Security Directory

B

Bloom Robbins CZ

bloomrobbins.cz

61

Bloom Robbins CZ operates as a specialized e-commerce platform focused on selling vitamin supplements aimed at promoting hair growth and scalp health. The website targets consumers primarily in the Czech Republic and neighboring countries, leveraging a Shopify-based infrastructure to deliver its products. The business model centers on direct online retail with regional sister sites supporting localized markets. The site demonstrates consistent branding and a clear product focus, appealing to a niche audience seeking hair care solutions. Technically, the website utilizes a modern tech stack including Shopify's Dawn theme, JavaScript libraries such as Swiper.js, and integrates multiple marketing and analytics tools like Google Tag Manager, Facebook Pixel, Klaviyo, and Smartlook. The site is hosted on Shopify's CDN, ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. The absence of WHOIS data limits domain trust assessment, though the website content and technology usage suggest a legitimate operation. Overall, Bloom Robbins CZ presents a professional and trustworthy e-commerce presence with room for improvement in security hardening and transparency regarding business and security policies. Strategic enhancements in these areas would bolster customer trust and compliance posture.

S

SPHosting s.r.o.

sphosting.cz

46

SPHosting s.r.o. is a Czech Republic-based hosting service provider established in 2014, specializing in virtual private servers, dedicated servers, managed servers, and cloud/network services. The company targets small to medium businesses requiring tailored hosting solutions with professional management and 24/7 support. Their market position is supported by positive client testimonials and a perfect aggregate rating, indicating strong customer satisfaction and trust. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and slick carousel for UI, alongside Google Tag Manager, Facebook Pixel, and Yandex Metrika for analytics and marketing. The site is hosted behind Cloudflare DNS and uses HTTPS with excellent SSL configuration. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting good digital maturity. From a security perspective, the site enforces HTTPS, uses reCAPTCHA v2 for form protection, and provides granular cookie consent options. However, it lacks explicit security policies, incident response information, and a security.txt file, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected, and security headers could be enhanced. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with moderate to good security posture. Strategic improvements in security transparency and header implementation would further strengthen their risk profile and compliance stance.

S

SPWeb s.r.o.

firmsys.cz

50

Firmsys.cz is a Czech Republic based technology company specializing in providing compliance and business systems focused on whistleblowing and cookie law adherence. The company, operated by SPWeb s.r.o., offers SaaS solutions tailored for firms, schools, public authorities, and other entities required to comply with EU directives such as EU Directive 2019/1937 and ePrivacy regulations. With over 800 clients and more than a decade of IT service experience, Firmsys positions itself as a reliable partner for legal and compliance system needs. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in Czech language. Contact and legal information are transparently presented, enhancing trustworthiness. Technically, the site employs modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Seznam Retargeting. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR policy. Overall, the site demonstrates a mature digital presence with good security posture and compliance awareness.

T

TeeTime SE

teetime.cz

59

TeeTime SE operates a specialized online platform focused on golf course discovery and booking, primarily serving the Czech Republic and broader European markets. The website offers a comprehensive marketplace for golf-related products, memberships, and services, positioning itself as a leading player in the golf hospitality sector. The platform supports both casual and competitive golfers with seamless reservation capabilities and additional offerings such as golf trails and tournaments. Technically, the site leverages modern web technologies including React and Next.js, hosted behind Cloudflare, ensuring a responsive and performant user experience across web and mobile platforms. Security measures such as HTTPS and standard security headers are in place, though explicit cookie consent mechanisms and dedicated security policies are absent. Overall, the site demonstrates a mature digital presence with good business credibility and moderate privacy compliance.

J

JMP s.r.o.

loznice.cz

50

JMP s.r.o. operates the website loznice.cz, specializing in the manufacture and retail of high-quality mattresses, beds, and bedroom furniture with a strong emphasis on Czech production and certification. The company targets consumers seeking quality sleep solutions and offers custom-made products supported by over 30 years of experience. The website features rich multimedia content, product categories, and multiple physical store locations with clear contact information. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Heureka widgets. The site is mobile-optimized and provides a good user experience with clear navigation and structured data for SEO. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain reduces trust from a domain registration standpoint. The site lacks explicit security policies and incident response information, which could be improved to enhance compliance and user trust. Overall, the website presents a professional and trustworthy front for a medium-sized retail business in the Czech Republic, with recommendations to improve domain registration transparency, security headers, and published security policies to strengthen its security posture and compliance.

V

VAKOVAKO | Endowment fund

nf2091.org

62

VAKOVAKO is a Czech Republic-based non-profit endowment fund operating a global donation platform focused on environmental and humanitarian causes. The platform connects donors with carefully vetted nonprofits working in areas such as rainforests, oceans, biodiversity, endangered species, and humanity. The business model emphasizes transparency, with 100% of donations going directly to nonprofits and audited bank accounts. The platform supports donations via a mobile app available on iOS and Android, facilitating easy and fast contributions with no minimum or maximum limits. Technically, the website is built using modern web technologies including React and Next.js, with integrations for Stripe payments, Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is well-optimized for mobile devices, fast loading, and includes accessibility features. Security best practices are observed with HTTPS, security headers, and reCAPTCHA integration, though no explicit security policy or incident response information is published. The WHOIS data for the domain is unavailable or malformed, indicating privacy protection which is common and justified for non-profit organizations. Despite this, the website's transparency, presence of official policies, and contact information support its legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly platform for charitable donations. Recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and security posture.

R

Redwall OÜ

redwall.ee

58

Redwall OÜ is a well-established Estonian web agency with over 13 years of experience, specializing in full-service web solutions including design, development, maintenance, and consulting. The company targets businesses and organizations seeking professional and user-centric digital presence. Their market position is solid within the local Estonian market, supported by a consistent brand and a comprehensive portfolio of services. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket, lazy loading, and deferred scripts. The site is mobile-optimized and accessible, integrating advanced analytics and marketing tools with GDPR-compliant consent mechanisms. Security posture is strong with HTTPS enforced, CAPTCHA on forms, and no visible vulnerabilities, though explicit security policies and incident response documentation are absent. Overall, the website reflects a professional, trustworthy, and technically mature digital presence.

L

Lumi Capital OÜ

luminamai.lt

43

Lumi Namai is a Lithuanian real estate rental business specializing in modern apartments located in the 'Naujasis Skanseno' quarter of Vilnius. The company offers a range of 1 to 4-room apartments fully furnished with kitchen appliances and storage solutions. The website is professionally designed using Joomla CMS and integrates modern technologies such as Google Maps for location visualization, Google reCAPTCHA for form security, and GDPR-compliant cookie consent mechanisms. Social media presence is established on Facebook and Instagram, enhancing customer engagement. The domain is newly registered in 2024, consistent with the business launch timeline, and the WHOIS data aligns with the company identity.

L

Lumi Capital OÜ

lumikodud.ee

45

Lumi Kodud is a small Estonian real estate company specializing in rental apartments in Tallinn, offering 1-, 2-, and 3-room modern apartments managed reliably. The website is professionally designed using Joomla CMS with modern frameworks like Bootstrap and includes multi-language support. It integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, and employs Google reCAPTCHA for form security. Privacy and cookie policies are present and indicate GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. Overall, the site is trustworthy and well-positioned for its local rental market niche.

P

POMPdeLUX FI Oy

pompdelux.com

70

POMPdeLUX FI Oy operates a professional e-commerce platform specializing in Scandinavian children's clothing, targeting parents and caregivers seeking quality kidswear. The company has established a solid market presence since its domain registration in 2011, offering seasonal collections through a well-branded and user-friendly Shopify-based website. The site demonstrates a mature digital infrastructure with integration of modern marketing and analytics tools such as Klaviyo and Facebook Pixel, ensuring effective customer engagement and data-driven marketing strategies. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website reflects a trustworthy and professional retail business with room for improvement in explicit security transparency and incident readiness.

T

Tallinna Kontserdimaja AS

kontserdimaja.ee

38

Alexela Kontserdimaja is a prominent concert hall located in Tallinn, Estonia, recognized as the largest in the Baltic region with seating for up to 1829 visitors. The venue offers a variety of services including event hosting, ticket sales, and catering options such as pre-ordered coffee tables and private champagne salon rentals. The website reflects a well-established business with a domain registered since 2010, consistent with its market presence. The target audience includes cultural event attendees and event organizers in the region. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, and multilingual support via WPML. SEO is well-implemented using Yoast SEO, and analytics are managed through Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and event information. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, indicating a baseline security posture. However, there is a lack of explicit security headers and no visible incident response or security policy pages, which could be improved. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which may pose GDPR compliance risks. Overall, the website is professional, trustworthy, and functional, serving its business purpose effectively. Strategic improvements in privacy compliance and security transparency would enhance its security posture and regulatory adherence.

K

Kino Artis

kino.ee

58

Kino Artis is a local Estonian cinema offering a variety of film screenings, special film programs, and private event hosting services. The website targets cinema-goers and event organizers, providing schedules, movie details, and booking options. The business operates primarily in the media sector with a focus on cultural and entertainment services. Technically, the website uses modern JavaScript and SVG graphics, with Facebook Pixel integrated for marketing and tracking. The site is mobile optimized with good navigation and design quality, though accessibility features are basic. Security posture shows HTTPS enforcement but lacks visible security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security transparency. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

AS Farmi Piimatööstus operates as an Estonian dairy product manufacturer with a well-established online presence since at least 2010. The website serves as a platform to showcase their products, recipes, and company information, targeting consumers interested in dairy goods. The company maintains active engagement through social media channels and provides clear contact details, reinforcing its market position as a reputable local manufacturer. Technically, the website is built on the Voog CMS platform, utilizing modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the site employs HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal security policies, which could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. No vulnerability disclosure or incident response information is provided, indicating room for maturity in security governance. Overall, the website is professional and trustworthy with a solid business foundation. Strategic improvements in security policies, privacy transparency, and accessibility would enhance compliance and user trust, supporting long-term digital resilience.

Q

QATestLab

qatestlab.com

65

QATestLab is an independent software testing and QA services provider established in 2010, targeting software development companies and businesses seeking reliable quality assurance solutions. The company offers a variety of software testing types and solutions aimed at improving software quality. The website reflects a professional B2B service model with a consistent brand presence and clear business description. The technical infrastructure includes multiple modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and Visual Website Optimizer, indicating a mature digital marketing and performance measurement approach. Hosting and domain registration are stable and consistent with the business profile. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is limited due to absence of explicit privacy and cookie policies, though a cookie consent mechanism is present. Overall, the website is well-designed, user-friendly, and trustworthy, but could improve transparency and security practices to align with best industry standards.

Sporditurg.ee operates as a localized Estonian online marketplace specializing in sports equipment and related goods. It provides a platform for both private individuals and legal entities to post free classified ads, targeting sports enthusiasts across Estonia. The website offers categorized listings by sport type, size, condition, and location, facilitating easy navigation for users. The business model is focused on community-driven listings with monetization likely through featured ads and advertising partnerships. The market position is niche and local, serving a specific segment within the retail industry.

I

Infovara OÜ

infovara.ee

49

Infovara OÜ is an Estonian business intelligence and analytics consulting company specializing in providing comprehensive BI solutions including consulting, software implementation, and training. The company leverages leading BI platforms such as Qlik and Jedox to serve a diverse range of sectors including transportation, finance, manufacturing, healthcare, media, retail, energy, and government. Infovara positions itself as a trusted expert in the Estonian market with over 15 years of experience and a strong partnership with Helmes, a larger IT services company. The website is professionally designed, content-rich, and targets Estonian business leaders seeking smarter decision-making tools. Technically, the site is built on WordPress with modern frameworks and security practices, including HTTPS, security headers, and Google reCAPTCHA on forms. Analytics and marketing tools like Google Tag Manager and Facebook Pixel are used with GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website demonstrates a mature digital presence with good security posture and compliance, supporting the company's credibility and market position.

B

BDA Consulting OÜ

bda.ee

49

BDA Consulting OÜ is an Estonian network-based training and consulting company specializing in delivering training, development, consulting projects, service design, and strategic consulting. The company leverages a network of over 200 recognized experts to serve its clients, positioning itself uniquely in the Estonian market. The website is professionally designed using the Wix platform, featuring structured data that enhances SEO and business information visibility. The technical infrastructure is modern and includes common analytics and tracking tools such as Google Analytics, Facebook Pixel, and Inspectlet, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and some JavaScript hardening, but lacks explicit security headers and visible privacy or cookie policies, which are areas for improvement. Overall, the website presents a trustworthy business presence with room to enhance privacy compliance and security transparency.

O

Oreon OÜ

bestcredit.ee

52

BestCredit.ee is an established Estonian financial services company operating since 2011 under Oreon OÜ. The company offers a variety of loan products including small consumer loans, business loans, mortgage loans, guarantee loans, and construction loans. Their business model focuses on online lending with self-service features and loan calculators to facilitate customer engagement. The website targets both private individuals and businesses within Estonia, positioning itself as a reliable and professional lender with a clear regulatory license from the Estonian Financial Supervision Authority.

L

Luna Park Sydney

lunaparksydney.com

65

Luna Park Sydney is a well-established amusement and theme park located in Sydney, Australia, with a domain registered since 1999. The website offers comprehensive information about rides, ticketing options, immersive experiences, group bookings, and events, targeting families, tourists, and educational groups. The technical infrastructure is built on Adobe Experience Manager with integration of multiple modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Pixel. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and CSRF protections, though explicit security headers and cookie consent mechanisms are lacking, which could be improved for better compliance and security. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website scores well in content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores.

H

HansaLaw

hansalaw.ee

45

HansaLaw is an internationally recognized legal and tax advisory firm with over 10 years of experience, operating primarily in the Baltic region with offices in Tallinn, Riga, and Vilnius. The firm offers comprehensive legal consulting and conflict resolution services tailored to clients seeking expert legal advice. The website is built on WordPress using the Avada theme, incorporating modern web technologies and third-party marketing and analytics tools such as Google Analytics, Facebook Pixel, and Adform tracking. The site is well-designed, mobile-optimized, and provides clear navigation, although it lacks explicit privacy and cookie policies, which impacts its privacy compliance rating. Security posture is adequate with HTTPS enabled and good SSL configuration, but could be improved by enabling DNSSEC and adding security headers. No WAF or blocking mechanisms were detected, and the domain registration data is consistent with the business claims, supporting legitimacy.

B

BNI Eesti

bni.ee

54

BNI Eesti operates as the Estonian chapter of BNI, the world's leading business referral organization established globally in 1985. The website serves business professionals and entrepreneurs in Estonia, providing networking, referral generation, and business training services. The domain has been registered since 2010, aligning with the organization's established presence. The site uses a proprietary CMS and is hosted behind Cloudflare, leveraging modern web technologies including jQuery, Google Analytics, and Facebook Pixel for analytics and marketing. The website is well-structured, mobile-optimized, and presents consistent branding aligned with the global BNI identity. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and detailed privacy/security policies are absent. Contact information is primarily via contact forms, with no direct emails or phone numbers visible. Overall, the site is professional, trustworthy, and serves its business networking purpose effectively.

T

Tritech OÜ

tritech.ee

49

Tritech OÜ is a small Estonian manufacturing company specializing in mechanical engineering and CNC machining services, established in 2012. The company offers a range of services including mechanical engineering design, CNC turning and milling, product assembly, and customized mechanical solutions. Their target audience is industrial companies seeking high-quality machined parts and assembly services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, using modern tools such as Google Analytics and Facebook Pixel for marketing and tracking. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and formal security policies. Overall, the security posture is solid but could be improved by adding cookie consent mechanisms, security policies, and vulnerability disclosure information. The domain registration is consistent with the business claims, enhancing trustworthiness. Strategic recommendations include enhancing privacy compliance and security transparency to further build customer trust and regulatory adherence.

E

EIT Digital

eitdigital.eu

66

EIT Digital operates as Europe's largest digital innovation ecosystem, focusing on fostering a strong, inclusive, fair, and sustainable digital Europe. The organization facilitates collaboration among industry, academia, and startups to drive digital innovation, education, and entrepreneurship. Their market position is well established as a key player in the European technology sector, providing services that include ecosystem facilitation, education, and startup support. Technically, the website is built on TYPO3 CMS and integrates multiple modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, HubSpot, and Cookiebot for consent management. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with a well-structured and professional design. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, some security headers are not explicitly detected, and no privacy policy or terms of service pages were found in the provided content, which are areas for improvement. The WHOIS data is privacy protected, which is typical for organizations of this nature, and no suspicious patterns were identified. Overall, the website presents a professional and trustworthy digital presence with a strong business model and technical foundation. Strategic recommendations include enhancing privacy transparency, improving security header implementation, and providing clear contact information to bolster trust and compliance.

K

KUUKUUP OÜ

digipurk.ee

41

Digipurk is a small Estonian company specializing in robotics, automation, and Internet of Things services, combined with educational offerings such as programming courses and workshops for children and adults. The company also operates an e-commerce store selling robotics and electronics components. Their market position is that of a niche local provider focused on technology education and hobbyist products. The website is built on WordPress with WooCommerce, featuring modern technologies like Google reCAPTCHA v3 and Leaflet.js for maps. The site is well-structured, mobile-optimized, and uses HTTPS with no detected blocking or WAF challenges. Security practices include bot protection and no visible sensitive data exposure, though security headers are not explicitly present. Privacy compliance is partial, with a privacy policy but no cookie consent mechanism. Overall, the site demonstrates good business credibility and technical maturity for a small technology education and retail business.

B

Baklavacı Güllüoğlu

gulluoglu.com

61

Baklavacı Güllüoğlu operates a well-established e-commerce website specializing in traditional Turkish desserts such as baklava, kadayıf, lokum, and chocolates. The company targets consumers interested in authentic Turkish sweets and offers a variety of products with online ordering and delivery options. The website demonstrates a good level of digital maturity with modern technologies including jQuery, Google Tag Manager, Facebook Pixel, and Google Analytics integrated for marketing and analytics purposes. The site is built on the Hipotenus e-commerce platform, indicating a professional infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some HTTP security headers are not explicitly detected. Privacy compliance is robust, with a comprehensive privacy policy and cookie consent banner supporting GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts overall trustworthiness. No evidence of WAF or blocking mechanisms was found, allowing full content accessibility and analysis.

The website seo.com.au is currently a parked domain with minimal content indicating it is available for purchase or joint venture. There is no active business operation or service offering visible on the site. The primary contact method is a single email address. The technical infrastructure includes use of Google Tag Manager, Google Analytics, and Facebook Pixel for tracking, hosted on AWS DNS servers. However, the site lacks security headers, DNSSEC, and visible HTTPS confirmation, which reduces its security posture. Privacy compliance is poor, with no privacy or cookie policies present despite extensive tracking scripts. Overall, the site is low in content quality and business credibility, reflecting its parked status rather than an operational business.

D

Devtailor

devtailor.com

59

Devtailor is a technology company specializing in turnkey software development services and white label products such as license plate recognition, facial recognition, and tvOS applications. Founded in 2015, the company targets businesses seeking scalable software solutions and innovative technology products. Their market position is that of a niche provider with a focus on quality and specialized offerings. Technically, the website is built on Angular 13 with server-side prerendering, uses modern tracking and analytics tools, and is hosted likely on AWS infrastructure. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks published security policies, security headers, and incident response information. Privacy compliance is partial, with a cookie consent mechanism but no privacy policy or terms of service pages. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

B

Brokeree Solutions

brokeree.com

64

Brokeree Solutions is a technology provider specializing in turnkey software solutions for retail brokers, focusing on enhancing trading platforms such as MetaTrader 4, MetaTrader 5, cTrader, and DXtrade. With over a decade of experience and a client base of hundreds of brokerages, the company offers products like liquidity bridges, PAMM systems, social trading platforms, and account management tools tailored for the forex brokerage industry. Their market position is solid, supported by a professional website, client logos, and active social media presence. Technically, the website is built on WordPress with modern integrations including Gravity Forms for data collection, Google Tag Manager, and various tracking pixels. Hosting and DNS services leverage Cloudflare, ensuring good performance and security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Consent management is implemented via ConsentManager, indicating attention to privacy compliance. Security posture is good with HTTPS enforced, use of reCAPTCHA v3 on forms, and domain transfer protection. However, DNSSEC is not enabled, and some security headers are missing. There is no visible security policy or incident response information, which could be improved to enhance trust and compliance. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Brokeree Solutions presents a trustworthy and professional online presence with room for improvement in privacy policy transparency and security best practices. Strategic enhancements in these areas would strengthen their compliance and security posture, supporting their business credibility and customer trust.

L

LenovoArvutid

lenovoarvutid.ee

43

LenovoArvutid is an Estonian e-commerce retailer specializing in business-class Lenovo ThinkPad laptops and related accessories. The website targets business customers and individual buyers seeking high-quality Lenovo laptops, offering products such as the ThinkPad X1 Carbon, T14, and P14 series. The business model focuses on online sales with additional services like leasing and installment payment options. The company has been operating since 2017 and maintains a consistent brand presence with a professional website design and clear navigation.

E

Emerante

emerante.ee

41

Emerante is a small Estonian retail and service company specializing in home interior furnishings, offering full services from project planning to installation and furniture maintenance. The website reflects a local market focus with a professional and consistent brand presence. Technically, the site is built on WordPress with WooCommerce, leveraging modern libraries and frameworks such as Bootstrap, jQuery, and Owl Carousel. The site is mobile-optimized and uses SSL with good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms pages. Overall, the site is trustworthy and functional but could improve transparency and security documentation.

Z

Zaproo

zaproo.com

71

Zaproo is a specialized eCommerce and custom web application development company focusing on Magento2 and Vue Storefront technologies. Positioned as a Magento Solution Partner and Vue Storefront Partner, Zaproo offers a range of services including UI/UX design, eCommerce development, digital marketing, custom development, DevOps support, and training. Their target audience primarily consists of businesses seeking tailored eCommerce solutions and digital marketing support. The website demonstrates a professional design with clear navigation and mobile responsiveness, reflecting a moderate level of digital maturity. Technically, the site leverages modern frameworks such as Vue.js and Nuxt.js for the frontend, integrated with Magento backend systems. It employs common analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, alongside reCAPTCHA for form security. Performance is moderate with good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, while the website is professionally presented and technologically sound, the lack of WHOIS data and explicit privacy policy reduces its trust and compliance posture. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance credibility and security.

D

Data Protected

lambda.ge

55

Lambda Gaming is a small technology company specializing in the development and publishing of retro and indie video games. Founded in 2022, the company targets gamers interested in nostalgic 8-bit style games and maintains an active online presence through its website, blog, and career opportunities. The business model focuses on direct engagement with its community and game distribution via digital platforms. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted with Cloudflare DNS and secured with HTTPS. The site demonstrates good mobile optimization and moderate performance, with standard SEO and accessibility features. Security posture is solid with HTTPS enforcement and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy and cookie policies are comprehensive and GDPR compliant, with user tracking via Google Analytics and Facebook Pixel at a moderate level. Overall, the website is professional and trustworthy, with room for improvement in security transparency and accessibility compliance.

M

Moneyzen

moneyzen.eu

56

Moneyzen is an Estonian-based online lending and investment platform that offers a variety of personal loans and investment opportunities. The company positions itself as a transparent and empathetic financial intermediary connecting borrowers and investors. The website is professionally designed using WordPress and Elementor, featuring loan and investment calculators, clear navigation, and multilingual support. The business targets individuals seeking flexible loans and investors looking for peer-to-peer lending options. The platform has a clear market niche in Estonia's finance sector with a small company size and a consistent brand presence. Technically, the website employs modern web technologies including WordPress 6.8.1, Elementor 3.29.2, Yoast SEO, Google Tag Manager, Facebook Pixel, Hotjar, and reCAPTCHA for security and analytics. The site is mobile-optimized and SEO-friendly, though some security headers could be enhanced. Cookie consent mechanisms and privacy policies indicate good GDPR compliance. From a security perspective, the site uses HTTPS with good SSL configuration and implements standard best practices such as reCAPTCHA and cookie consent. However, explicit security policies and incident response information are not found, and security headers like CSP and X-Frame-Options are not explicitly detected. No vulnerabilities or exposed sensitive data were identified in the HTML content. Overall, Moneyzen presents a trustworthy and professional online financial service with solid technical infrastructure and privacy compliance. Strategic improvements in security headers and incident response transparency would further strengthen its security posture and user trust.

K

Kinnisvarakool OÜ

kinnisvarakool.ee

50

Kinnisvarakool OÜ operates as a specialized real estate education provider in Estonia, offering a wide range of training courses, consulting services, and publications aimed at real estate professionals, investors, and related stakeholders. The company maintains a strong market position through cooperation agreements with leading Estonian real estate agencies and provides hybrid learning options to accommodate diverse learner preferences. The website is well-structured, content-rich, and professionally presented, targeting real estate agents, investors, developers, and individuals interested in real estate knowledge. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins and tracking technologies such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though there is room for improvement in security headers and formal security policies. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy in Estonian, but terms of service and incident response details are lacking. Overall, the site demonstrates a mature digital presence with good SEO and user experience, supporting the company's credibility and trustworthiness.

K

Kingivabrik OÜ

kingivabrik.ee

41

Kingivabrik OÜ operates a professional e-commerce website specializing in promotional and corporate gifts, offering a wide range of branded merchandise including writing instruments, souvenirs, gift sets, drinkware, textiles, and sweets. The company targets businesses and organizations looking for customized logo products to enhance brand visibility and employee recognition. With over 13 years of experience and a strong client base exceeding 10,000 companies, Kingivabrik holds a solid position in the Estonian retail market for promotional goods. The website is built on a WordPress platform using WooCommerce, enhanced by the Avia Framework and various plugins for e-commerce functionality, multilingual support, and marketing integrations. The technical infrastructure includes modern tracking and analytics tools such as Google Analytics and Facebook Pixel, alongside a live chat widget for customer support. The site demonstrates good mobile optimization, SEO practices, and user experience design, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and employs Google reCaptcha on its contact form to mitigate spam. Cookie consent mechanisms are implemented in compliance with GDPR, and privacy policies are clearly accessible. However, the site lacks explicit security headers and published security or incident response policies, which could be enhanced to strengthen its security posture. Overall, Kingivabrik's website reflects a trustworthy and professional business with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements in security headers and transparency around security policies would further enhance its risk profile and customer trust.

M

Merative

merge.com

75

Merative is an enterprise healthcare technology company specializing in medical imaging solutions, including radiology and cardiology software. The company holds a strong market position with top KLAS rankings and usage by leading US health systems. Their website demonstrates a mature digital presence built on HubSpot CMS, integrating advanced marketing and analytics tools. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response contacts are absent. The missing WHOIS data is a concern but does not detract significantly from the overall trustworthiness given the professional branding and content quality. Strategic recommendations include enhancing transparency around security policies and monitoring domain registration details.

M

Marimo Fashion

marimofashion.com

62

Marimo Fashion is a small, conscious luxury e-commerce brand specializing in women's ready-to-wear collections, bespoke garments, and styling services. The brand emphasizes sustainability, timeless style, and quality craftsmanship, targeting women seeking versatile and elegant fashion solutions. The website is built on Shopify using the Impulse theme, integrating multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Tidio Chat, reflecting a mature digital infrastructure. The site offers a good user experience with clear navigation and mobile optimization, though accessibility features are basic. From a security perspective, the website enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and security headers like Content Security Policy are missing, which could be improved. Privacy compliance is partial; while a terms and conditions page exists, no explicit cookie consent mechanism or privacy policy banner is detected, potentially exposing the business to GDPR compliance risks. Contact information is limited to forms and social media links, with no direct emails or phone numbers publicly listed. Overall, the website presents a professional and trustworthy front with moderate security and privacy posture. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence. The domain WHOIS data aligns well with the business claims, supporting legitimacy.

C

C&C EE OÜ (endine iDeal Group AS)

ideal.ee

51

iDeal (operated by C&C EE OÜ) is Estonia's largest reseller and service partner for Apple products, offering a comprehensive range of Apple devices and accessories through both e-commerce and physical stores. The company targets consumers, students, and business clients with services including device sales, repairs, trade-in programs, and financing options. The website demonstrates a mature digital infrastructure built on Magento with modern JavaScript frameworks and integrates multiple marketing and analytics tools. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

G

Gabriel Scientific OÜ

sleepangel-medical.com

46

Gabriel Scientific OÜ operates the SleepAngel Medical website, offering innovative medical barrier bedding products featuring patented PneumaPure® filter technology. Their products are certified as Class I Medical Devices in the EU, registered with the FDA, and approved by the SFDA, positioning them as a niche innovator in healthcare infection control. The company targets healthcare facilities and distributors, emphasizing sustainability and hygiene. The website is professionally designed using WordPress with Divi and Elementor, featuring multimedia content and clear navigation. Technical infrastructure includes modern web technologies, Google Analytics, and Facebook Pixel for marketing insights. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site reflects a trustworthy and credible business with room for enhanced privacy and security disclosures.

AS Eesti Pagar is a well-established Estonian bakery company founded in 2010, specializing in a wide range of bread, pastry, and frozen bakery products. The company serves retail consumers and export markets, positioning itself as a key player in the Estonian bakery sector. Their website reflects a professional and consistent brand image with clear product categorization and marketing efforts. Technically, the website is built on WordPress using modern frameworks and libraries such as Foundation, jQuery, and Slick Slider, with integrated marketing and analytics tools including Google Analytics, Facebook Pixel, and Mailchimp. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS with a cookie consent mechanism compliant with GDPR, but lacks explicit security policies and some security headers. WHOIS data confirms the domain's legitimacy and long-term presence, matching the business profile. Overall, the website demonstrates a mature digital presence with room for improvement in security transparency and incident response readiness.

O

OÜ MyFinancier

myf.ee

42

MyFinancier is a small Estonian company providing an intelligent personal finance assistant service that helps users analyze cash flows and gain detailed insights into asset distribution. The website is professionally designed using WordPress with Elementor and optimized for SEO and mobile devices. It targets Estonian individuals seeking financial management tools. The company maintains a consistent brand presence with active social media profiles on Facebook, LinkedIn, and YouTube. The domain is registered with Elkdata OÜ since 2018, aligning with the business age and location. Technically, the site uses modern web technologies, including Google Analytics and Facebook Pixel for analytics and marketing, with a compliant cookie consent mechanism.

S

Silma laseroperatsioon | KSA Silmakeskus

ksa.ee

64

KSA Silmakeskus is a specialized healthcare provider in Estonia focusing on eye laser surgery and related eye care services. The website presents a professional image with clear branding and a focus on delivering information about laser eye operations to potential patients. The business appears established since 2010, targeting individuals seeking vision correction without glasses or contact lenses. The site uses WordPress CMS with the Avada theme and integrates modern SEO and marketing tools to enhance visibility and user engagement. Technically, the site is well-structured, mobile-optimized, and employs GDPR-compliant cookie consent mechanisms, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is good, leveraging Cookiebot for consent management and linking to a comprehensive privacy policy. However, explicit contact information, terms of service, and security policies are not prominently available, which could be enhanced to improve trust and compliance. Overall, the site is trustworthy, professional, and well-positioned in its niche, with recommendations to bolster security policies and public contact channels for incident response.

X

xChange AS

changeinvest.com

72

Change Invest operates as a fintech investment platform offering a unified app for investing in cryptocurrencies, trading stocks, indices, commodities, and CFDs with leverage. The company targets retail investors primarily within the European Economic Area, emphasizing low fees, fast deposits, and regulatory compliance under Estonian and Dutch authorities. The platform boasts over 125,000 verified users and a broad asset offering, positioning itself as a competitive player in the EU fintech market. Technically, the website is built on Webflow CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Segment Analytics, and Adjust SDK. The site is mobile-optimized, fast-loading, and well-structured, providing an excellent user experience. However, some security best practices like explicit security headers are missing, and no incident response or vulnerability disclosure information is publicly available. From a security perspective, the platform enforces HTTPS, uses cold wallets for crypto custody, and provides public proof of reserves, indicating a mature security posture. Cookie consent mechanisms are implemented with opt-in features, supporting GDPR compliance. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which slightly reduces trustworthiness. Overall, Change Invest presents a professional, secure, and compliant fintech service with strong market positioning in the EU. Strategic improvements in transparency around security policies and WHOIS data would enhance trust and compliance further.

T

Trumpit Solutions OÜ

iteraction.ee

58

Trumpit Solutions OÜ is an Estonian IT service provider specializing in comprehensive IT solutions for small and medium-sized enterprises. With over 16 years of experience, the company offers a broad range of services including IT support, software development, IT security, Microsoft 365 business solutions, website development, and cloud services. The company positions itself as a reliable and experienced IT partner in the Estonian market, supported by a strong local presence and positive customer testimonials. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, and is hosted behind Cloudflare DNS services. The site is well-optimized for SEO and mobile devices, with good design and user experience. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are published. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website reflects a professional and credible business with room for improvement in privacy and security transparency.

R

Respo Haagised AS

respo.ee

46

Respo Haagised AS is a well-established Estonian company founded in 1990, specializing in the manufacturing and sale of trailers, accessories, and spare parts. It holds a market leader position in Estonia and is a significant player in the Baltic and Scandinavian regions. The company operates a modern e-commerce platform with multi-language support and offers innovative services such as 24/7 self-service trailer sales points. The website reflects a mature digital infrastructure built on Magento, integrating advanced tracking and marketing tools like Google Analytics, Facebook Pixel, and Hotjar. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, user-friendly, and trustworthy, supporting the company's business credibility and market presence.

G

GH Imaging

ghimaging.com

55

GH Imaging is a medium-sized manufacturing company specializing in large format digital printing products such as custom decals, vehicle wraps, banners, and rigid prints. The company operates under the Graphics House family umbrella, with multiple related subsidiaries supporting various product lines. The website is professionally designed using WordPress with Elementor and OceanWP theme, providing a good user experience and clear navigation. Contact information including phone number and physical address is prominently displayed, supporting business credibility. However, the absence of WHOIS data raises concerns about domain registration legitimacy. The website uses HTTPS and includes anti-spam and tracking technologies but lacks explicit privacy and cookie policies, which impacts privacy compliance scores.

R

RTT AS

rtt.ee

45

RTT AS is an established Estonian company specializing in retail technology and office supplies, with over 28 years of experience. The company offers a broad range of products including cash registers, printers, copiers, and consumables, alongside installation, maintenance, and training services. Their market position is that of a trusted local provider catering primarily to business customers in Estonia. The website reflects a mature e-commerce platform built on WordPress and WooCommerce, featuring multilingual support and a comprehensive product catalog. Technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and CookieYes for consent management. Security posture is solid with HTTPS enforced and reCAPTCHA integration, although explicit security policies and incident response contacts are not published. Privacy compliance is supported by a detailed cookie consent mechanism, but lacks a visible privacy policy page. Overall, the website is professional, user-friendly, and trustworthy, with room for improvement in formal policy disclosures and security header implementation.

Addenda OÜ is an Estonian-based professional training and consulting company established in 2010. The company offers a wide range of training courses, including construction, occupational safety, accounting, and legal topics, both in-person and via an e-learning platform called Addenda e-akadeemia. The website targets Estonian professionals and organizations seeking continuing education and compliance training. The business maintains a stable market position with a comprehensive course catalog and partnerships with local organizations. Technically, the website uses a custom CMS with legacy JavaScript libraries such as jQuery 1.11.1, and integrates common analytics and advertising tools like Google Analytics and Facebook Pixel. The site is mobile optimized and SEO friendly but lacks modern security headers and updated libraries. Security posture is moderate with HTTPS enabled but missing explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

F

Fort Aero

fort.aero

51

Fort Aero is a specialized aviation service provider focused on corporate jet management, sales, acquisition, maintenance, and charter services. Established since 1997, the company positions itself as a trusted and experienced player in the business aviation sector, primarily serving corporate jet owners and operators. The website reflects a professional and consistent brand image with comprehensive service descriptions and multiple contact channels. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and secure forms, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable due to privacy protection, which is common for this business type but slightly reduces trust. Overall, Fort Aero presents a credible and professional online presence with room for improvement in privacy and security transparency.

T

Taylor Corporation

taylorcommunications.com

70

Taylor Corporation operates a professional and comprehensive website offering commercial printing, marketing, packaging, labeling, and supply chain services primarily targeting business clients. The site is well-branded and positioned as an enterprise-level B2B service provider with a broad range of solutions. Technically, the website leverages HubSpot CMS and integrates multiple modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and LinkedIn Insight Tag, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security and incident response policies are not publicly visible. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. WHOIS data is unavailable or not returned for the queried domain, which raises some questions but the professional presentation and alignment with known Taylor Corporation branding mitigate concerns. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for its enterprise audience.