaScript libraries and frameworks such as jQuery and Bootstrap, and integrates third-party analytics and advertising tools with user consent. Security posture is solid with HTTPS enforced and secure login forms, though explicit security headers are not detected. No direct company contact emails or phone numbers are publicly listed, with contact primarily via a web form. Overall, the site demonstrates a good balance of business professionalism, technical implementation, and privacy compliance.

M

Město Krásná Lípa

krasnalipa.cz

57

Město Krásná Lípa operates an official municipal website serving residents, tourists, and local stakeholders by providing comprehensive information about the town, its administration, cultural events, and public services. The website reflects a well-established local government entity with a domain registered since 1999, consistent with its long-standing municipal role. The content is rich, relevant, and professionally presented, targeting local citizens and visitors interested in the region. The business model is public service oriented, focusing on transparency and community engagement. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Font Awesome, and integrates an AI chatbot for enhanced user interaction. The site is mobile-optimized with good navigation and content structure, though it lacks some advanced accessibility features and cookie consent mechanisms. Hosting appears to be managed by a Czech registrar and hosting provider, ensuring regional consistency. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal security or incident response policies. No vulnerability disclosure or security.txt files are present. Privacy compliance is partially addressed with a GDPR page but no cookie consent banner. Contact information is clearly provided, enhancing trustworthiness. Overall, the website presents a moderate to good security posture with room for improvement in privacy compliance and security best practices. The domain WHOIS data aligns well with the website content, indicating high legitimacy and trust. Strategic recommendations include implementing cookie consent, security headers, and publishing security policies to enhance compliance and user trust.

A

Alma Career

careerexpo.cz

59

Career Expo is a major career opportunities festival organized by Alma Career Czechia s.r.o., targeting job seekers and employers primarily in the Czech Republic. The website presents a professional and content-rich platform promoting the event, workshops, and networking opportunities. The company positions itself as a leading organizer in the career event space with partnerships including Jobs.cz and Prace.cz. Technically, the site is built on WordPress with modern libraries and frameworks, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA usage, though lacks some security headers and formal security policies. Privacy compliance is partial, with cookie consent implemented but no clear privacy or terms pages. WHOIS data is unavailable, which slightly impacts trust but the overall digital presence is consistent and professional.

C

Citadele pank

citadeleleasing.ee

46

Citadele pank is a well-established financial institution in Estonia offering leasing services primarily focused on vehicle financing. The website provides detailed leasing options, including a calculator and a dedicated leasing portal for customers to manage their contracts and applications. The business targets private individuals seeking flexible leasing solutions with personalized interest rates and competitive terms. The company is part of the larger Citadele Group, indicating a strong market position in the Baltic financial sector. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Google Tag Manager, with a CMS likely being October CMS. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS, uses security headers, and implements cookie consent mechanisms, though explicit security and incident response policies are not publicly available. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, the website reflects a professional and trustworthy financial service provider with room for improvement in transparency around security policies and incident response.

Pie Messenger is a technology platform launched in 2019 that offers an all-in-one service for creators to share images, videos, and files, as well as explore groups and communities. The platform targets creators and online community participants, aiming to elevate their online presence through content sharing and community engagement. The website uses modern web technologies including Blazor Server and Bootstrap, indicating a contemporary technical infrastructure with moderate performance and basic mobile optimization. However, the website lacks comprehensive content, including privacy, cookie, and terms of service policies, as well as contact information, which limits user trust and compliance. Security posture is minimal with no detected security headers or DNSSEC enabled, and no visible incident response or vulnerability disclosure mechanisms. The domain is registered with GoDaddy and has a long registration period, which supports legitimacy, but the absence of registrant details and privacy policies reduces overall trust. Strategic improvements in security, compliance, and transparency are recommended to enhance the platform's credibility and user confidence.

The website 'jarwoadmin.com' operates as a niche Indonesian platform providing RTP slot game tips and patterns, targeting slot game players and gamblers in Indonesia. The business model revolves around sharing RTP percentages and slot game 'gacor' (hot) hours to attract users interested in online slot gambling. The site is relatively new, with domain registration dating back to March 2023, aligning with the recent launch and content focus. Technically, the website employs Bootstrap and jQuery for its frontend, hosted behind Cloudflare DNS, ensuring basic performance and security. However, the site lacks advanced security headers and DNSSEC, which could be improved to enhance security posture. From a security and compliance perspective, the website does not provide privacy, cookie, or terms of service policies, nor does it offer contact or incident response information, which are critical for trust and regulatory compliance. Overall, the site is accessible without WAF or security challenges but scores low on privacy compliance and business credibility due to missing essential policies and contact details.

The website plaquenilhcl.com operates as a small-scale WordPress blog focused on providing news and tips related to online gambling, specifically Togel and slot games, targeting Indonesian-speaking audiences. The site leverages common WordPress technologies and plugins such as Yoast SEO, Bootstrap, and jQuery, hosted behind Cloudflare DNS with domain registration via Dynadot Inc. The technical infrastructure is standard for a content blog, with moderate performance and good mobile optimization but lacks advanced security configurations such as DNSSEC and security headers. From a security perspective, the site uses HTTPS but does not implement additional security headers or DNSSEC, which could improve its security posture. There are no visible privacy, cookie, or terms of service policies, nor any contact or incident response information, which indicates low privacy compliance and limited business credibility. The absence of contact emails and phone numbers further reduces trustworthiness. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website presents basic content quality and technical implementation suitable for a small niche blog but falls short in privacy compliance and security best practices. Strategic improvements in policy transparency, security headers, and contact information would enhance trust and compliance.

A

admin

dtp-avariya.net

51

The website www.dtp-avariya.net is a WordPress-based blog primarily focused on Indonesian online gambling content, specifically togel and slot games. It provides articles, tips, and affiliate links targeting Indonesian players interested in online gambling. The site uses common web technologies including WordPress 6.8.1, jQuery, Bootstrap, and Yoast SEO for content optimization. The technical infrastructure is moderate with basic mobile optimization and SEO practices in place. Security posture is weak due to lack of security headers and absence of privacy or cookie policies, although HTTPS is enabled. The WHOIS data is missing, which raises concerns about domain legitimacy and transparency. Overall, the site appears functional but lacks critical compliance and security features, posing risks to user trust and regulatory adherence.

A

admin

hljyjmlt.com

50

The website 'Cara Menang Main Judi Online' is a small-scale Indonesian language blog focused on online gambling, particularly togel and slot games. It provides content related to gambling tips and strategies, targeting Indonesian online gamblers. The business model appears to be content-driven, likely monetized through affiliate links or advertising, although no explicit monetization is visible. Technically, the site is built on WordPress with common plugins and libraries such as Yoast SEO, jQuery, and Bootstrap, hosted behind Cloudflare DNS but without DNSSEC enabled. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but no security headers or DNSSEC, and no visible privacy or cookie policies, which is a compliance concern. No contact or business verification information is provided, reducing trustworthiness. The domain is aged since 2010, registered via GoDaddy, which supports legitimacy, but lack of registrant transparency and suspicious external links reduce confidence. Overall, the site is functional but lacks professionalism, security best practices, and compliance measures.

L

LINANTO LLC

control-webpanel.com

63

Control Web Panel (CWP) is a technology company specializing in providing a free and professional Linux web hosting control panel targeted at system administrators and web hosting providers. Founded in 2016 and operated by LINANTO LLC based in Georgia, the company offers both a free version and a paid PRO version with premium support options. The website serves as a comprehensive platform for product information, support, and community engagement, positioning CWP as a competitive alternative to paid control panels with a strong emphasis on security and usability. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced functionality. The site demonstrates good mobile optimization, clear navigation, and moderate performance. Analytics tools such as Google Analytics and Google Tag Manager are employed for user tracking, with basic privacy and cookie policies in place. From a security perspective, the site uses HTTPS and some security best practices but lacks comprehensive security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, supporting the legitimacy of the website. Overall, the website presents a professional and trustworthy front for the business, though improvements in security headers, privacy compliance, and incident response transparency are recommended to enhance trust and compliance.

SPWeb s.r.o. is a well-established Czech technology company specializing in custom web development, e-commerce solutions, SEO, PPC marketing, and IT infrastructure services primarily serving the Brno region. The company has a strong market position supported by over a decade of experience, positive client testimonials, and Google Partner certification. Their website reflects a professional and modern digital presence with comprehensive service offerings and clear contact information. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Fonts, and multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Smartlook. The site is mobile-optimized, fast-loading, and SEO-friendly, demonstrating a mature digital infrastructure. Hosting and DNS services are managed via Cloudflare, enhancing performance and security. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and security headers, which are recommended to enhance its security posture. No vulnerabilities or exposed sensitive data were detected, indicating a generally secure environment. Overall, SPWeb s.r.o. presents a credible, trustworthy, and professional business with a strong online presence. The website scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, making it a reliable partner for clients seeking web and IT services.

R

Race for the Cure | Home

raceforthecure.eu

52

Race for the Cure is a European event organization focused on hosting the largest run and walk events across Europe, primarily aimed at charity participation. The website presents a professional and consistent brand image with clear navigation and a focus on participant engagement. Technically, the site is built on ASP.NET WebForms with Telerik UI components and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and uses modern web fonts and libraries, though accessibility features are basic. Security posture is moderate with HTTPS enabled and IP anonymization in analytics, but lacks explicit security headers and visible incident response or security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Business credibility is moderate with good content quality but no explicit contact or company information disclosed. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and transparency measures.

S

Say Hey

sayhey.be

57

Say Hey is a well-established full-service communication agency based in Belgium, specializing in branding, marketing, content creation, and web development. With over 20 years of experience and a portfolio of more than 300 clients, the company positions itself as a strategic and creative partner for businesses seeking impactful communication solutions. The website reflects a professional and modern digital presence, leveraging advanced JavaScript libraries and a CMS platform (DNN) to deliver a rich user experience. The site is fully accessible without any WAF or security blocking, indicating good operational stability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies, aligning with GDPR requirements. However, the WHOIS data for the domain is restricted, limiting transparency about domain registration details. Overall, the website demonstrates high professionalism and trustworthiness, with room for improvement in explicit security and incident response disclosures.

W

WebActive s.r.o.

tourdefeminin.com

65

Tour de Feminin is an established international women's stage cycling race organized and promoted primarily in the Czech Republic. The event is supported by WebActive s.r.o., which provides the digital platform and content management. The website offers comprehensive race information, historical data, results, and media galleries targeting cycling enthusiasts and participants. The technical infrastructure is built on modern web technologies including jQuery, Bootstrap, and a proprietary CMS (WebJET), delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Strategic improvements in transparency and security documentation are recommended to enhance credibility and compliance.