Security Directory

T

Think Pink Europe

thinkpinkeurope.org

59

Think Pink Europe is a non-profit organization dedicated to raising awareness and funds to combat breast cancer across Europe. The organization runs major campaigns such as Race for the Cure and Pink@Work, engaging the public and corporate sectors to support breast cancer research and patient care. Their website reflects a well-structured, content-rich platform with clear calls to action for donations and participation in events. Technically, the site is built on a mature ASP.NET framework with modern front-end libraries and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no incident response information is published. Overall, the site demonstrates a professional and trustworthy presence suitable for its non-profit mission.

S

SPHosting s.r.o.

sphosting.cz

46

SPHosting s.r.o. is a Czech Republic-based hosting service provider established in 2014, specializing in virtual private servers, dedicated servers, managed servers, and cloud/network services. The company targets small to medium businesses requiring tailored hosting solutions with professional management and 24/7 support. Their market position is supported by positive client testimonials and a perfect aggregate rating, indicating strong customer satisfaction and trust. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and slick carousel for UI, alongside Google Tag Manager, Facebook Pixel, and Yandex Metrika for analytics and marketing. The site is hosted behind Cloudflare DNS and uses HTTPS with excellent SSL configuration. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting good digital maturity. From a security perspective, the site enforces HTTPS, uses reCAPTCHA v2 for form protection, and provides granular cookie consent options. However, it lacks explicit security policies, incident response information, and a security.txt file, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected, and security headers could be enhanced. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with moderate to good security posture. Strategic improvements in security transparency and header implementation would further strengthen their risk profile and compliance stance.

S

SPWeb s.r.o.

firmsys.cz

50

Firmsys.cz is a Czech Republic based technology company specializing in providing compliance and business systems focused on whistleblowing and cookie law adherence. The company, operated by SPWeb s.r.o., offers SaaS solutions tailored for firms, schools, public authorities, and other entities required to comply with EU directives such as EU Directive 2019/1937 and ePrivacy regulations. With over 800 clients and more than a decade of IT service experience, Firmsys positions itself as a reliable partner for legal and compliance system needs. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in Czech language. Contact and legal information are transparently presented, enhancing trustworthiness. Technically, the site employs modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Seznam Retargeting. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR policy. Overall, the site demonstrates a mature digital presence with good security posture and compliance awareness.

A

ADOL Monitor s.r.o.

adol.cz

53

ADOL Monitor s.r.o. is a Czech Republic-based company specializing in providing monitoring services for real estate investment opportunities, particularly focusing on distressed properties such as auctions, executions, and insolvencies. The company has been operating for over 10 years and offers a suite of services including data monitoring, cadastral data access, and educational seminars. Their market position is that of a niche, trusted provider with a strong local presence and a loyal customer base. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various plugins, supporting good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected and could be improved. The absence of WHOIS data limits domain trust assessment but the website content and business information suggest legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR requirements.

The website wickedthemusicaltickets.top is a newly registered domain with minimal content, primarily a default WordPress blog post. There is no clear business description, contact information, or trust indicators present. The site uses a standard WordPress CMS with Bootstrap and jQuery libraries, indicating a basic technical infrastructure. Security posture is weak due to lack of security headers, no DNSSEC, and absence of privacy or cookie policies. The domain registration is privacy protected, which combined with the minimal content, reduces trustworthiness. Overall, the site appears to be in an early stage or possibly a placeholder without a clear business purpose or compliance measures.

F

fsk industries GmbH & Co. KG

fsk-industries.de

51

fsk industries GmbH & Co. KG is a German-based company specializing in innovative automation solutions, including Cobot Welding, SmartArc technology, mechanical engineering, and fixture construction. The company targets industrial clients seeking advanced automation and welding solutions, positioning itself as a niche provider in the manufacturing sector. The website reflects a professional and consistent brand image with good content quality and user experience, primarily in the German language. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies such as Bootstrap and jQuery, hosted by Alfahosting. Performance and mobile optimization are adequate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented via Cookiebot, though additional security headers and a vulnerability disclosure mechanism are recommended. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, scoring 78 out of 100 in the AI assessment.

G

Getriebebau NORD GmbH & Co. KG

nord.com

73

Getriebebau NORD GmbH & Co. KG operates the website www.nord.com, presenting itself as a leading global supplier of mechanical and electronic drive technology solutions including gear motors, industrial gear units, electric motors, and frequency inverters. The company targets a broad industrial audience with a strong B2B focus, emphasizing product competitiveness and energy efficiency. The website supports multiple languages, indicating a global market presence. Technically, the site uses modern web technologies such as Bootstrap, Cookiebot for consent management, and Google Tag Manager for analytics, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected and no dedicated security policy or incident response contacts are published. The absence of WHOIS data for the domain reduces transparency and business credibility, though the website content and branding are professional and consistent with a legitimate enterprise. Overall, the site scores well on content quality, technical implementation, and privacy compliance, but business credibility is slightly impacted by missing WHOIS information.

L

LMB - Gruppe

lmb-gruppe.de

45

LMB-Gruppe is a German manufacturing company specializing in welding, cutting, marking, and machine building services. Their website presents a professional image with clear navigation and relevant content targeting industrial clients. The company offers a range of services including manual welding, laser cutting, and special machinery construction, positioning themselves as a regional service provider in the manufacturing sector. The website is built on TYPO3 CMS and uses modern web technologies such as jQuery and Bootstrap, indicating a moderate level of digital maturity. While the site is mobile-optimized and accessible, there is room for improvement in accessibility and SEO. Security posture is moderate with no visible security headers or explicit security policies, and the site lacks a cookie consent mechanism despite GDPR compliance indications. Overall, the website is functional and credible but would benefit from enhanced security and privacy features.

T

Triorail Bahnfunk GmbH

triorail.com

30

Triorail Bahnfunk GmbH is a specialized technology company focused on developing and supplying GSM-Rail communication modules, modems, and test equipment primarily for the railway and transportation sectors. The company positions itself as a technological leader with a strong emphasis on robust radio reception and compliance with industry standards such as EIRENE and MORANE. Their product portfolio includes various GSM-R modules, terminals, and test systems, with ongoing development in future FRMCS radio modules and active participation in relevant standardization committees. The website infrastructure is built on WordPress with modern plugins and frameworks such as Yoast SEO, Bootstrap, and Contact Form 7, indicating a mature digital presence. The site is well-optimized for SEO and mobile devices, providing a good user experience with clear navigation and professional design. However, the absence of direct contact emails and phone numbers on the homepage, as well as the lack of a cookie consent mechanism, suggests areas for improvement in user engagement and privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and secure forms but lacks advanced security headers and published security policies or incident response information. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear professional and credible. Overall, the website presents a solid business and technical foundation but would benefit from enhanced transparency in domain registration, improved privacy compliance with cookie consent, and clearer contact information to strengthen trust and security posture.

J

JMP s.r.o.

rozkladacipostele.cz

53

JMP s.r.o. operates the website rozkladaci-postele.cz, specializing in the retail and e-commerce sale of folding beds and mattresses primarily targeting customers in the Czech Republic. The company maintains a medium-sized business with multiple physical stores and an online presence, offering a wide range of products with a focus on quality Czech manufacturing. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Bootstrap, and various plugins for SEO, analytics, and live chat support. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though security headers and formal policies are lacking. Privacy compliance is basic with a cookie consent banner but no published privacy or terms of service pages. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is functional, trustworthy, and well-positioned in its niche.

M

MUDr. Marie Součková

ortopediesouckova.com

61

Lékařské podiatrické centrum, led by MUDr. Marie Součková, is a specialized private healthcare provider in Prague focusing on orthopedics and podiatry services for children and adults. The center offers a comprehensive range of treatments including podiatry, orthopedic care, pedicure services, diabetic footwear (SHAPER), and educational courses. The business holds a reputable market position as a pioneer in private comprehensive care for the musculoskeletal system in the Czech Republic. Technically, the website is built on Joomla CMS with modern frontend frameworks like Bootstrap and UIkit, supported by jQuery and Google Analytics for tracking. Hosting is provided by WEDOS Internet, a reputable Czech provider. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Privacy compliance is well addressed with a clear cookie consent mechanism and GDPR-aligned privacy policy. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit incident response or security policies. No vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a professional, trustworthy, and user-friendly digital presence for a specialized healthcare provider, with room for improvement in security hardening and formal policy disclosures.

C

CookTrade s.r.o.

cooktrade.cz

42

CookTrade s.r.o. operates a Czech e-commerce platform specializing in the retail of Tescoma kitchenware products. The company has a long-standing partnership with Tescoma and targets Czech domestic consumers seeking quality kitchen and household products. Their business model focuses on online sales supported by customer service and fast delivery. The website is built on PrestaShop and uses common web technologies such as jQuery and Bootstrap. While the site is functional and professionally designed, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security is generally good with HTTPS enforced, but the use of an outdated jQuery version and absence of security headers present some risks. Overall, the site is trustworthy and consistent with the business claims, but improvements in privacy compliance and security hardening are recommended.

Z

Zasedáme.cz, s.r.o.

zasedame.cz

46

Zasedáme.cz, s.r.o. operates a premium event and conference space rental business located in the heart of Prague, offering multiple room sizes with modern technical equipment and comprehensive event services. The company targets corporate clients and individuals seeking well-equipped, centrally located venues with flexible scheduling options. The website is professionally designed, mobile-optimized, and provides clear pricing, contact information, and customer testimonials, supporting a strong market position in the hospitality and real estate sectors. Technically, the website employs a modern tech stack including Bootstrap, Swiper.js, and Usercentrics for cookie consent management, alongside analytics tools like Google Analytics and Hotjar. The site is served over HTTPS with no visible security vulnerabilities in the content, though security headers are not explicitly detected. The presence of a consent management platform indicates good privacy compliance practices. Security posture is solid with HTTPS and no exposed sensitive data, but the absence of explicit security policies or incident response contacts is a gap. The missing WHOIS data reduces domain trustworthiness and should be investigated further. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity. Strategic recommendations include implementing security headers, publishing a security policy, adding incident response contacts, auditing third-party scripts, and considering a vulnerability disclosure policy to enhance trust and compliance.

F

Futurn nv

futurn.com

54

Futurn nv is a Belgian real estate company specializing in the sustainable redevelopment and transformation of commercial properties in Flanders. The company focuses on converting outdated or underutilized sites into modern, versatile, and environmentally responsible workplaces. Their market position is that of a specialist in sustainable business property development, offering tailored solutions such as KMO units, office buildings, and reconversion projects. The website reflects a professional and consistent brand image targeting business owners and property stakeholders in the region. Technically, the website is built on the Concrete5 CMS platform, utilizing modern frontend technologies including Bootstrap, jQuery, and FontAwesome. It features responsive design, SEO-friendly metadata, and integrates marketing and analytics tools such as Google Tag Manager and social media pixels. The site includes a cookie consent mechanism aligned with GDPR requirements and provides multiple contact channels including phone, email, and a chat widget. From a security perspective, the site enforces HTTPS with a valid SSL certificate and employs secure form practices. However, it lacks explicit security headers and does not provide a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, though the website content and contact information appear authentic and consistent with a legitimate business. Overall, the website demonstrates a good level of digital maturity and security hygiene, with room for improvement in security policy transparency and domain registration verification. The risk profile is moderate, with recommendations to enhance security headers, publish incident response contacts, and verify domain registration details to strengthen trust and compliance.

L

Lumi Capital OÜ

lumikodud.ee

45

Lumi Kodud is a small Estonian real estate company specializing in rental apartments in Tallinn, offering 1-, 2-, and 3-room modern apartments managed reliably. The website is professionally designed using Joomla CMS with modern frameworks like Bootstrap and includes multi-language support. It integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, and employs Google reCAPTCHA for form security. Privacy and cookie policies are present and indicate GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. Overall, the site is trustworthy and well-positioned for its local rental market niche.

K

KTC - Kommunalteknisk Chefforening

ktc.dk

51

KTC - Kommunalteknisk Chefforening is a Danish municipal technical association providing a platform for technical leaders and professionals in local government sectors. The website offers news, events, professional groups, and networking opportunities tailored to its audience. The organization appears well-established with a clear focus on environmental and technical municipal issues. Technically, the website is built on Drupal 7 with modern front-end technologies and includes interactive features such as Google Charts and Revive Adserver for advertising. Security posture is solid with HTTPS enforced and secure login forms, though there is room for improvement in security headers and ongoing maintenance of the CMS. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. The absence of WHOIS data is a notable gap in domain trust signals but does not detract significantly from the overall legitimacy given the professional content and contact transparency.

Avatud Lahendused OÜ is a medium-sized Estonian company founded in 2015, specializing in Odoo ERP implementations primarily for manufacturing companies. They hold a strong market position as one of the largest Odoo partners in the Baltic region, employing about 20 specialists and serving a diverse client base. Their website reflects a professional and consistent brand image with clear service offerings including ERP implementation, training, and consulting. Technically, the website is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap and FontAwesome, and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with CSRF protections and secure forms but lacks some security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanism. Overall, the website is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

I

Infovara OÜ

infovara.ee

49

Infovara OÜ is an Estonian business intelligence and analytics consulting company specializing in providing comprehensive BI solutions including consulting, software implementation, and training. The company leverages leading BI platforms such as Qlik and Jedox to serve a diverse range of sectors including transportation, finance, manufacturing, healthcare, media, retail, energy, and government. Infovara positions itself as a trusted expert in the Estonian market with over 15 years of experience and a strong partnership with Helmes, a larger IT services company. The website is professionally designed, content-rich, and targets Estonian business leaders seeking smarter decision-making tools. Technically, the site is built on WordPress with modern frameworks and security practices, including HTTPS, security headers, and Google reCAPTCHA on forms. Analytics and marketing tools like Google Tag Manager and Facebook Pixel are used with GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website demonstrates a mature digital presence with good security posture and compliance, supporting the company's credibility and market position.

O

Oreon OÜ

bestcredit.ee

52

BestCredit.ee is an established Estonian financial services company operating since 2011 under Oreon OÜ. The company offers a variety of loan products including small consumer loans, business loans, mortgage loans, guarantee loans, and construction loans. Their business model focuses on online lending with self-service features and loan calculators to facilitate customer engagement. The website targets both private individuals and businesses within Estonia, positioning itself as a reliable and professional lender with a clear regulatory license from the Estonian Financial Supervision Authority.

B

Baltic Rail AS

balticrail.com

49

Baltic Rail AS is a medium-sized transportation company specializing in container-train operations and intermodal rail services primarily in the Baltic Adriatic Rail Corridor. Established in 2008 and owned by the Rail World Group, it operates container terminals and warehousing facilities in Estonia and Poland, serving key locations such as Wroclaw, Katowice, Ostrava, and Koper. The company targets businesses requiring efficient rail freight and logistics solutions in Central and Eastern Europe. The website reflects a professional and consistent brand image with clear service offerings and active news updates, indicating ongoing operations and market presence. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and employs Google reCAPTCHA v3 for form security. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, some security best practices such as security headers are missing, and no privacy or cookie policies are published, which impacts compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is a notable concern, as it conflicts with the business history claimed and may indicate domain registration issues. Overall, the site is trustworthy but would benefit from improved transparency and security documentation. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, adding a vulnerability disclosure policy, and resolving WHOIS registration inconsistencies to enhance trust and compliance.

C

Citadele

citadele.ee

57

Citadele is a well-established banking institution operating in Estonia, providing a broad range of retail banking services including loans, deposits, insurance, and payment solutions tailored to individual customers. The website reflects a mature digital presence with comprehensive content, including loan calculators and detailed product offerings, targeting private banking customers. The company maintains a consistent brand image and integrates social media and partner links effectively. Technically, the site uses modern JavaScript libraries such as jQuery and Bootstrap, and is likely powered by OctoberCMS, ensuring a responsive and user-friendly experience. Security is robust with HTTPS enforced, secure cookie consent mechanisms, and standard security headers, although explicit security policies and incident response information are not publicly available. Overall, the site demonstrates good compliance with privacy regulations and provides clear contact information, supporting a trustworthy user experience.

B

Blend IT

blendit.eu

45

Blend IT is a small technology company specializing in providing remote software development teams primarily located in the Philippines and Estonia. Their business model focuses on outsourcing long-term software professionals to clients globally, emphasizing flexible team structures and direct client-to-developer communication. The company positions itself as a niche provider addressing talent shortages through remote work solutions. Technically, the website is built on WordPress with modern front-end technologies such as Bootstrap and jQuery, and it integrates Google Analytics for user tracking. The site is mobile optimized and uses SEO best practices including structured data and meta tags. Security-wise, the site enforces HTTPS and employs basic anti-spam measures in its contact form but lacks published security policies or incident response information. Privacy compliance is limited due to the absence of privacy and cookie policies. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures.

IITEE OÜ is an Estonian IT service provider specializing in professional IT solutions for companies, particularly those in the manufacturing sector. Founded in 2006, the company offers IT maintenance, hosting services with high availability, and Office 365 business-class email solutions. Their business model focuses on providing reliable and efficient IT support to improve operational efficiency for their clients. The website reflects a small but professional company with clear contact information and a focus on B2B services. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, Owl Carousel, and Google Fonts. Google Analytics and Google Tag Manager are employed for user tracking and marketing insights. The site is mobile responsive and well-structured, though accessibility features are basic. Hosting appears to be managed by Elkdata OÜ, consistent with the WHOIS data. From a security perspective, the website uses HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected, and there is a lack of privacy and cookie policies, which impacts GDPR compliance. No vulnerability disclosure or incident response information is provided. The security posture is moderate but could be improved by implementing standard security headers and formal policies. Overall, the website is professional and trustworthy with a solid business foundation. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance trust and regulatory adherence.

M

MAINOR

mainor.ee

45

MAINOR is an established Estonian corporate group with a 50-year history, operating primarily in environment, education, healthcare, and energy sectors. The company acts as a parent entity to multiple subsidiaries and is involved in significant development projects including Estonia's third largest economic city. The website is professionally designed, multilingual, and built on WordPress with modern frontend technologies. It includes SEO optimizations and a cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is supported by a privacy policy and cookie consent, but lacks detailed data protection officer or incident response information. Overall, the site is trustworthy and credible, with room for improvement in security best practices and transparency.

A

Andevis

andevis.ee

34

Andevis is an Estonian software development company specializing in integrated HR, payroll, and personnel management solutions, notably the Virosoft HR system and self-service portals. The company targets Estonian businesses seeking comprehensive personnel management software tailored to their organizational rules and accounting needs. The website reflects a professional and consistent brand presence with clear contact information and multiple service offerings. Technically, the site is built on WordPress using modern libraries such as jQuery, Bootstrap, and Google reCAPTCHA v2 for form security. Performance and mobile optimization are adequate, though accessibility and SEO could be enhanced. Security posture is moderate with HTTPS enforced and anti-spam measures in place, but lacks important security headers and explicit privacy or cookie policies, indicating compliance gaps. The domain is well-established since 2010 with consistent WHOIS data, supporting business legitimacy. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.

R

Reiting PR OÜ

reiting.ee

45

Reiting PR OÜ is an established Estonian company specializing in adult education, business training, and accounting services. Founded in 2010, it operates a professional website offering a wide range of practical courses, including entrepreneurship, personal work, logistics, IT, and language training. The company also provides reliable accounting services for businesses and housing associations, alongside psychological and addiction counseling. It holds a reputable market position as a partner of the Estonian Unemployment Insurance Fund (Töötukassa) and collaborates with several recognized local organizations. The website is well-structured, content-rich, and targets adult learners, entrepreneurs, and professionals seeking skill development.

A

ALPA Kids

alpa.ee

50

ALPA Kids is an educational technology company specializing in Estonian-language digital learning games for children aged 3 to 8. The company collaborates with educators and child development experts to create culturally relevant and curriculum-aligned content. With over 2 million downloads and usage in more than 500 educational institutions across 170 countries, ALPA Kids holds a strong market position in the niche of early childhood digital education. Their business model includes app distribution via major app stores and direct engagement with educational institutions. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various SEO and analytics plugins, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-branded, supporting ALPA Kids' credibility in the education sector.

E

Emerante

emerante.ee

41

Emerante is a small Estonian retail and service company specializing in home interior furnishings, offering full services from project planning to installation and furniture maintenance. The website reflects a local market focus with a professional and consistent brand presence. Technically, the site is built on WordPress with WooCommerce, leveraging modern libraries and frameworks such as Bootstrap, jQuery, and Owl Carousel. The site is mobile-optimized and uses SSL with good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms pages. Overall, the site is trustworthy and functional but could improve transparency and security documentation.

S

Servaali Oy

servaali.com

53

Servaali Oy is a well-established Finnish company specializing in the import and distribution of quality alcoholic and non-alcoholic beverages. Operating since 1995 and owned by Olvi Oyj, it holds a strong market position as one of Finland's leading alcohol importers. The website reflects this with clear branding, product categories, and a professional presentation targeting HoReCa professionals and consumers interested in premium drinks. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and jQuery, and it employs Cloudflare DNS and Google Analytics for performance and tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

H

Harju Elekter AS

harjuelekter.ee

49

Harju Elekter AS is a well-established Estonian industrial group specializing in the design, manufacture, and installation of electrical distribution equipment for energy, industrial, and infrastructure sectors. The company has a strong market position supported by multiple awards and contracts with major entities such as Eesti Energia and CERN. Their website reflects a mature digital presence built on WordPress with modern plugins and frameworks, offering good SEO and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the website and business demonstrate high professionalism and trustworthiness.

F

FullPowerBet

powerupenergytech.com

52

FullPowerBet is a small-scale online gaming content website focused on providing guides and strategies for various online games such as slots, sportsbook, casino, arcade, and toto. The website is built on WordPress and uses popular SEO plugins like Yoast and Rank Math, indicating an emphasis on search engine optimization. The technical infrastructure includes Cloudflare DNS services but lacks advanced security features such as DNSSEC and security headers. The website content is primarily in Indonesian and targets online gaming enthusiasts. However, there is a notable mismatch between the domain name 'powerupenergytech.com' and the website content, which may confuse users or reduce trust. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide any privacy, cookie, or terms of service policies. No contact information or incident response details are published, which limits transparency and user trust. The WHOIS data shows inconsistencies, including a suspicious future creation date and lack of registrant details, which further impacts the domain's legitimacy score. Overall, the website demonstrates moderate technical implementation and content quality but falls short in privacy compliance and business credibility. Strategic improvements in security policies, transparency, and domain registration information are recommended to enhance trust and compliance.

V

Vanalinna Ehitus

vanalinnaehitus.ee

44

Vanalinna Ehitus is an established Estonian construction company specializing in building construction under main contracting agreements. Founded in 2010, the company emphasizes flexibility, client-centric approaches, and quality workmanship. Their website reflects a professional and modern digital presence with multilingual support for Estonian, Finnish, and Swedish audiences. The company showcases a portfolio of projects and maintains active social media channels, reinforcing their market position. Technically, the site is built on WordPress with modern libraries and optimizations, delivering good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the website supports the company's credibility and business goals effectively.

M

MAS Holdings

masholdings.com

67

MAS Holdings is a leading innovative clothing manufacturer specializing in high-quality garments including sportswear, lingerie, sleepwear, swimwear, and medical apparel. Established in 2000, the company operates at an enterprise scale and targets businesses and brands seeking garment manufacturing solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern technologies such as Bootstrap, jQuery, and Google reCAPTCHA, and employs SEO best practices via Yoast SEO Premium. Security posture is solid with HTTPS enabled and reCAPTCHA protecting forms, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service on the main site. Overall, the website is trustworthy and professionally maintained, with room for improvement in security headers and privacy documentation.

A

Aurightec

eolane.ee

54

Aurightec is a professional electronics manufacturing service provider based in Estonia, offering industrial services to support business partners in delivering cutting-edge electronic products. The company holds multiple ISO certifications, indicating a strong commitment to quality and safety standards. Their website is well-designed, SEO-optimized, and compliant with GDPR and cookie regulations, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and security features such as Google reCAPTCHA and cookie consent management. Security posture is solid with HTTPS and bot protection, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, Aurightec presents a trustworthy and professional business front with clear contact information and social media presence.

F

Fineltec Oy

fineltec.fi

50

Fineltec Oy is a well-established electronics manufacturing services (EMS) provider founded in 2003, specializing in contract manufacturing and assembly of electronics, electro-mechanics, and wiring harnesses. The company serves diverse industries including energy, industrial automation, instrumentation, defence, safety, building automation, and medical devices, positioning itself as a preferred partner with strong quality and environmental certifications such as ISO 9001, ISO 14001, and ISO 13485. Their business model focuses on providing comprehensive manufacturing solutions from prototypes to life-cycle services, supported by a subsidiary production site in Estonia. Technically, the website is built on WordPress with modern frameworks like Bootstrap and enhanced by SEO and analytics tools including Yoast SEO, Google Analytics, and Google Tag Manager. The site is mobile-optimized, has good navigation, and employs cookie consent mechanisms to comply with privacy regulations. Performance is moderate with a good balance of content richness and technical implementation. From a security perspective, the site enforces HTTPS with a solid SSL configuration but lacks DNSSEC and some recommended security headers. No vulnerabilities or exposed sensitive data were detected. The company demonstrates adherence to recognized quality and environmental standards but does not publicly provide an incident response or vulnerability disclosure policy, which could be improved. Overall, Fineltec presents a credible and professional online presence with strong business legitimacy and moderate to good security posture. Strategic recommendations include enhancing DNS security, adding security headers, publishing incident response contacts, and formalizing vulnerability disclosure to further strengthen trust and compliance.

T

SEO Optimeerimine | Teie Ettevõte

taddy.ee

35

The website www.taddy.ee is a small Estonian SEO service provider specializing in both internal and external SEO optimization, competitor analysis, and targeted advertising. The business targets companies seeking to improve their search engine visibility and website traffic. The site presents clear service packages with pricing and showcases client examples, indicating a focused and professional approach. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Analytics, with a responsive design and good navigation. However, there are gaps in privacy compliance, as no privacy or cookie policies are published, and contact information is limited to a web form without direct emails or phone numbers. Security posture is moderate with HTTPS enabled but lacking explicit security headers and vulnerability disclosures. Overall, the site is functional and professional but would benefit from enhanced privacy and security practices to improve trust and compliance.

R

Respo Haagised AS

respo.ee

46

Respo Haagised AS is a well-established Estonian company founded in 1990, specializing in the manufacturing and sale of trailers, accessories, and spare parts. It holds a market leader position in Estonia and is a significant player in the Baltic and Scandinavian regions. The company operates a modern e-commerce platform with multi-language support and offers innovative services such as 24/7 self-service trailer sales points. The website reflects a mature digital infrastructure built on Magento, integrating advanced tracking and marketing tools like Google Analytics, Facebook Pixel, and Hotjar. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, user-friendly, and trustworthy, supporting the company's business credibility and market presence.

G

GBC Team

gbc-team.com

40

GBC Team is a specialized technology consulting company focused on Salesforce CRM platform implementation, training, and maintenance. Established in 2016, the company positions itself as a certified Salesforce Consulting Partner, targeting local and international corporations seeking CRM integration and support services. Their website reflects a professional and consistent brand image with clear service offerings centered on Salesforce solutions. The technical infrastructure is based on Joomla! CMS with modern JavaScript libraries and Yandex Metrika analytics, indicating a moderate level of digital maturity. However, the site lacks comprehensive privacy and cookie policies, which impacts compliance with GDPR and related regulations. Security posture is moderate with HTTPS enabled but missing important security headers and DNSSEC.

C

Casa de Baile

tantsukeskus.ee

40

Casa de Baile is Estonia's largest and most recognized salsa school based in Tallinn, offering salsa, bachata, kizomba, and other Latin American social dance courses primarily targeting beginners and dance enthusiasts. The website reflects a well-established business with a domain age since 2010, consistent with its market presence. The technical infrastructure uses modern web technologies including jQuery, Vue.js, Bootstrap, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and incident response information are missing. Overall, the website demonstrates a solid business credibility and compliance with GDPR through privacy and cookie policies. Strategic improvements in security headers and incident response readiness would enhance the security maturity further.

V

Via 3L

via3l.com

40

Via 3L is a Baltic-based third-party logistics company specializing in warehouse logistics, central warehousing, and international transportation services. Positioned as a leading logistics provider in the Baltic region, the company targets businesses requiring efficient supply chain and transport solutions. The website reflects a professional digital presence with clear branding and relevant service descriptions. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO readiness. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, with cookie consent implemented but lacking explicit privacy and terms of service pages. Overall, the website demonstrates moderate risk with room for enhanced compliance and security maturity.

A

Advokaadibüroo LINDEBERG

lindeberg.legal

30

Advokaadibüroo LINDEBERG is a well-established Estonian law firm providing comprehensive legal services across major law domains including private law, public law, IT and intellectual property, and dispute resolution. The firm serves a diverse clientele including businesses, individuals, and the public sector, with a strong reputation in litigation and recognized partnerships such as with the Estonian E-commerce Association. Their website reflects a professional and consistent brand image, multilingual support, and a broad service offering. Technically, the site is built on WordPress with WooCommerce and enhanced by various plugins for SEO, analytics, and marketing, demonstrating a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and enhanced security headers are recommended. Privacy and cookie policies are present and GDPR compliant, with clear contact information and active use of analytics and marketing pixels under consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the firm's market position as a leading legal service provider in Estonia.

P

PR Strategies OÜ

prstrategies.ee

49

PR Strategies OÜ is a small Estonian public relations and communication agency, officially representing the global Hill+Knowlton Strategies network in Estonia. The company provides a broad range of communication services including internal and external communication, crisis communication, media relations, event organization, and strategic consultancy. The website is professionally designed, mobile-optimized, and presents clear navigation and relevant content primarily in Estonian. The technical infrastructure leverages modern web technologies such as jQuery, Bootstrap, Google Fonts, and Google Maps API, hosted likely by Zone Media OÜ, consistent with the domain registration data. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided with a company email and physical address, but no phone numbers or social media links are present. Overall, the website is trustworthy and credible, with strong business legitimacy and partner affiliations.

P

PersonaliDisain

personalidisain.ee

44

PersonaliDisain is an Estonian-based small business specializing in strategic human resource consulting and development services. The company offers a range of HR-related services including consulting, system development, surveys, recruitment, training, and coaching. Their market position is that of a niche HR consulting partner serving organizations seeking to optimize their personnel management. The website is professionally designed using WordPress and Bootstrap, with good mobile optimization and clear navigation. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Leadfeeder, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and use of reCAPTCHA on forms, though security headers could be improved. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page, though no terms of service or security policy pages were found. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Recommendations include enhancing security headers and reviewing third-party scripts to reduce risk.

D

Digimatch OÜ

digimatch.eu

46

Digimatch OÜ is a specialized international business consultancy founded in 2020, focused on facilitating Estonian digital companies' growth in the German market. Leveraging a vetted network of partners and a mission to accelerate growth through partnerships, Digimatch offers matchmaking, warm lead connections, market research, entry strategy, and funding assistance. The company operates primarily in the technology sector with a small-sized business profile based in Estonia. The website is professionally designed using WordPress and Elementor, with good mobile optimization and clear navigation. Security posture is strong with HTTPS and security headers, though explicit security policies and cookie consent mechanisms are absent. Privacy policies are comprehensive and GDPR compliant. Contact information is clearly provided, including email, phone, and physical address, alongside social media presence on LinkedIn and Facebook.

K

Kim Johansen International Transport A/S

kim-johansen.com

59

Kim Johansen International Transport A/S is a well-established European transportation company specializing in the delivery of time-sensitive goods. With over 45 years of experience, the company emphasizes efficient, secure, and environmentally responsible logistics solutions. Their market position is strong within the European transport sector, targeting businesses requiring reliable and precise delivery services. The website reflects a professional image with clear service offerings and contact information, supporting their credibility. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and Revolution Slider, hosted on Microsoft Azure DNS infrastructure. The site is mobile-optimized and demonstrates good SEO practices. Cookie consent is managed via Cookiebot, indicating attention to privacy compliance. However, no explicit CMS or advanced frameworks are detected, and performance is moderate. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no public security policy or incident response information, which could be improved. The domain WHOIS data is consistent and supports legitimacy, with a long registration period and matching business claims. Overall, the website scores well in content quality, business credibility, and privacy compliance, with moderate technical and security posture scores. Strategic improvements in DNS security, security headers, and public security policies would enhance trust and resilience.

I

INTATI TOUR

iati.com

58

IATI is a well-established online travel platform primarily serving the Turkish market and selected international countries. Founded in 2003, it positions itself as Turkey's largest online travel platform, offering travel booking services and technology solutions. The website is professionally designed with consistent branding and clear navigation, targeting travelers and tourism industry stakeholders. The technical infrastructure leverages common web technologies such as jQuery, Bootstrap, and Google Tag Manager, hosted likely on AWS infrastructure. While the website uses HTTPS and has a long-standing domain, it lacks some advanced security features such as DNSSEC and security headers. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism. Contact information is limited on the main page, which may impact user trust. Overall, the site demonstrates moderate digital maturity with room for security and privacy improvements.

T

Työllisyysrahasto

tvr.fi

57

Työllisyysrahasto is a Finnish government-related entity focused on supporting employment transitions by financing unemployment security, adult education benefits, and related social security measures. The organization serves employees, employers, and adult learners, positioning itself as a key player in Finland's labor market support ecosystem. The website provides comprehensive information about its services, including unemployment insurance contributions and adult education support, with clear navigation and multilingual support for Finnish, Swedish, and English users. Technically, the site employs a modern stack including AngularJS, Bootstrap, and privacy-conscious analytics tools like Matomo and Cookiebot, ensuring good performance, accessibility, and SEO. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security policies and headers could be improved. The WHOIS data confirms the legitimacy and consistency of the domain with the organization's identity. Overall, the website is professional, trustworthy, and well-aligned with its public service mission.

N

Nordic Aviation Group

nordica.ee

44

Nordic Aviation Group is a medium-sized airline group based in Estonia, operating subsidiaries Nordica and Xfly. The company provides air transportation services and aircraft leasing. Recently, the group filed for bankruptcy, ceasing daily operations and initiating bankruptcy proceedings. The website serves as a corporate communication channel, providing press releases and company information. The technical infrastructure is based on WordPress with modern web technologies such as Bootstrap and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are missing. Privacy compliance is basic, with no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

B

Balti Uuringute Instituut

ibs.ee

45

Balti Uuringute Instituut is an established independent think tank founded in 1996, specializing in political and socio-economic research primarily focused on Estonia, the Baltic Sea region, and Europe. The organization provides high-quality applied research and policy analysis aimed at supporting evidence-based public policymaking. Their target audience includes policymakers, public sector entities, researchers, and international partners. The website reflects a professional and consistent brand image with clear navigation and relevant content showcasing their expertise and projects. Technically, the site is built on WordPress with modern libraries such as Bootstrap and Swiper.js, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and performs moderately well, though accessibility could be enhanced. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site demonstrates strong business credibility but requires improvements in privacy and security transparency.